Taqwa Institute

Student privacy & retention

Effective September 14, 2026. This notice covers Arabic 30, Arabic 180 and Madrasah at Taqwa Institute, 1642 S Parker Rd, Suite 205. Privacy contact: tquranarabic@gmail.com, 720-466-0722.

Arabic 30 records

Arabic 30 additionally records course registration, referral names voluntarily supplied for a discount, referral code, enrollment source, marketing consent, lesson progress, each submitted answer and grade, review recommendations, and successful Arabic-account sign-ins. Referral names are not added to an email list and are not contacted automatically. Student records are backed up privately to the institute’s Arabic 30 Google spreadsheet. Course assessments use fixed answer keys; Arabic 30 work is not sent to an AI grading provider. Device speech, when available, uses your browser’s speech service.

What we collect and why

We use account identity, email, declared age, enrollment, submitted work, grades and feedback to deliver lessons and maintain progress. Madrasah also uses school grade, gender and learning format for placement and class administration, plus guardian contact details for children. Provide optional phone/address information only when needed for arrangements with the institute. We do not need identity-document uploads, payment-card numbers, or sensitive personal details in homework.

Parents and students under 18

A parent or legal guardian completes registration for a student under 18 by typing their full name and checking the consent box. We record this declaration, its date, the privacy-notice version and its connection to the child’s account. This is not independent identity verification. Each child has a separate consent record. Existing students without a recorded age/consent check must complete it before new learning activity is processed. Staff handles age corrections.

Multiple-choice assessments use fixed answer keys for automatic scoring. Teachers assess other work and can review any score. Work from students under 18 is not sent to OpenAI for grading. Parents may review or correct their child’s records, withdraw consent, and request deletion. Withdrawing consent pauses further processing after identity verification. Read the parent notice.

Access and service providers

Students can see their own records. Assigned Madrasah teachers can see their students’ records; authorized administrators manage the institute. Staff sign in with their institute password; administrator access is also available through the verified institute owner account. Passwords are stored as one-way hashes. The portal uses Sites/Cloudflare hosting and private Google Drive/Sheets copies managed through tquranarabic@gmail.com. Google also delivers requested verification emails. These copies support teaching and administration; they are not public sharing folders.

Adults may opt into AI-assisted written assessment. When selected, written answers, including uploaded worksheet photos or PDFs, notes and relevant previous feedback may be sent to OpenAI against the course rubric. Names and email addresses from your profile are not intentionally included in the grading payload. Uploaded pages are sent as provided and may contain anything visible in the photo; crop out names, faces and other identifying information. API requests use store:false, but this is not a claim of Zero Data Retention: provider security retention may still apply. AI feedback can be mistaken; use the teacher-review request to challenge a score. Unclear worksheet photos, unsupported files and recordings require teacher assessment. An adult may ask to switch to teacher-only assessment.

Stripe handles checkout. The site retains payment references, amount and entitlement status, not full card numbers or bank credentials. Optional marketing consent is separate. We do not sell student information or use grades or religious-learning records to create advertising audiences.

Website measurement — updated September 28, 2026

The main website, www and learn.taqwa.institute use one first-party tracker. Public pages, including Hans Wehr and Salah Coach, record page loads, broad referral and screen-size categories, approximate country/region supplied by hosting, 30-second engagement, deep scrolling and course-link clicks. No raw IP, GPS, city, full referral URL, query string, form value, dictionary search, prayer choice or private lesson answer is stored in this reporting.

Basic counts use a fresh random identifier for each page load. If you choose “Allow visitor analytics”, optional first-party cookies connect visits across these Taqwa domains: a random browser identifier lasts up to 180 days and a session identifier lasts 30 minutes after the last tracked page load. This lets us count consenting browsers, repeat visits and sessions, and link successful registration or checkout actions to confirmed course payments. A minimal internal account reference connects those actions to enrollment records, not to grades or homework. We do not infer visitor age or gender, share this browsing information with advertising providers, or build advertising audiences.

You can select “Basic counts only” or change your choice using Analytics preferences on public pages or this privacy page. Changing to basic counts clears the optional analytics cookies and stops future linking; previously collected records are not automatically erased. Contact us for a data deletion request. Do Not Track and Global Privacy Control signals stop collection. Authenticated staff and recognized bots are excluded. Browser counts are not a count of identified people and may miss blocked requests or count one person on several devices.

Only administrators can see aggregate reporting. Optional browser/session and enrollment-attribution records are reviewed at least annually for deletion when no longer needed; cookie expiration alone does not delete server records. Account deletion requests include linked enrollment-attribution rows. Staff may enter aggregate external channel reports for comparison. Missing history and unavailable demographics are never estimated.

Retention schedule

The scheduled retention reviews are an administrator responsibility, not a claim that Google or hosting automatically erases every copy on those dates.

Access, correction and deletion

Use Arabic 180 Support & privacy, Madrasah Support & privacy, or contact us if you cannot sign in. We verify the adult student or guardian before exporting or removing records. We aim to acknowledge requests within 2 business days and complete ordinary deletion requests within 30 days after verification. If a legal hold or provider limitation prevents full deletion, we explain what remains, why, and the next review date.

Staff first pauses further processing. The deletion checklist covers uploaded files and learning records on the site, Google Drive folders and Trash, Sheets rows and revision/shared/exported copies, and the applicable backup schedule. Staff must record Google cleanup and backup evidence before erasing site learning data. A synced file is not deleted merely by removing the original. Backups may remain until the provider’s verified expiration date; we do not promise immediate deletion from immutable backups. A deletion must be reapplied before any restored data returns to normal use.

Minimal request history, a pseudonymous deletion marker preventing re-sync, and necessary payment/entitlement records may remain. Removing learning records is irreversible and does not itself request a refund. We explain how to restore access to purchased content without restoring deleted work. For parent requests outside a student account, contact the institute through your previously verified email.