InterfaceLab OÜ
Privacy Policy
Last updated: 14 October 2026
This policy explains, in plain language, what we do with your personal data, why, and what you can ask us to do. It follows Saudi Arabia's Personal Data Protection Law (PDPL) and, for anyone in Europe, the GDPR.
1. Who is responsible
The controller of your data is InterfaceLab OÜ, registry code 17448288, registered office Harju maakond, Tallinn, Kesklinna linnaosa, Tartu mnt 67/1-13b, Estonia. Contact us about privacy at contact@jahziah.app.
2. What we collect
- Account: your email address and an encrypted password.
- Study profile: the name you enter, your university, your discipline and your exam date.
- Study activity: the questions you answer, your confidence, bookmarks, notes, mock results and streaks.
- Billing status: your plan and its status. Card details are handled only by Stripe and never reach us.
- Messages you send us through the contact or refund forms.
- Basic technical data such as language, and — only if enabled — anonymised usage analytics.
3. Why we use it and our legal basis
- To provide the app and keep your progress (performance of our contract with you).
- To take payment and manage your subscription and refunds (contract and legal duties).
- To secure the service, prevent abuse and fix problems (our legitimate interest).
- To measure and improve the app, only with your consent where consent is required.
- To meet legal, tax and accounting obligations.
We do not use your answers or personal data for advertising, and we do not sell it.
4. What is required and what is optional
An email address and password are required to create an account. Your name, university, discipline and exam date are optional and only shape your experience. Without an account you can still read the public pages.
5. Payment information
Payments are processed by Stripe. Your full card details are entered on Stripe and never touch our servers; we store only a Stripe customer reference and your plan status so billing and access work.
6. Who processes it
- Supabase — database and sign-in.
- Stripe — payments, invoices and subscription management.
- Vercel — website hosting.
- Google Analytics / Microsoft Clarity — only if product analytics is switched on, and only with appropriate consent.
These providers act on our instructions. We may also disclose data where the law requires it.
7. Where your data is stored
Our providers may store and process data on servers outside Saudi Arabia. Where data is transferred outside the Kingdom, we rely on the providers' contractual safeguards for an adequate level of protection.
8. How long we keep it
We keep your account and study data while your account exists. When you delete your account we remove it within 30 days. We keep certain billing records for as long as tax and accounting law requires.
9. Your rights
You can ask to see, correct or delete your data, get a copy, withdraw consent, or object to certain processing. Export your progress and Request account deletion are in Account & settings. For anything else, email us. We reply within 30 days.
In Saudi Arabia you may also complain to the competent authority (SDAIA). In Europe you may complain to your local supervisory authority.
10. Cookies and analytics
We use a small cookie to remember your language choice and to keep you signed in. We also use Google Analytics and Microsoft Clarity to understand, in aggregate, how the site and app are used; Clarity can record anonymised sessions (clicks, scrolling and page layout, with text masked). Both run only with your consent: until you choose Allow in the consent bar, Google Analytics sets no cookies and receives only cookieless signals, and Clarity is not loaded at all. You can change your choice at any time through Cookie settings at the bottom of the site, and you can block cookies in your browser without losing access to your account.
11. Security
We protect your data with encryption in transit, access controls, and by keeping card data out of our systems. No system is perfectly secure, but we take reasonable and appropriate measures for data of this kind.
12. Children
The app is for university students preparing to graduate and is not directed at children.
13. Changes and contact
We may update this policy; the date at the top shows when it last changed, and we will tell you about material changes. For any privacy question or request, email contact@jahziah.app.
Contact us
Written questions about this page, billing or your data are welcome. We reply within 2 working days.
- contact@jahziah.app· Support, billing and refunds
- info@jahziah.app· General enquiries
InterfaceLab OÜ · Registry code 17448288 · Harju maakond, Tallinn, Kesklinna linnaosa, Tartu mnt 67/1-13b, Estonia