Privacy Policy

This Privacy Policy explains how PowerBIPractice ("we", "us") collects, uses, shares and protects personal data when you use PowerBIPractice (the "Service"). We do not sell personal data and we do not show advertising.

1. Controller and contact

PowerBIPractice is the controller of the personal data described in this policy. For any question or request about your personal data, contact us at [email protected].

2. Personal data we collect

Use without an account. You may complete the first lessons without creating an account. Your progress is then stored only in your own browser, using local storage. It is not sent to us, and clearing your browser data deletes it.

Account data. When you create an account we collect your name and email address. If you sign up with Google, we receive your name, email address and profile picture from Google. We never receive your Google password. Passwords for email accounts are stored by our authentication provider in hashed form and cannot be read by anyone.

Learning data. We store the lessons and steps you complete, your experience points, streaks, badges and the dates on which you completed lessons.

Certificate data. When you create a certificate we store the name shown on it, its number, and the stages and projects it lists.

Leaderboard data. If you appear on a leaderboard, your display name, points and streak are shown to other users.

Payment data. Payments are processed by our payment provider, Stream (streampay.sa), which receives your payment details directly on its own payment page. We receive only your email address, plan, payment status and payment references. We never receive or store card numbers.

Technical data. When you load a page, our hosting provider receives your IP address and browser information and keeps it in server logs for security and troubleshooting. Fonts and icons are served from our own site, so no third party receives your IP address when a page loads.

Correspondence. If you contact us, we keep the messages so that we can respond.

3. Purposes and legal bases

• Providing the Service, including your account, progress, Premium access and certificates: performance of a contract.
• Allowing third parties to verify a certificate you share: performance of a contract and our legitimate interest in preventing fraudulent certificates.
• Keeping the Service secure, preventing abuse and fixing errors: our legitimate interests.
• Sending service emails, such as receipts, password resets and notices of important changes: performance of a contract.
• Sending news about new lessons: your consent, which you may withdraw at any time using the link in each email.
• Keeping payment records: compliance with tax and accounting obligations.

4. Cookies and browser storage

We do not use advertising cookies, tracking pixels or third-party analytics. We use your browser's local storage only for purposes that are strictly necessary for the Service: your progress before you sign in, your sign-in session and your preferences, such as language. If we introduce analytics in the future, we will update this policy and ask for your consent where the law requires it.

5. Recipients

We share personal data only with service providers that help us operate the Service, only to the extent each one needs, and under contracts that require them to protect it. These are providers of hosting, authentication and database services, payment processing, email delivery and sign-in with Google. We may also disclose personal data where the law requires it.

6. International transfers

Some of our service providers process personal data outside your country, including in the United States. Where personal data is transferred from the European Economic Area, the United Kingdom or Switzerland, we rely on appropriate safeguards, such as the Standard Contractual Clauses approved by the European Commission.

7. Retention

• Account and learning data are kept for as long as your account exists, and deleted within 30 days after you delete your account, except where we must keep them by law.
• Certificate records are deleted together with your account, after which the certificate can no longer be verified.
• Payment records are kept for as long as tax and accounting law requires, generally up to ten years.
• Server logs are kept for no longer than 30 days.
• Correspondence is kept for up to two years after the matter is closed.

8. Your rights

Subject to the law that applies to you, you have the right to access your personal data, to have it corrected, to have it deleted, to receive it in a portable format, to object to or restrict its processing, and to withdraw consent at any time without affecting earlier processing. To exercise these rights, contact us at [email protected]. We respond within one month. You also have the right to lodge a complaint with your local data protection authority.

9. Children

The Service is intended for people aged 16 and over. We do not knowingly collect personal data from children under that age. If you believe a child has provided personal data to us, please contact us and we will delete it.

10. Security

We protect personal data with appropriate technical and organisational measures, including encrypted connections, hashed passwords and limited access. No system is completely secure. If a personal data breach affects you, we will inform you and the competent authorities as the law requires.

11. Changes to this policy

We may update this policy from time to time. The date at the top shows when it was last changed. If a change is significant, we will inform you by email or on the Service before it takes effect.

12. Contact

PowerBIPractice, [email protected].