Who we are
Manhaj AI is a study app for the Iraqi national curriculum. [REVIEW: legal entity name and registered address to be inserted before publication.] If you have a question about your child’s information, contact us using the details on the Support page.
This is an app used by children
Manhaj AI is designed for school students, including young children. We collect as little as we can, we do not require an email address or a phone number from a child, and we do not show advertising.
What we collect for a child’s account
A username chosen by the child or their parent; a four-digit PIN, which is stored only as a cryptographic hash and can never be read back by us; an avatar, either a picture the child chose from the app or a photo they uploaded; optionally, a grown-up’s contact detail used solely to reset a forgotten PIN; the grade and subjects they are enrolled in; their study activity, which means test answers, scores and which pages and videos they have opened; the notes, highlights and drawings they make on pages; and their conversations with the AI tutor.
What we collect about the device
To keep an account safe we record which devices have signed in — a device identifier generated by the app, a device name such as “iPhone”, and when it was last used. If push notifications are switched on we also store a notification token for that device and the app’s language, so notifications arrive in the right language. We do not collect a phone’s advertising identifier and we do not track your child across other apps or websites.
Conversations with the tutor are kept for safety
What a child asks the AI tutor, and what it answers, is recorded on our servers. This is a child-safety measure: it lets us check that the tutor is behaving appropriately and respond if a child writes something that suggests they are at risk. These records are kept for one school year by default and are then removed. They are not used for advertising and are not sold. [REVIEW: confirm the retention period you want to commit to publicly — the current default in the system is 365 days.]
Parental consent and linking
A parent links to a child’s account by scanning a code shown on the child’s own device. The link therefore requires physical access to the child’s phone at that moment; nobody can attach themselves to a child’s account remotely. A parent can unlink at any time. [REVIEW: whether you additionally require documented parental consent at sign-up is a legal decision for your jurisdiction and is not currently enforced by the app.]
What a parent can see
A linked parent can see their child’s subjects, test results, chapter-by-chapter progress, and a weekly summary. A parent does not see the private notes and drawings the child makes on pages, and does not see the content of tutor conversations through the app. A parent can request a full export, which does include that material — see below.
Getting a copy of your child’s information
A linked parent can request an export of their child’s account. It contains their profile, enrolment, annotations and notes, and their tutor conversations. The export is provided as a file through a link that expires. This is not a paid feature.
Deleting an account
A linked parent can ask for a child’s account to be closed. When they do, the account is immediately deactivated and a 30-day period begins during which nothing is deleted and the request can be cancelled. After 30 days the account and its associated information are permanently deleted. We recommend requesting an export first, because after deletion the information cannot be recovered.
Who else sees this information
We use third-party services to run the app: cloud hosting for our servers and database; an AI provider that processes tutor questions; a speech provider that turns page text into audio; and a notification service to deliver push notifications. These providers process information on our behalf in order to deliver the feature you asked for. We do not sell your child’s information, and we do not share it for advertising. [REVIEW: before publication, list the named providers and the countries their processing takes place in — some app-store reviewers and some parents will ask.]
Where information is kept
[REVIEW: state the hosting region(s) here once confirmed.] Information is transmitted over encrypted connections.
Teachers and schools
A teacher can see progress only for students an administrator has explicitly granted them. Teachers cannot add themselves to a student or a class.
Changes to this policy
If we change this policy in a way that materially affects your child’s information, we will update the date at the top and, where the change is significant, tell you in the app.
Contact
Questions about your child’s information, an export, or deletion can be sent to the contact details on our Support page, and we will respond.