Ostaaz logoOstaaz← Back to home

Privacy Policy

Last updated: 24 July 2026

This policy explains what information Ostaaz collects when you use our app and website, how we use it, and the choices you have. Please read it alongside our Terms of Service.

1. Who we are

Ostaaz (“Ostaaz”, “we”, “us”, or “our”) provides an interactive mathematics practice application for students preparing for Cambridge IGCSE (0580) and O Level (4024) Mathematics. This Privacy Policy applies to the Ostaaz web app, Android app, and marketing website (together, the “Service”).

Ostaaz is operated by [Ostaaz — insert legal entity name]. If you have any questions about this policy or your data, contact us at hamed@ostaaz.app.

2. Information we collect

We collect the following information when you use the Service:

  • Account information — your name, email address, and password (stored in a securely hashed form), and the exam board or track you choose to study.
  • Learning and usage data — the lessons and questions you attempt, your answers, scores, mastery and exam-readiness metrics, streaks, bookmarks, and time spent practising.
  • Device and technical data — device type, operating system, app version, language and display preferences, and basic diagnostic or crash information.
  • Communications — messages you send us, such as feedback or support requests.

We do not intentionally collect sensitive personal data, and we ask that you do not share it with us.

3. How we use your information

We use your information to:

  • provide and operate the Service — create your account, save your progress, and personalise your practice;
  • track and display your progress, mastery, and exam readiness;
  • improve the Service — understand which features and content help students, fix problems, and build new things;
  • communicate with you about the Service, including important notices;
  • keep the Service secure and prevent misuse.

4. Legal bases for processing

Where data-protection laws such as the EU/UK GDPR apply to you, we process personal data on these bases: to perform our contract with you (to provide the Service); with your consent (which you can withdraw at any time); for our legitimate interests (to improve and secure the Service); and to comply with our legal obligations.

5. Students and children

The Service is designed for students, who may be under the age of 18. We take the privacy of young people seriously.

  • If you are under the age of digital consent where you live (for example, under 16 in parts of the EU, or under 13 in some countries), you should use Ostaaz only with the involvement and consent of a parent, guardian, or school.
  • We collect only the information reasonably needed to provide the Service and do not knowingly collect more personal information from a child than is necessary.
  • Parents, guardians, and schools may contact us at hamed@ostaaz.app to review, correct, or delete a child’s information, or to withdraw consent.
  • If we learn that we have collected a child’s personal information without appropriate consent, we will delete it.

6. How we share information

We do not sell your personal information. We share it only with:

  • Service providers (sub-processors) who host and run the Service on our behalf — including our cloud database and authentication provider and our application-hosting provider — under agreements requiring them to protect your data;
  • AI processing providers that help generate step-by-step explanations and mark practice papers; content you submit for feedback may be processed by these providers to return a result;
  • Legal and safety recipients — where we are required by law, or to protect the rights, safety, and security of our users and the Service;
  • A successor entity — if Ostaaz is involved in a merger, acquisition, or sale of assets, in which case we will notify you.

7. Data retention

We keep your information for as long as your account is active and as needed to provide the Service. When you delete your account or ask us to, we will delete or anonymise your personal information within a reasonable period, except where we must keep it to comply with a legal obligation or to resolve a dispute.

8. How we protect your information

We use technical and organisational measures to protect your information, including encryption in transit, hashed passwords, and access controls. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

9. International data transfers

Ostaaz operates online, and our providers may process and store data in countries other than your own. Where we transfer personal data internationally, we take steps to ensure it remains protected in line with this policy and applicable law.

10. Your rights and choices

Depending on where you live, you may have the right to access the personal data we hold about you, correct inaccurate data, delete your data, object to or restrict certain processing, withdraw consent, and receive a copy of your data in a portable format. To exercise these rights, email us at hamed@ostaaz.app. You can also update your profile and delete your account from within the app.

11. Cookies and local storage

Our website and app use cookies and local storage to keep you signed in, remember your preferences (such as language and theme), and understand basic usage. You can control cookies through your browser settings; disabling them may affect how the Service works.

12. Third-party links

The Service may link to third-party websites, such as exam-board resources. We are not responsible for their privacy practices, and we encourage you to read their policies.

13. Changes to this policy

We may update this Privacy Policy from time to time. If we make material changes, we will update the “Last updated” date above and, where appropriate, notify you in the app or by email.

14. Contact us

Questions or requests about this policy or your data? Email us at hamed@ostaaz.app.