Legal

Privacy policy

Plain English, no surprises. This page explains what information we collect on this website, why, and what you can do about it.

Last updated October 9, 2026

Rafiq LLC (“Rafiq”, “we”, “us”) is a company registered in the United States. We make an educational game for children and run this website, rafiq.academy, for parents who want to learn about it. We are the data controller for the information described here.

1. Who this policy covers

This policy covers visitors to rafiq.academy, including parents who join the waitlist and people who apply to work with us. The Rafiq game itself is not yet released. When it launches it will have its own privacy notice written for the game, and we will link it from here.

2. What we collect

We collect as little as we can. Here is all of it.

When	What	Required?
You join the waitlist	Your email address, and optionally your child’s age bracket (7 to 11+). We also record which part of the page you signed up from and the time.	Email yes, age no
You apply for a job	Your name, email, area of interest, an optional link to your CV or portfolio, and your message.	Yes, except the link
You email us	Whatever you choose to write, and your email address.	Your choice
You accept analytics cookies	Anonymous usage data such as pages viewed, approximate region, device type, and how you move through the page. IP addresses are truncated.	No, only with consent

We do not collect payment details, precise location, or any information directly from children on this website.

3. Why we use it

To tell you when Rafiq is ready. That is the only reason we ask for a waitlist email. We may also send occasional news about Rafiq. Every email has an unsubscribe link.
To understand who we are building for. The optional child age bracket helps us plan content for the right ages. It is never linked to a child’s identity.
To consider your application if you apply to work with us.
To reply to you when you write to us.
To improve the website, using aggregated analytics, only if you accept cookies.

Where the law requires a legal basis, we rely on your consent for the waitlist, analytics, and applications, and on our legitimate interest in running and securing the website. We never use your information for automated decisions that have legal effects on you.

4. Children’s privacy

This website is written for parents and guardians. It is not directed at children, and we do not knowingly collect personal information from anyone under 13 here. If you believe a child has given us information through this site, email us at hello@rafiq.academy and we will delete it promptly.

The child age bracket a parent may give on the waitlist form is a single number range, given by the parent, stored against the parent’s email, and used only to plan age-appropriate content. It is not a child’s profile.

We take the United States Children’s Online Privacy Protection Act (COPPA) and similar laws seriously. When the Rafiq game launches, it will be designed so that parents stay in control: verifiable parental consent before any child data is collected, no behavioural advertising, no open chat with strangers, and a parent dashboard to review and delete data. Read more on our child safety page.

5. Cookies and analytics

The website works without cookies. Analytics cookies from Google Analytics and Microsoft Clarity are loaded only after you press “Accept” on the cookie banner. You can change your mind at any time with the “Cookie settings” link in the footer. Our cookie policy lists each cookie and how long it lasts.

We do not sell personal information, and we never share it with advertisers. We use a small number of service providers who process data on our behalf under contract:

Supabase (database hosting, EU region) stores the waitlist and applications.
Amazon Web Services hosts the website.
Google Analytics and Microsoft Clarity provide analytics, only with your consent.
An email provider, when we send waitlist updates.

We may also disclose information if the law requires it, or to protect the rights and safety of children, our users, or Rafiq. If Rafiq LLC is ever acquired or merged, your information may be transferred to the new owner under this same policy.

7. How long we keep it

Waitlist: until Rafiq launches and you have been invited, or until you unsubscribe or ask us to delete it, whichever comes first.
Job applications: up to 12 months after the application, then deleted, unless you ask us to delete it sooner or you join the team.
Email conversations: up to 24 months, so we can follow up.
Analytics: as set by each provider and listed in the cookie policy, in aggregated form.

8. How we protect it

All traffic to the website is encrypted. The database is protected by row-level security, which means the public part of the website can only add a record, never read one. Access to stored data is limited to the people on the team who need it, and is logged. No system is perfectly secure, so if we ever learn of a breach affecting your data we will tell you and the relevant authorities as the law requires.

9. Your rights

Wherever you live, you can ask us to:

tell you what information we hold about you and give you a copy;
correct it if it is wrong;
delete it;
stop sending you emails (every email has an unsubscribe link);
restrict or object to how we use it;
give it to you in a portable format.

If you are in the European Economic Area, the United Kingdom, or Switzerland, these rights come from the GDPR and UK GDPR, and you may also complain to your local data protection authority. If you are a California resident, the CCPA gives you the right to know, delete, and opt out of sale. We do not sell personal information and we do not discriminate against anyone for exercising their rights.

To use any of these rights, email hello@rafiq.academy with “Privacy” in the subject line, from the address you signed up with. We will respond within 30 days.

10. International transfers

Rafiq LLC is based in the United States and our service providers operate in the United States and the European Union. If you are outside those places, your information will be transferred there. We rely on standard contractual clauses and the safeguards our providers offer to protect it wherever it is processed.

11. Changes to this policy

If we change this policy in a way that matters, we will post the new version here with a new “last updated” date and, for waitlist members, mention it in our next email. We will not use your information in a materially different way without asking you first.

12. Contact

Rafiq LLC
Email: hello@rafiq.academy

Put “Privacy” in the subject line and it goes to the top of the queue.