Privacy Policy

DHAD Language & Culture Institute ("DHAD", "we") operates the learning platform at learndlc.com. This policy explains what data we collect, how we use and protect it, and your rights.

Contact: dadlanguageinstitute@gmail.com

1. Data we collect

• Account data: name, email and/or phone number, country, and password (stored hashed; nobody can read it).
• Student data: name, date of birth, country, level, booked lessons and attendance, homework, and certificates.
• Guardians: name, contact details, and the children linked to the account.
• Teachers: name, email, phone number, country, time zone, levels taught, and pay.
• Payments: amount, currency, status, and the transfer receipt image the user uploads. We never collect or store card numbers.
• Visit statistics: the pages you visit and how long, device, browser and operating system, country, and the site you came from, linked to your account when you are signed in. We do not store IP addresses or link contents in these statistics.

2. How we use data

• To create accounts and verify email addresses and phone numbers.
• To place students, schedule lessons, record attendance, and manage packages and balances.
• To create online lesson links (Google Meet or Zoom).
• To send service messages (booking and payment confirmations, lesson reminders, schedule changes) by email and WhatsApp.
• To review payments and calculate teacher pay.
• To show package prices for your country.
• We do not sell your data or use it for advertising.

3. Google user data (teachers who connect Google Meet)

When a teacher connects their Google account, we request only:

• The Google account's email address, to show the teacher which account is connected.
• Permission to create Google Meet meetings (meetings.space.created), to create a Meet link for each lesson the teacher teaches and to manage only the meetings the app created.

We do not access Gmail, Google Drive, Calendar, Contacts, or any other data in the Google account.

The access tokens Google issues are stored encrypted on our servers and are used only to create lesson meetings. A teacher can disconnect at any time from the platform's "Connections" page; we then ask Google to revoke the access and stop using the tokens. Access can also be removed from the Google Account (Security → Third-party connections).

DHAD's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

4. Zoom

When a teacher connects Zoom, we request only permission to read basic user details and to create, read, and delete lesson meetings. Tokens are stored encrypted, and the connection can be removed at any time from the "Connections" page.

5. Who we share data with

We use service providers only to run the platform:

• Render: website and database hosting (Frankfurt, Germany).
• Cloudflare: site protection and storage of uploaded files.
• Google: Google Meet, and the email the institute sends.
• Zoom: lesson meetings for teachers who choose it.
• Meta (WhatsApp): phone number verification and service messages.

Our hosting and protection providers may record IP addresses in their technical logs for security. We may disclose data where the law requires it.

6. Children

Guardians add their children from their own account, and a child added by a guardian has no sign-in of their own. The "student" sign-up option is for adults studying for themselves. If we learn that a minor signed up on their own, we contact their guardian or delete the account. Children's data is used only to provide lessons.

7. Security and retention

• Connections to the site are encrypted (HTTPS); passwords and connection tokens are stored encrypted; staff access is role-based.
• We keep data while the account exists.
• On a deletion request: if a student's or guardian's account has no study or payment activity (payments, packages, lessons, homework, certificates, or uploaded files), we delete the account and its data permanently.
• If the account has activity, we keep the related records, as they are part of the institute's financial and educational records, and we correct any inaccurate data on request.
• A teacher's account is deactivated on request, and their lesson and pay records are kept for the same reason.

8. Your rights

You can request a copy of your data, its correction or deletion (as described in section 7), or the disconnection of Google or Zoom, by writing to: dadlanguageinstitute@gmail.com

9. Cookies

We use essential cookies for sign-in, security and language, and one first-party cookie for visit statistics. Your light or dark theme choice is saved in your browser only. We use no advertising cookies and no third-party trackers.

10. Changes

We may update this policy and will publish the new date on this page.