1. Introduction

Sabsiz respects your privacy and gives the protection of children's data and photos the highest priority. This policy explains how we collect, use and protect data when a parent uses the platform for their child.

2. Who is responsible

The data controller is FAWZ AI, a sole establishment in Dubai, United Arab Emirates, licence no. 1666146, Al Fattan Tower, Dubai.

3. Parental consent

Sabsiz is a service for the parent, not an open service for a child alone. A child profile is created only after the parent registers and consents to the collection and use of the child's data for the purposes set out here. We follow an approach aligned with the spirit of the U.S. Children's Online Privacy Protection Act (COPPA) and with the UAE Personal Data Protection Law (PDPL), including transparency, purpose limitation, data minimisation, and data-subject rights.

4. Data we collect

• Parent data: name, email, and account and subscription details.
• Child data: name, grade, and gender for the theme, and homework progress.
• Child photos and worksheets, if the parent uploads them for the game, story or certificate.
• Limited technical data, such as sign-in logs and device information, to operate and protect the service.

5. Children's photos

Children's photos are protected and are never shared with any third party for marketing or advertising, never sold, and never used to train general AI models. They are used only inside the family account to create the child's own experience (such as a story or a screen). Access is restricted, and they are stored with appropriate safeguards.

6. How we use data

To run the account, turn a worksheet into a game, track progress, deliver digital gifts, improve the service, and comply with the law. We do not sell personal data.

7. Sharing

We do not share a child's data or photos with advertisers or data brokers. We may use technical providers (such as hosting) under a confidentiality obligation, solely to operate the platform.

8. Retention and deletion

We keep data while the account is active, or for as long as the law requires. A parent may request deletion of the family account and of the child's data and photos. We will fulfil the request within a reasonable time, unless a legal duty requires us to keep a limited part.

9. Your rights

A parent may, under applicable law, request access, correction, deletion, restriction, or portability where it applies. For privacy requests, use the Contact Us page.

10. Storage and security

Data may be processed on servers inside or outside the UAE with appropriate safeguards. We take reasonable technical and organisational measures to protect data from unauthorised access.

11. Changes

We may update this policy and will publish the new version on this page.