Tafawwaq logoTafawwaq

Tafawwaq Inc. – Privacy Policy

Last Updated: September 30, 2025

1. Introduction

Welcome to Tafawwaq Inc., a U.S.-incorporated company organized under the laws of the State of Delaware (“Tafawwaq,” “we,” “us,” or “our”). Tafawwaq operates an online tutoring marketplace that connects students with private tutors for personalized one-on-one learning experiences through www.tafawwaq.com and related mobile applications (collectively, the “Platform”).

We are committed to protecting your privacy and processing your personal data transparently and lawfully. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Platform. It applies to all visitors, users, and others who access or use our services (“Users”).

By accessing or using the Platform, you acknowledge that you have read, understood, and agree to be bound by the terms of this Privacy Policy, our Terms and Conditions, Cancellation and Refund policy and all other policies and guidelines referenced herein. If you do not agree with the practices described in this Privacy Policy, you must not access or use the Platform.

We may update this Privacy Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. We encourage you to review this Privacy Policy periodically for any changes. Your continued use of the Platform after any modifications to this Privacy Policy will constitute your acknowledgment of the modifications and your consent to abide and be bound by the modified Privacy Policy.

2. Information We Collect

We collect various types of information from and about Users of our Platform, including information that may directly or indirectly identify you ("Personal Information"). We collect this information to provide and improve our Services, to communicate with you, and to ensure the security and integrity of our Platform.

2.1 Information You Provide to Us

We collect information that you directly provide to us when you register for an Account, use our Services, or communicate with us. This includes:

  • Account Information: When you create an Account, we collect your name, email address, password, and role (Student or Tutor). Tutors may also provide additional details such as qualifications, experience, educational background, a profile picture, and more.
  • Profile Information: You may choose to provide additional information for your public profile, such as a biography, subjects of expertise, teaching methodology, and availability.
  • Communication Information: When you communicate with us for instance customer support inquiries, feedback, surveys or with other Users through the Platform for instance chat messages, virtual whiteboard interactions), we collect the content of these communications.
  • Payment Information: When you make or receive payments through the Platform, our third-party payment processors collect payment card details or other financial account information. Tafawwaq does not directly store your full payment card details but receives limited information about transactions for instance the last four digits of card, transaction ID. Third-party payment processors may directly collect and process certain financial data for instance bank account details, W-9/W-8BEN forms, and VAT information in order to verify transactions, prevent fraud, and comply with applicable U.S. and UAE financial regulations.
  • Session Information: Details related to tutoring sessions, including scheduled times, duration, subjects, and any notes or materials exchanged during the session.
  • Verification Information: For Tutors, we may collect information necessary for identity verification, background checks, and qualification assessments. Tutors may also be required to submit tax forms such as IRS Form W-9 (for U.S. tutors) or W-8BEN (for non-U.S. tutors) to comply with U.S. tax reporting obligations.

2.2 Information We Collect Automatically

When you access and use the Platform, we automatically collect certain information about your device and your activity. This information helps us understand how our Services are used and to improve your experience.

  • Usage Data: Information about your interactions with the Platform, such as the pages or content you view, the features you use, the time and date of your visits, the duration of your sessions, and your navigation paths. This includes booking history, session attendance, and communication patterns.
  • Device Information: Information about the device you use to access the Platform, including your IP address, browser type, operating system, device identifiers, and mobile network information.
  • Log Data: Server logs that automatically record information when you access or use our Services, such as your IP address, access dates and times, browser type and settings, and the page you visited before navigating to our Platform.
  • Cookies and Similar Technologies: We use cookies, web beacons, and similar tracking technologies to collect information about your browsing activities, remember your preferences, and personalize your experience. Cookies are small data files stored on your device. You can control the use of cookies through your browser settings, but disabling them may affect the functionality of the Platform.
  • Session Recordings: Live Tutoring Sessions conducted through the Platform may be recorded (audio and video) for quality assurance, dispute resolution, and for the Student's personal review and revision purposes. We collect and store these recordings.

2.3 Information We Collect from Third Parties

We may receive information about you from third parties, such as our business partners, service providers, and publicly available sources. This includes:

  • Social Login Providers: If you choose to register or log in using third-party services like Google or Facebook, we receive certain profile information from these services for instance name, email address, social ID as authorized by you and the third-party service.
  • Payment Processors: We receive confirmation of payments and transaction details from our payment processing partners.
  • Background Check Providers: For Tutors, we may receive information from third-party background check services as part of our verification process.
  • Analytics Providers: We may receive aggregated or anonymized data from analytics providers about user behavior on our Platform.

3. How We Use Your Information

Tafawwaq uses the information we collect for various purposes, primarily to provide, maintain, protect, and improve our Services, and to develop new ones. Below are the specific ways we use your Personal Information:

3.1 To Provide and Maintain Our Services

  • Account Management: To create and manage your Account, verify your identity, and provide you with access to the Platform and its features.
  • Facilitating Tutoring Sessions: To enable Students to find and book Tutors, and for Tutors to offer and conduct sessions. This includes scheduling, communication, and access to the virtual classroom.
  • Payment Processing: To process payments for tutoring services, manage billing, and disburse payouts to Tutors.
  • Communication: To send you transactional messages, such as booking confirmations, payment receipts, password reset instructions, and important service updates via email and, where applicable, WhatsApp.
  • Customer Support: To respond to your inquiries, provide technical support, and resolve issues you may encounter.

3.2 To Improve and Personalize Our Services

  • Service Enhancement: To understand how Users interact with our Platform, identify areas for improvement, and develop new features and functionalities.
  • Personalization: To tailor your experience on the Platform, such as recommending Tutors to Students, or suggesting relevant learning materials.
  • Research and Development: To conduct research and analysis to improve our educational offerings, teaching methodologies, and platform technology.

3.3 For Safety and Security

  • Fraud Prevention: To detect, investigate, and prevent fraudulent transactions, unauthorized access, and other illegal or prohibited activities.
  • Security Measures: To protect the security and integrity of our Platform, systems, and data.
  • Dispute Resolution: To investigate and resolve disputes between Users, or between Users and Tafawwaq.
  • Compliance: To comply with our legal obligations, enforce our Terms and Conditions, and protect the rights, property, and safety of Tafawwaq, our Users, and the public.

3.4 For Marketing and Promotional Purposes

  • Marketing Communications: To send you marketing and promotional communications about Tafawwaq's services, offers, and news that may be of interest to you, in accordance with your communication preferences. This may include using email services like Resend for marketing campaigns. We will only send you marketing and promotional communications where you have explicitly opted in, in accordance with the UAE PDPL and other applicable laws.
  • Personalized Advertising: To deliver targeted advertisements to you based on your interests and usage patterns.
  • Surveys and Feedback: To request your participation in surveys or to gather feedback on your experience with the Platform.

3.5 Session Recordings

Session recordings are used for:

  • Quality Assurance: To monitor and improve the quality of tutoring services provided on the Platform.
  • Dispute Resolution: To review and resolve any disputes or complaints that may arise regarding a Session.
  • Student Revision: To allow Students to review and re-watch their Sessions for revision and learning purposes.
  • Internal Training: For internal training and development of Tutors and Tafawwaq staff.

3.6 Aggregated and Anonymized Data

We may aggregate and/or anonymize data collected through the Services so that it can no longer be linked to you or your device. We may use and share such aggregated and/or anonymized data for any purpose, including for research and analytics, and to improve and promote our Services, as it does not constitute Personal Information under applicable data protection laws.

4. How We Share Your Information

Tafawwaq may share your Personal Information with third parties in various circumstances, as described below. We do not sell your Personal Information to third parties.

4.1 With Other Users

  • Tutor Profiles: Information provided by tutors in their public profiles for instance name, qualifications, subjects, rates, availability, reviews is shared with Students to facilitate booking decisions.
  • Student Information to Tutors: When a Student books a session, limited information for instance Student's name, age, grade level, subjects of interest, and any specific learning needs is shared with the Tutor to prepare for the session.
  • Session Recordings: Recordings may be accessible to both the Student and Tutor involved in the session for review purposes.

4.2 With Service Providers

We share information with third-party service providers who perform services on our behalf, such as:

  • Payment Processors: To handle transactions securely (e.g., Stripe).
  • Cloud Storage Providers: To store data and session recordings (e.g., AWS).
  • Analytics Providers: To analyze user behavior and improve our services (e.g., Google Analytics).
  • Email and Communication Services: To send emails and notifications (e.g., Resend).
  • Video Conferencing Providers: To facilitate live tutoring sessions (e.g., Zoom integration).
  • Background Check Services: To verify Tutor qualifications and background.

These providers are contractually obligated to use your information only as necessary to provide their services to us and to maintain appropriate security measures.

4.3 For Legal and Compliance Purposes

We may disclose your Personal Information:

  • To comply with applicable laws, regulations, legal processes, or enforceable governmental requests.
  • To enforce our Terms and Conditions, including investigating potential violations.
  • To detect, prevent, or otherwise address fraud, security, or technical issues.
  • To protect the rights, property, or safety of Tafawwaq, our Users, or the public.

4.4 In Business Transfers

If Tafawwaq is involved in a merger, acquisition, asset sale, or other business transfer, your Personal Information may be transferred as part of that transaction. We will provide notice before your Personal Information is transferred and becomes subject to a different privacy policy.

4.5 With Your Consent

We may share your Personal Information with third parties when we have your explicit consent to do so.

5. Security of Your Information

Tafawwaq takes the security of your Personal Information seriously and implements appropriate technical and organizational measures to protect it from unauthorized access, disclosure, alteration, or destruction. These measures include:

  • Encryption: We use encryption technologies to protect sensitive data during transmission and at rest.
  • Access Controls: Access to Personal Information is restricted to authorized employees, contractors, and agents who need to know that information in order to process it for us, and who are subject to strict contractual confidentiality obligations.
  • Secure Storage: Personal Information is stored on secure servers with robust security measures, including firewalls and intrusion detection systems.
  • Regular Audits and Assessments: We regularly review our information collection, storage, and processing practices, including physical security measures, to prevent unauthorized access to systems.
  • Third-Party Security: We select third-party service providers who also implement strong security measures and comply with relevant data protection standards.

While we strive to use commercially acceptable means to protect your Personal Information, it is important to understand that no method of transmission over the Internet, or method of electronic storage, is 100% secure. Therefore, we cannot guarantee its absolute security. You also play a crucial role in protecting your data by choosing a strong, unique password for your Tafawwaq account and keeping it confidential. You are responsible for maintaining the security of your account credentials.

Tafawwaq stores data using Amazon Web Services (AWS) infrastructure. Depending on our configuration, this infrastructure may be located in any AWS region selected for performance, cost, or compliance reasons. For UAE residents, payment transaction data subject to UAE Central Bank regulations is stored and processed in compliance with local requirements. Where local storage is legally required, this obligation is fulfilled either by using AWS’s UAE region having (Application Program Interface me-central-1) or through our licensed payment service providers (PSPs) that maintain UAE-based storage. Any cross-border transfers of payment data are carried out exclusively through licensed PSPs and, where required, with your explicit consent.

6. Data Retention

Tafawwaq retains your Personal Information for as long as necessary to fulfill the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements. The specific retention periods depend on the type of data and the purpose for which it is used.

Generally, we will retain your Personal Information below mentioned for the duration of your active Account on the Platform. Upon Account termination, we may retain certain information for a limited period to comply with legal obligations, resolve disputes, enforce our agreements, and for legitimate business purposes such as auditing and record-keeping:

  • Financial Transaction Data: Financial transaction data will be retained for at least five (5) years as required under UAE VAT law and applicable accounting standards.
  • Session Recordings: Session recordings are generally retained for up to twelve (12) months unless extended for dispute resolution or legal purposes.
  • Transaction Data: Financial transaction records are retained for periods required by tax and accounting laws.
  • Communication Data: Communications with customer support may be retained for a period to help us resolve future inquiries and improve our service.
  • When we no longer need your Personal Information, we will securely delete or irreversibly anonymize it in accordance with applicable data protection laws and internal retention policies. If you request deletion of your Personal Information, we will endeavor to do so in a timely manner, subject to our legal and operational requirements.
  • Transaction Data: Financial transaction records, including invoices reflecting UAE VAT on Tafawwaq’s service fee, are retained for at least five (5) years as required under UAE VAT law and applicable accounting standards.

7. Your Rights and Choices

Depending on your jurisdiction and applicable data protection laws, you may have certain rights regarding your Personal Information. Tafawwaq is committed to facilitating the exercise of these rights.

7.1 Accessing and Updating Your Information

You can review and update most of your Personal Information by logging into your Account settings on the Platform. We encourage you to keep your information accurate and current.

7.2 Right to Access (Right to Know)

You may have the right to request a copy of the Personal Information we hold about you. Upon request, we will provide you with information about whether we hold any of your Personal Information.

7.3 Right to Rectification (Correction)

You have the right to request that Tafawwaq correct any inaccurate or incomplete Personal Information we hold about you.

7.4 Right to Erasure (Right to Be Forgotten)

In certain circumstances, you may have the right to request the deletion of your Personal Information. This right is not absolute and may be subject to legal obligations or legitimate business interests that require us to retain certain data.

7.5 Right to Restrict Processing

You may have the right to request that we restrict the processing of your Personal Information in certain situations, such as when you contest the accuracy of the data or object to its processing.

7.6 Right to Data Portability

Where technically feasible, you may have the right to receive your Personal Information in a structured, commonly used, and machine-readable format, and to transmit that data to another controller.

7.7 Right to Object

You have the right to object to the processing of your Personal Information for direct marketing purposes or when the processing is based on our legitimate interests.

7.8 Withdrawal of Consent

Where we rely on your consent to process your Personal Information, you have the right to withdraw that consent at any time. Withdrawal of consent will not affect the lawfulness of any processing carried out before you withdraw your consent.

7.9 Opting Out of Marketing Communications

You can opt out of receiving promotional emails from us by following the unsubscribe instructions provided in those emails. Please note that even if you opt out of marketing communications, we may still send you non-promotional messages, such as those about your Account or our ongoing business relations.

7.10 Exercising Your Rights

To exercise any of these rights, please contact us using the contact information provided in Section 10. We will respond to your request in accordance with applicable law. To protect your privacy and security, we may take steps to verify your identity before granting access or making changes to your Personal Information. For UAE residents, additional rights under the UAE PDPL include:

  • The right to obtain information about cross-border transfers of your Personal Data.
  • The right to restrict or object to processing where it is not necessary for the performance of the tutoring contract.
  • The right to withdraw consent to processing at any time, without affecting the lawfulness of prior processing.

The right to lodge complaints with the UAE Data Office (Personal Data Protection Office) if you are dissatisfied with how your personal data is handled.

8. Children's Privacy

Tafawwaq is not intended for children under the age of 18 without verifiable parental or guardian consent. For children under 13, we do not knowingly collect Personal Information without such consent and will delete it if discovered.

For Users between the ages of 13 and 18, use of the Platform is permitted only with the involvement and consent of a parent or legal guardian, as outlined in our Terms and Conditions. Parents and guardians are responsible for monitoring their children's use of the Platform and ensuring their compliance with these policies.

If you are a parent or guardian and believe that your child under 13 has provided us with Personal Information, please contact us at support@tafawwaq.com so we can take appropriate action.

9. International Data Transfers

Tafawwaq operates globally, and your Personal Information may be stored and processed in any country where we or our service providers operate. By using our Platform, you understand and agree that your Personal Information may be transferred to countries outside your country of residence, which may have different data protection laws than your own. We take appropriate measures to ensure that your Personal Information receives an adequate level of protection when transferred across borders. These measures may include:

  • Implementing Standard Contractual Clauses (SCCs) approved by the European Commission or other competent authorities for transfers from the EU/EEA and equivalent jurisdictions;
  • Relying on the recipient’s certification under the EU–U.S. Data Privacy Framework (DPF) for transfers to the United States, where applicable;
  • Using other legally recognized transfer mechanisms or safeguards that ensure your data is adequately protected.

For UAE residents, payment transaction data subject to UAE Central Bank regulations is stored and processed in compliance with local requirements. Any cross-border transfers of payment data are conducted exclusively through licensed payment service providers (PSPs) and, where required, with your explicit consent.

Other platform data, such as session recordings and account information, may be stored and processed in the United States, the United Arab Emirates, or other jurisdictions where Tafawwaq or its service providers operate. In all cases, we apply contractual, technical, and organizational safeguards designed to ensure the security and confidentiality of your Personal Information in accordance with applicable data protection laws, including the UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021) and relevant international frameworks.

10. Changes to This Privacy Policy

Tafawwaq may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or for other operational, legal, or regulatory reasons. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last Updated" date at the top of this document. We may also notify you through other means, such as email or a prominent notice on our Platform, prior to the change becoming effective.

We encourage you to review this Privacy Policy periodically for any changes. Your continued use of the Platform after any modifications to this Privacy Policy will constitute your acknowledgment of the modifications and your consent to abide and be bound by the modified Privacy Policy.

11. Contact Us

If you have any questions or concerns about this Privacy Policy, our data practices, or your Personal Information, please contact us at:

Tafawwaq, Inc.

1908 Thomas Ave, Suite 12546

Cheyenne, WY 82001, USA

Email: support@tafawwaq.com

Privacy Policy - Tafawwaq