Privacy Policy

Who is responsible for your data

Melekher runs this online English-learning platform and decides how the personal data described below is used. You can reach us at any time through the Contact page.

The data we collect

• Account data: your name or display name, email address, password (stored only in hashed form), optional profile picture and preferred language.
• Sign-in with Google: if you choose "Continue with Google", we receive your name, email address and profile picture from Google. We never receive your Google password.
• Learning data: the courses and lessons you open, your progress and video position, the notes you write, your level, and your answers and scores in the placement test and course tests.
• Certificates: the certificates issued to you (serial number, course, level, score and date).
• Payment data: the plan you buy, the amount, the date and the status or reference returned by our payment provider ClicToPay. You enter your card details on the provider's secure page: we never see or store them.
• Messages: your name, email address and message when you write to us through the contact form.
• Technical data: IP address, browser type, requested pages and date and time, kept in server logs for security and troubleshooting.

Why we use your data

• To create and run your account and to give you access to the courses, lessons and tests you are entitled to (performance of our contract with you).
• To take payments, activate your access, and issue and verify your certificates (performance of our contract and legal obligations).
• To answer your messages and give you support.
• To keep the site secure and to prevent fraud and abuse (our legitimate interests).
• To understand how the platform is used and to improve it, using aggregated figures (our legitimate interests).

We do not sell your personal data and we do not use it for third-party advertising.

Cookies and local storage

We only use what the site needs to work:

• Session cookie: keeps you signed in while you browse.
• Language cookie (me_language): remembers the language you chose, for one year.
• Theme setting: your light or dark mode choice is saved in your browser's local storage.

We do not use advertising or tracking cookies. Some content comes from other companies and may set their own cookies once it loads: lesson videos hosted on YouTube, the icon font served by Google Fonts, and the chat assistant offered to signed-in members. Their own privacy policies apply to that content. You can block or delete cookies in your browser settings, but you will not be able to stay signed in without the session cookie.

Who we share data with

We share data only with providers who help us run the service, and only what they need:

• our hosting provider, which stores the site and its database;
• ClicToPay, which processes card payments;
• Google, when you use "Continue with Google" and for the icon font;
• YouTube, for lesson videos;
• the provider of the chat assistant;
• public authorities, when the law requires it.

Certificate verification. Anyone who has the serial number of a certificate (for example from the PDF or its link) can open the public verification page, which shows the holder's name, the course, the level, the score and the issue date. Only share your certificate with people you want to be able to check it.

Transfers outside your country

Some of our providers, such as Google, may process data in other countries. Where the law requires it, we rely on appropriate safeguards for these transfers.

How long we keep your data

• Account and learning data are kept while your account is active. If you ask us to close it, we delete or anonymise this data within a reasonable time.
• Payment records are kept for as long as accounting and tax law requires.
• Certificate records are kept so that issued certificates can still be verified, unless you ask for them to be removed and the law allows it.
• Messages sent through the contact form are kept for as long as needed to deal with your request.
• Server logs are kept for a limited period for security purposes.

Your rights

Depending on the law that applies to you (including Tunisian Organic Law No. 2004-63 on the protection of personal data and, where relevant, the GDPR), you can ask us to give you access to your data, correct it, delete it, restrict or object to its use, and receive a copy of it. You can also withdraw a consent you gave, at any time. To exercise a right, write to us through the Contact page; we may ask you to prove your identity and we will answer within one month. If you are not satisfied with our answer, you can complain to your data-protection authority (in Tunisia, the INPDP).

Security

The site is served over HTTPS, passwords are stored hashed, access to learning content and personal pages is restricted to the people allowed to see it, and card payments take place on the payment provider's secure page. No online service can be made completely risk-free, so please choose a strong password and keep it to yourself.

Children

The platform is not aimed at children under 16. Younger learners may only use it with the involvement of a parent or guardian. If we learn that we collected data from a child without the required consent, we delete it.

Changes to this policy

We may update this policy, for example when we add a feature or a provider. The "last updated" date at the top of the page always shows the current version, and we will tell you about important changes on the site. The terms of use are in the Terms and Conditions.

Contact

For any question about this policy or your personal data, use the Contact page.