Privacy Policy

This Privacy Policy explains how Soualy("سؤالي", "we", "us") collects, uses, stores, and shares personal data when you use our website and services (the "Service"). The Service is operated by Ahmed Alaa, an individual based in Egypt, trading as Soualy.

By using the Service, you acknowledge this Policy. If you do not agree, please do not use the Service. For the rules governing use of the Service, see our Terms of Service.

1. Who is responsible for your data?

The data controller for personal data processed through the Service is Ahmed Alaa (Soualy), Egypt. Contact: phone / WhatsApp +20 155 645 8620, WhatsApp.

2. What data we collect

Depending on how you use the Service, we may process:

• Account and profile data: first and last name, Egyptian mobile phone number, password (stored using secure hashing via our authentication provider), subject(s) taught, school years, and teaching language preferences.
• Verification data: phone number and verification status processed through our SMS / one-time-password provider (Akedly) to reduce fraud and secure sign-up.
• Usage and content data: generation requests, prompts and parameters you submit, AI-generated outputs, conversation or session metadata, export activity, and usage quotas (for example, questions generated in a billing period).
• Technical data: IP address, device and browser type, approximate location derived from IP, timestamps, and server logs needed for security, debugging, and reliability.
• Payment-related data: when you pay, Kashier processes payment details. We typically receive transaction references, amounts, status, and limited billing metadata—not your full card number.

We do not intentionally collect special categories of data (such as health data). Please do not submit such information in prompts or profile fields.

3. How we use personal data

We use data to:

• Provide, operate, and maintain the Service (authentication, quotas, exports, support).
• Process payments and prevent fraud or abuse.
• Run and improve AI features by sending necessary inputs to our AI provider (Google Gemini or other models we configure) and storing results for your account history.
• Comply with legal obligations and enforce our Terms of Service.
• Communicate with you about the Service (for example, security or billing notices). We do not send marketing emails unless you opt in where required.

4. Legal bases (summary)

Where laws such as the GDPR apply, we rely on performance of a contract (to deliver the Service you request), legitimate interests (for example, securing accounts, improving reliability, and preventing abuse—balanced against your rights), and legal obligation where required. Where consent is required for a specific activity, we will ask separately.

5. Cookies and similar technologies

We use cookies and similar technologies as needed for the Service to function—for example, to keep you signed in, protect against cross-site request forgery where implemented, and remember essential preferences. Our hosting provider may also collect privacy-friendly usage and performance metrics (for example Vercel Analytics and Vercel Speed Insights) to understand traffic and performance. We do not currently use advertising pixels (such as Meta Pixel) or third-party ad profiling on the Service; if we add them later, we will update this Policy and, where required, obtain consent before non-essential tracking.

6. Who we share data with (processors)

We use trusted service providers who process data on our behalf under appropriate safeguards. These include, depending on the feature you use:

• Supabase — authentication and database hosting for accounts, profiles, and application data.
• Vercel — hosting and delivery of the web application, and (where enabled) aggregated analytics and speed metrics as described in Section 5.
• Google(Gemini / Vertex or related APIs) — AI inference; your prompts and contextual data may be transmitted to Google's systems subject to Google's terms and policies.
• Akedly — phone verification and SMS delivery.
• Kashier — payment processing.

We may also disclose information if required by law, court order, or to protect the rights, safety, or security of users, the public, or the Service.

7. International transfers

Our providers may process data in Egypt and other countries (including the United States, the European Economic Area, or other regions where they operate). Where required, we rely on appropriate safeguards such as standard contractual clauses or provider certifications, in addition to technical and organizational measures.

8. Retention

We keep personal data only as long as needed for the purposes above. For example, we retain account data while your account is active; after you request deletion, we delete or anonymize personal data within a reasonable period unless a longer retention is necessary for legal claims, security logs, or compliance. Backups may persist for a limited time before being overwritten.

9. Security

We implement reasonable technical and organizational measures to protect personal data (including encryption in transit, access controls, and secure handling of secrets). No method of transmission or storage is 100% secure; we encourage strong passwords and prompt reporting of suspected incidents.

10. Your rights

Depending on your location, you may have rights to access, correct, delete, or export your personal data, and to object to or restrict certain processing. To exercise these rights, contact us using the details in Section 1. We may need to verify your identity before fulfilling requests. You may also have the right to lodge a complaint with a supervisory authority in your country.

11. Children

The Service is aimed at professional educators and is not directed at children. We do not knowingly collect personal data from anyone under 18. If you believe we have collected data from a child, contact us and we will take appropriate steps to delete it.

12. Changes to this Policy

We may update this Privacy Policy from time to time. We will post the new version on this page and change the "Last updated" date. For material changes, we will provide additional notice where required by law.

13. Contact

Questions about privacy: phone / WhatsApp +20 155 645 8620, WhatsApp.

Legal notice

This Privacy Policy is a practical description of our current practices. It is not legal advice. Have a qualified lawyer in Egypt (and elsewhere if you serve users in other countries) review it for your compliance needs.