Legal
Privacy Policy
Last updated: 4 May 2026
Who we are
Qalam is an online platform connecting students with verified Quran tutors for live, one-to-one sessions. We are based in the United Kingdom. If you have any questions about this policy, contact us at [email protected].
What we collect
Account information
Your email address and student type (brother, sister, or parent) when you register.
Booking information
The date, time, tutor, session type, duration, and any goal or note you provide when making a booking.
Payment information
Paid sessions are processed by Stripe. We do not store card numbers or payment credentials — Stripe handles this directly under their own privacy policy.
Tutor application information
If you apply to teach on Qalam, we collect your name, email, gender, specialty, years of experience, and a personal message. This is used solely to review your application.
Usage data
We record which free session slots have been used each day per account in order to enforce the one-free-session-per-day limit.
How we use it
- To create and manage your account
- To process and confirm bookings
- To send booking confirmations, reminders, and cancellation notices by email
- To show tutors their upcoming and past sessions
- To enforce platform rules (free session limits, cancellation policy)
- To review tutor applications and notify applicants of decisions
- To process tutor payouts
We do not use your data for advertising. We do not sell your data to anyone.
Third-party services
Supabase
Our database and authentication provider. Your account and booking data is stored on Supabase infrastructure. See supabase.com/privacy.
Resend
We use Resend to send transactional emails (confirmations, reminders, decisions). Your email address is passed to Resend solely for delivery. See resend.com/privacy.
Jitsi Meet
Free sessions use Jitsi Meet for video. We generate a room link but do not control or store the content of sessions. See jitsi.org/security.
Stripe
Paid sessions are processed by Stripe. Card data never touches our servers. See stripe.com/privacy.
Your rights
Under UK GDPR you have the right to access, correct, or delete your personal data. You may also request that we restrict processing or port your data to another provider.
To exercise any of these rights, email [email protected] with the subject line "Data request". We will respond within 30 days.
Data retention
We retain your account and booking data for as long as your account is active. If you request deletion, we will remove your personal data within 30 days, except where we are required to retain records for legal or financial purposes (for example, records of completed paid transactions).
Cookies
We use only essential cookies required for authentication (managed by Supabase). We do not use advertising or tracking cookies.
Changes to this policy
We may update this policy from time to time. Material changes will be communicated by email to registered users. Continued use of Qalam after such notice constitutes acceptance of the updated policy.
Contact
Questions or requests: [email protected]