Who we are
Dars e Ashrafi (darseashrafi.org) is run by Qist Institute, which decides how your personal data is used (the "Data Fiduciary").
Organisation: [Registered name of Qist Institute — to be confirmed] Address: [Postal address — to be confirmed] Email: [Support email — to be confirmed] Phone: [Phone / WhatsApp — to be confirmed] Grievance Officer: [Name of Grievance Officer — to be confirmed]
What we collect
- Account details: name, email address, phone number, country and preferred language.
- Student details you give at enrolment, such as class or level and guardian contact details.
- Learning records: lessons opened, answers to exercises, progress, certificates and teacher feedback.
- Payment records: plan, amount, date and payment status. Card, UPI and bank details are handled by Razorpay; we do not see or store them.
- Messages and enquiries you send us, for example live-class admission enquiries.
- Technical data needed to run the site securely: sign-in cookies, device and browser type, IP address and error logs.
Children and parental consent
Many of our learners, including all Qist Maktab students, are under 18. Under Indian law we need the verifiable consent of a parent or lawful guardian before we process a child's personal data. A parent or guardian must create or approve the child's account and give consent. We do not show advertising to children and we do not use children's data for profiling or targeted advertising. Progress tracking is used only to teach the child and to report to the parent, guardian and teacher.
A parent or guardian can withdraw consent at any time by writing to the Grievance Officer. We will then stop processing the child's data, except where the law requires us to keep records.
How we use your data
- To create and secure your account and let you sign in.
- To deliver lessons, save progress, mark exercises and issue certificates.
- To let parents, guardians and teachers follow a learner's progress.
- To process subscriptions, trials, payments and refunds.
- To answer enquiries and send service messages, such as password resets and billing notices.
- To keep the site safe, prevent misuse and fix errors.
- To meet legal and tax obligations.
Who we share it with
We do not sell personal data. We share it only with service providers who help us run Dars e Ashrafi, under contracts that limit their use of it:
Supabase — database, sign-in and file storage (servers in Singapore). Razorpay — payment processing. Our website hosting provider. YouTube and Vimeo — when a lesson includes an embedded video, these services may set their own cookies.
We may also disclose data when the law requires it.
Cookies
We use only the cookies needed to keep you signed in, remember your language and protect the site. We do not use advertising cookies. Embedded YouTube or Vimeo videos may set their own cookies when you play them.
How long we keep data
We keep account and learning records while your account is active. If you ask us to delete your account, we delete or anonymise your personal data within 30 days, except payment and tax records, which we keep for the period the law requires (usually 8 years in India). Accounts that are inactive for 3 years may be deleted after we notify you.
Your rights
- Ask for a summary of the personal data we hold about you and how we use it.
- Ask us to correct, complete or update your data.
- Ask us to delete your data and close your account.
- Withdraw consent at any time; this does not affect processing already done.
- Nominate another person to exercise these rights if you die or become unable to.
- Raise a grievance with our Grievance Officer, and if you are not satisfied, complain to the Data Protection Board of India.
Security
Data is encrypted in transit (HTTPS). Access to personal data is limited to staff who need it, and administrator access is checked on our servers. If a data breach affects you, we will inform you and the Data Protection Board of India as the law requires.
Grievance Officer and contact
Write to our Grievance Officer for any question, request or complaint about your personal data. We will acknowledge it within 48 hours and respond within 30 days.
Organisation: [Registered name of Qist Institute — to be confirmed] Address: [Postal address — to be confirmed] Email: [Support email — to be confirmed] Phone: [Phone / WhatsApp — to be confirmed] Grievance Officer: [Name of Grievance Officer — to be confirmed]
We may update this policy. We will post the new version here and tell registered users about important changes.