1. Introduction
Zeluu ("we", "our", "us") operates the Zeluu platform (zeluu.com) and the MathBuddy AI tutoring service. This Privacy Policy explains how we collect, use, and protect your personal information and your child's data.
Zeluu is committed to protecting children's privacy. We comply with the UAE Federal Decree-Law No. 45 of 2021 on Personal Data Protection, the Children's Online Privacy Protection Act (COPPA), and applicable GCC data protection regulations.
Operator: Zeluu (operated by GetZeal Technologies)
Contact: support@zeluu.com
2. Information We Collect
2.1 Parent Account Information
- Email address (for account creation and communication)
- Password (securely hashed, never stored in plain text)
- Payment information (processed securely via Stripe; we do not store card details)
- Subscription and credit transaction history
2.2 Child Profile Information
- Child's first name (no surname required)
- Grade level (1-9)
- Preferred language (English or Arabic)
- Username and password (for child login, set by parent)
- Phone number (optional, provided by parent)
2.3 Usage Data
- Tutoring session transcripts (questions asked and AI responses)
- Session duration, timestamps, and interaction counts
- Credits consumed per session
- Photos uploaded for homework help (processed in real-time, not permanently stored)
3. How We Use Your Information
We use the collected information to:
- Provide AI-powered math tutoring aligned with the UAE MOE curriculum
- Manage parent accounts, subscriptions, and credit balances
- Generate weekly progress reports for parents
- Monitor session safety (content filtering, stuck-loop detection)
- Send notifications about account activity, low credits, or flagged sessions
- Improve our AI tutoring quality and educational content
We never:
- Sell personal data to third parties
- Use children's data for advertising or marketing
- Share individual session data with anyone other than the parent
- Use children's data to build marketing profiles
4. Children's Privacy (COPPA Compliance)
We take children's privacy seriously:
- Parental Consent: Only parents can create accounts. Children access the platform through credentials set by their parent.
- Minimal Data: We collect only the minimum information needed to provide tutoring (first name, grade, language preference).
- No Direct Marketing: We never market directly to children or use their data for advertising.
- Parent Control: Parents have full visibility into all sessions and can review, manage, or delete their child's data at any time.
- Safe AI: Our AI is specifically designed for educational purposes with content filtering and safety mechanisms.
- Photo Handling: Photos uploaded for homework help are processed in real-time by the AI and are not permanently stored on our servers.
5. Data Storage and Security
- Data is stored securely on Supabase (PostgreSQL) with Row Level Security (RLS) enabled
- All data transmission is encrypted via HTTPS/TLS
- Passwords are hashed using industry-standard algorithms
- Payment processing is handled by Stripe (PCI DSS compliant)
- Access to production data is restricted to authorized personnel only
- We conduct regular security reviews of our infrastructure
6. Data Retention
- Account Data: Retained as long as the account is active. Deleted within 30 days of account closure upon request.
- Session Transcripts: Retained for 12 months to support progress reports and parent review, then automatically archived.
- Payment Records: Retained as required by UAE tax and financial regulations (typically 5 years).
- Uploaded Photos: Processed in real-time and not permanently stored.
7. Your Rights
Under UAE data protection law and applicable international regulations, you have the right to:
- Access: Request a copy of all personal data we hold about you and your child.
- Correction: Request correction of inaccurate or incomplete data.
- Deletion: Request deletion of your account and all associated data.
- Data Portability: Request your data in a machine-readable format.
- Withdraw Consent: Withdraw consent for data processing at any time (this may affect service availability).
- Restrict Processing: Request that we limit how we use your data.
To exercise any of these rights, contact us at support@zeluu.com. We will respond within 30 days.
8. Third-Party Services
We use the following third-party services:
- Supabase: Database and authentication (hosted in secure cloud infrastructure)
- Vercel: Website hosting and serverless API functions
- Stripe: Payment processing (PCI DSS Level 1 compliant)
- OpenAI: AI language model for tutoring (no personal data is shared; only anonymized session content is processed)
- Cloudflare: DNS and security services
Each third-party provider has their own privacy policy and data protection measures. We only share the minimum data necessary for each service to function.
9. International Data Transfers
Your data may be processed in countries outside the UAE. When this occurs, we ensure appropriate safeguards are in place, including:
- Standard contractual clauses approved by relevant data protection authorities
- Data processing agreements with all third-party providers
- Compliance with UAE cross-border data transfer requirements
10. Cookies and Tracking
We use minimal cookies necessary for the platform to function:
- Authentication cookies: To keep you logged in securely
- Session cookies: To maintain your session state
We do not use advertising cookies, tracking pixels, or analytics cookies that track individual users.
11. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by email or through a notice on our platform. Your continued use of the service after changes constitutes acceptance of the updated policy.
12. Contact Us
If you have questions about this Privacy Policy or our data practices, contact us at:
- Email: support@zeluu.com
- Website: zeluu.com
For data protection complaints, you may also contact the UAE Data Office or the relevant data protection authority in your jurisdiction.