Privacy Policy

MENAverse is an independent IGCSE revision platform operated for students, teachers, and schools at https://www.menaverse.net. This policy explains what personal data we collect and how we use it.

• Account data: email address, full name, role (student, teacher, or admin).
• Learning data: answers submitted, MCQ choices, ratings (Learning / Reviewing / Mastered), chapter progress, daily warmup activity, and math attempt scores.
• Class data: class codes, subject enrollments, and teacher–student class membership.
• Support messages: name, email, role, and message text if you use the contact form.
• Technical data: essential session cookies required for authentication (via Supabase), and optional privacy-friendly analytics events that do not identify you personally.

We use only essential storage needed to run the service:

• Authentication cookies (sb-*) — keep you signed in. Set by Supabase Auth.
• Teacher preferences (localStorage: menaverse-teacher-prefs, menaverse-teacher-class, menaverse-bank-favorites) — remember UI choices on this device.
• Student session id (sessionStorage: menaverse_student_session_id) — idle-timeout safety for school shared devices.
• First-answer flag (localStorage: menaverse-first-answered) — cookieless analytics only; not personal data.

We do not use advertising cookies or third-party marketing pixels. For US launch we do not show a cookie consent banner because we only use essential auth cookies and cookieless analytics. A consent banner will be added before UK/EU launch if required.

• Students see their own progress, ratings, and enrolled subjects.
• Teachers see progress, answers, and ratings for students enrolled in their classes only.
• Platform admins can access accounts for support, content management, and security.
• We do not sell data, show advertising, or share learning data with third parties for marketing.

Data is hosted on Supabase (PostgreSQL database and authentication) and the application is hosted on Vercel. Data is encrypted in transit (HTTPS/TLS). Access is controlled by row-level security policies and role-based permissions.

We retain account and learning data while your account is active. You can download or delete your account from Account settings while signed in. After deletion, personal data is removed or anonymised; anonymised aggregate statistics may be retained for platform improvement.

MENAverse is designed for secondary-school IGCSE students. Many users are under 18. Schools and parents should ensure appropriate consent before students create accounts. Teachers who enroll classes act as the primary educational contact for their students.

We allow students under 13 to use MENAverse when a school or teacher provides the account in an educational context (for example by issuing a class code and supervising classroom use). We do not knowingly market to children under 13, and we do not sell their personal information. If you believe a child under 13 has created an account without school or parent involvement, contact us and we will delete the account promptly.

If you are a California resident, you have the right to know what personal information we collect, to request deletion, to correct inaccurate information, and to opt out of the “sale” or “sharing” of personal information for cross-context behavioural advertising. We do not sell personal information and we do not share it for advertising. To exercise these rights, use Account settings (download / delete) or email support@menaverse.net. We will not discriminate against you for exercising these rights.

You may access, correct, download, or delete your personal data from Account settings while signed in, or by contacting us at support@menaverse.net. We aim to respond within 30 days.

We use trusted third-party services to run MENAverse:

• Vercel — application hosting, CDN, and privacy-friendly Web Analytics
• Supabase — authentication, database, and file storage
• Resend — transactional email for contact-form messages and (when configured) auth emails
• Anthropic — optional AI-assisted math grading only when enabled in production (not used for science MCQs)

Each provider processes data under their own terms and security standards. We do not sell data to any subprocessors.

Questions about this policy: support@menaverse.net or our contact form.