Privacy Policy | Muhammad Teaches Moroccan Arabic

Effective date: 7 Nov 2025
Data controller: Mohamed Moukasse (trading as Muhammad Teaches Arabic / Darija Learner Pro)
Address: Marrakesh, Morocco
Email: [email protected]
Website: muhammadteachesarabic.com

We teach Moroccan Arabic (Darija) with sincerity and modesty. This policy explains what data we collect, why we collect it, how long we keep it, and your rights.

1) What we collect

Account – name, email, password (hashed), country.
Subscriptions & payments – purchase history, amounts, currency (EUR). Cards are processed by Stripe or PayPal; we do not store card numbers.
Learning data – lesson progress, exercise and quiz results, comments on lessons.
Live sessions & community – video/audio recordings of some speaking sessions; messages and voice notes in our WhatsApp group.
Bookings – preferred times and metadata submitted via Zcal.
Device/technical – device type and basic event data via our platform (Systeme.io).
Website/blog analytics – limited diagnostics via Google Search Console.
Support & email – messages you send us; newsletter and class reminders.

We do not collect sensitive categories unless you share them voluntarily (e.g., in a message). Please avoid sharing private financial details in class or chat.

2) Why we use your data (lawful bases under GDPR)

Provide the service (Contract): create your account, deliver lessons, track progress, run live sessions, process payments, provide replays and community updates.
Improve & secure (Legitimate interests): troubleshoot, prevent abuse, plan better lessons, and keep the platform safe.
Newsletters & class reminders (Consent/Legitimate interests): send helpful emails about Darija learning and your membership. You can unsubscribe anytime.
Marketing clips from classes (Consent): we may publish short clips; female students’ faces are blurred in public clips; male faces are not. If you prefer not to appear, keep your camera off and inform us at the start of class.
Legal compliance (Legal obligation): bookkeeping, taxes, responding to lawful requests.

3) Recordings & replays

Some live speaking sessions are recorded for member replays.
Edited clips may be shared on YouTube/Instagram/TikTok for testimonials and marketing. We blur female faces in public clips.
If you appear and later want a clip removed (where feasible), email us.

4) Sharing with third parties (processors)

We use reputable providers that process data on our behalf:

Systeme.io – course platform/checkout, device info.
Stripe and PayPal – payments.
Zcal – booking of live speaking sessions.
Zoom / Google Meet – video classes.
Google (Search Console) – site/search diagnostics.
WhatsApp – private community group.

We do not sell your personal data.

5) International transfers

Your data may be processed outside your country (e.g., EU/UK → US) by our processors. We rely on appropriate safeguards such as Standard Contractual Clauses and provider certifications where required.

6) Cookies & tracking

We keep cookies minimal and essential for sign‑in and platform functions.
No advertising or retargeting pixels.
EU/UK visitors will see a cookie banner that explains essentials and offers a simple choice.

Cookie banner text (you can use this on your site):
“🍪 We use essential cookies to run Darija Learner Pro and to understand basic usage. We don’t run ads. By continuing, you agree to our Terms and Privacy Policy.”
Buttons: Accept · Settings (where users can disable non‑essential cookies, if any are introduced later).

7) How long we keep data

Account, purchases, and progress: while your account is active, and as required for bookkeeping/tax (generally 5–10 years depending on law).
Class recordings: kept indefinitely unless you request removal of a clip you appear in (feasible removals).
Community messages/voice notes: retained as part of group history unless you delete them or request removal.
Support emails: up to 24 months for reference.

8) Your choices & rights (applied globally)

You may access, correct, delete, or export your personal information, and you may object to or restrict certain processing. You can unsubscribe from marketing emails anytime.

Request any of the above at [email protected] using the email tied to your account. We aim to respond within 24 hours and complete deletion requests within 24 hours, subject to lawful record‑keeping.

California residents (CCPA/CPRA): you have the right to know, delete, and not be discriminated against for exercising your rights. We do not sell or share personal information for cross‑context behavioral advertising.

9) Security

We use HTTPS, reputable processors, least‑privilege staff access, and strong passwords/2FA where available. No system is perfect, but we work to protect your data.

10) Children

The school is for 16+. Ages 13–15 may join only with a parent/guardian’s consent and supervision. Under‑13s may not use the service.

11) Third‑party links

Our site may link to other websites (e.g., YouTube, Instagram, TikTok). Their policies apply there.

12) Contact & complaints

For any privacy questions or requests, email [email protected]. If we cannot resolve your concern, you can contact your local data protection authority.

13) Changes to this Policy

We’ll update this policy when needed and post the new effective date. Substantial changes will be announced by email or a site banner

We speak plainly and try to be helpful. This policy is intended to meet global best practices (GDPR/CCPA). Please consult a qualified lawyer in your jurisdiction for any formal legal review.