Asabya Academy ("we") collects only what we need to deliver our programmes to you.
What we collect. Your name, email, school, the work you do on the platform (sessions, quizzes, scores), and confirmation that you are 18 or older — or, if you are under 18, that a parent or guardian has consented.
Sign-in with Google. If you sign in using Google, we receive your name, email address, and Google profile picture from Google. We use this data only to create and operate your Asabya Academy account: to identify you, communicate with you about your programme, and link your work on the platform to your account. We do not use Google user data for advertising, do not sell it, and do not share it with third parties except the sub-processors listed below. You can revoke Google's access at any time at https://myaccount.google.com/permissions.
Connecting another calendar (optional). You can connect a calendar you already keep elsewhere, such as Google Calendar, Outlook or Apple Calendar, so that your own events appear alongside your Asabya schedule. You do this by pasting the private subscription link that your calendar provider gives you. We use that link only to read that calendar. From each event we take its title, its time, its location and a link back to it, and nothing else: descriptions and the names and email addresses of other people invited are discarded and never used or stored. We do not store the events from your other calendars. They are fetched, shown to you, and gone, so no event from your personal calendar is written to our database or included in our backups. We store only the subscription link itself, encrypted, and you can remove it at any time from your calendar page, which deletes it. Treat that link as private: anyone who has it can see that calendar.
Why we collect data. To run your programme, show your progress to you and your teachers, and improve the platform.
Your rights. You can ask us to show, correct, or delete your data, or to stop using it for analytics. Contact privacy@asabya.com. You can also complain to the Ministry of Transport, Communications and Information Technology.
Children. Anyone under 18 needs a parent or guardian''s consent.
How long we keep data. While your account is active. On account closure, we delete personal data within 90 days except where law requires longer retention.
Who else sees it. Schools using Asabya Academy sign a Data Processing Agreement with us. The current DPA and sub-processor list are at https://academy.asabya.com/dpa and https://academy.asabya.com/sub-processors.
Backups and where your data is stored. We keep regular encrypted backups of the platform — including off-site copies — so your information can be recovered if something goes wrong. Your data and these backups are stored and processed by the sub-processors listed on our sub-processors page. Some of them operate outside Oman — currently in Germany, Japan, the United States, and on global edge networks — so some of your data is processed outside Oman. This processing is governed by our Data Processing Agreement. You can see each sub-processor's role and location at https://academy.asabya.com/sub-processors.
Updates. This notice may change. The effective date at the top of this page reflects the current version.
Operator: International Strategic Solutions Investment LLC, CR 1609049, Muscat, Sultanate of Oman.
