Legal
Privacy Policy
Last updated: May 27, 2026
SHUAQ is in early-access testing. This policy describes our current practices in plain language. A formally reviewed legal document will replace it before the public launch. If anything is unclear, please email us at info@shuaqgroup.org.
What we collect
- Your email address and display name (from sign-up).
- Your learning activity: lessons opened, exercises attempted, and quiz/test results.
- Optional feedback you send us through the feedback button or any survey.
- Usage data (page views, button clicks) via our analytics provider, used to improve the product — only if you accept analytics cookies. Browsing events are anonymous; events about your purchase or access status are linked to your account.
How we use it
- To run the course and show you your own progress.
- To send you account-related email (sign-in, password reset).
- To debug problems and improve the product.
- We do not sell your data, and we do not share personal data with advertisers.
Who can see your data
We use the service providers below to run SHUAQ. They process your data on our behalf, under their own privacy commitments, and only for the purpose listed. We do not sell your data and we do not share it with advertisers.
| Provider | What we use it for | What it handles |
|---|---|---|
| Supabase | Database and account sign-in | Your account, password (hashed), and all course progress |
| Vercel | Hosting for the website | Your IP address and request details when you visit |
| Railway | Hosting for our API | Requests your browser makes to our API, and server logs |
| Stripe | Payments and refunds | Your email and payment details. Card details go straight to Stripe — they never reach us |
| Resend | Account and course emails | Your email address and the contents of those emails |
| Sentry | Error monitoring | Technical error reports. Configured not to send personal details |
| PostHog | Product analytics — only if you accept analytics cookies | Which pages and features you use, tied to your account ID |
| “Sign in with Google”, if you choose it | Your Google email, name and profile picture | |
| YouTube (Google) | Hosting the lesson videos | Your IP address and device information when you play a video |
Where your data is stored. Our hosting, database and API all run on servers in the United States. If you use SHUAQ from Kazakhstan or elsewhere, your data is transferred to and processed in the US.
Video lessons. Lesson videos are embedded from YouTube. We use YouTube's privacy-enhanced mode, which does not set advertising cookies before you press play. Once you play a video, YouTube receives your IP address and device information and may set its own cookies under Google's privacy policy.
Analytics. Product analytics only run if you accept analytics cookies. If you decline, we do not send analytics events about you — including from our servers.
Your rights
You can request a copy of your data, request that we delete it, or ask us to correct anything we have wrong. Email info@shuaqgroup.org and we will respond within 30 days. You can also delete your account from the Profile page.
Contact
SHUAQ Group · info@shuaqgroup.org