Overview
This Privacy Policy explains how Syllaro Academy, the business name used by Fawzy Mohamed, an individual sole-proprietor resident in Egypt, collects and uses personal data through https://www.syllaro-academy.com and related course services (the "Service").
This policy applies to visitors, account holders, learners, customers who buy through Gumroad, and people who contact Syllaro Academy for support.
For data subjects in Egypt, Egyptian Personal Data Protection Law No. 151 of 2020 may apply. For non-Egypt residents, Syllaro Academy aims to align on a reasonable best-effort basis with the core transparency and rights principles of the GDPR for the European Union and the CCPA for California residents where those laws apply.
Data We Collect
Syllaro Academy collects only the data needed to provide, secure, improve, and support the Service.
| Category | Examples | Source |
|---|---|---|
| Account data | Email address, optional display name, preferred locale, authentication identifiers | You, Supabase authentication |
| Learning data | Course progress, lesson completion, quiz answers, quiz scores, time spent, study schedule settings, private lesson notes, certificate records | Your use of the Service |
| Payment data | Gumroad handles payment details. Syllaro Academy receives the buyer email, name, country, and Gumroad order ID only | Gumroad |
| Technical data | IP address, browser user agent, device and browser metadata, security logs, error logs, timestamps | Browser, hosting and infrastructure providers |
| Support data | Messages, order IDs, account email, issue details, and attachments you choose to send | You |
| Newsletter and interest data | Email address, preferred language, subscription source, optional course interest | You |
Syllaro Academy does not intentionally collect full payment card numbers, bank account numbers, government ID documents, or health data through the Service.
How We Use Data
Syllaro Academy uses personal data to:
- Create and secure Accounts.
- Deliver free and paid Course access.
- Match Gumroad purchases to Syllaro Academy Accounts.
- Track learning progress, quiz results, notes, schedules, and certificates.
- Send transactional email such as account, purchase, access, certificate, support, and security messages.
- Respond to support, refund, legal, and account requests.
- Prevent fraud, piracy, account sharing, abuse, chargebacks, and security incidents.
- Maintain logs needed for reliability, debugging, and security.
- Analyze aggregate usage patterns to improve Courses and the Service.
- Comply with tax, accounting, legal, consumer protection, and payment processor obligations.
Syllaro Academy does not sell personal data and does not use learner notes for advertising.
Legal Basis
Where a legal basis is required, Syllaro Academy relies on the following grounds:
- Contract performance: to create Accounts, provide Course access, process purchases and refunds, track progress, issue certificates, and provide support.
- Legitimate interest: to secure the Service, prevent fraud and abuse, improve product quality, maintain logs, respond to disputes, and protect intellectual property.
- Consent: to send optional newsletter or marketing messages and to store preferences where consent is required.
- Legal obligation: to keep records needed for tax, accounting, consumer protection, dispute handling, and lawful requests.
Where Egyptian Personal Data Protection Law No. 151 of 2020 requires consent or another specific legal ground, Syllaro Academy will process personal data on that basis.
Third-Party Processors
Syllaro Academy uses service providers to operate the Service. These providers process data only for the purposes described below and under their own terms, privacy policies, and security controls.
| Provider | Purpose | Data involved | Processing location |
|---|---|---|---|
| Supabase | Authentication, database, account data, learning progress, notes, certificates, newsletter records | Account, learning, notes, certificate, and newsletter data | United States, with subprocessors as described by Supabase |
| Vercel | Hosting, deployment, edge delivery, logs, reliability, and security | Technical data and limited request data | United States, with global infrastructure and subprocessors |
| Gumroad | Checkout, payment processing, receipts, refunds, tax handling, and payment dispute handling | Payment and order data handled by Gumroad, plus purchase confirmation data shared with Syllaro Academy | United States, with subprocessors as described by Gumroad |
| Configured transactional email provider | Delivery of account, access, support, and service emails | Email address, message content, delivery metadata | United States, with subprocessors as described by that provider |
Gumroad may act as payment processor, reseller, and partial Merchant of Record for Course purchases. Gumroad's own privacy policy and terms apply to payment checkout and Gumroad account activity.
Data Retention
Syllaro Academy keeps personal data only as long as needed for the purposes described in this policy.
- Account data is kept while your Account remains active.
- Learning data is kept while your Account remains active so progress, notes, and certificates remain available.
- After a verified deletion request, learning records may be deleted or anonymized unless retention is needed for fraud prevention, security, legal claims, tax, accounting, or payment dispute records.
- Transactional records connected to purchases, refunds, chargebacks, and taxes may be retained as required by Egyptian law and other applicable legal obligations.
- Technical logs are kept for a limited period needed for security, debugging, abuse prevention, and infrastructure reliability.
- Newsletter or course-interest records are kept until you unsubscribe, request deletion, or the record is no longer needed.
Deletion from backups may take additional time because backups are rotated on a technical schedule.
International Data Transfers
Syllaro Academy is operated by an Egypt-resident sole-proprietor, but the Service uses providers such as Supabase, Vercel, Gumroad, and the configured transactional email provider. This means personal data may be transferred to and processed in the United States and other countries where these providers or their subprocessors operate.
For users protected by Egyptian Personal Data Protection Law No. 151 of 2020, GDPR, CCPA, or similar laws, Syllaro Academy takes reasonable steps to use reputable providers, review their security and privacy terms, and rely on contractual safeguards, standard contractual clauses, or equivalent protections where applicable.
By using the Service, you understand that data may be processed outside your country of residence.
Your Rights
Depending on where you live and which law applies, you may have rights to:
- Access personal data held about you.
- Correct inaccurate or incomplete data.
- Delete personal data, subject to legal and operational retention limits.
- Receive a portable copy of certain data.
- Object to or restrict certain processing.
- Withdraw consent where processing is based on consent.
- Opt out of optional marketing email.
- Ask for information about categories of data collected, used, disclosed, or retained.
These rights are intended to cover the core rights available under Egyptian Personal Data Protection Law No. 151 of 2020, GDPR, and CCPA where applicable. Some rights may be limited by law, security needs, fraud prevention, payment records, tax obligations, or the need to provide the Service.
How to Exercise Your Rights
To exercise privacy rights, contact:
Include the Account email address and a clear description of the request. Syllaro Academy may ask for information needed to verify that you control the Account or email address.
Syllaro Academy aims to respond within 30 days. More complex requests may take longer where permitted by law, but Syllaro Academy will provide an update if more time is needed.
Cookies and Local Storage
The Service uses cookies, local storage, and similar browser storage for essential and preference-based functions.
Current uses include:
- Essential session cookies and authentication storage needed to sign in and keep an Account secure.
- Locale preference storage, such as language and direction choices.
- Theme preference storage, such as light or dark mode.
- Local progress or cache data used to support learning continuity and graceful fallback.
- Security and anti-abuse data needed to protect the Service.
Syllaro Academy does not currently use third-party tracking cookies or advertising cookies on the Service. A separate cookie banner is not used because the current storage is necessary for authentication, preferences, security, or core learning features.
If future analytics or advertising tools use non-essential tracking cookies, this policy and the user consent flow will be updated before those tools are enabled.
Children
The Service is not intended for children under 16. People under 16 may not create an Account or buy a Course.
If you believe a person under 16 has created an Account or provided personal data, contact support@syllaro-academy.com so Syllaro Academy can review and take appropriate action.
Security
Syllaro Academy uses reasonable technical and organizational measures to protect personal data, including:
- HTTPS for data in transit.
- Supabase authentication and password hashing.
- Supabase Row Level Security for user-owned records.
- Server-side access controls for private and paid data.
- Payment processing through Gumroad instead of storing payment card data on Syllaro Academy servers.
- Access limits and operational practices intended to reduce unauthorized access.
- Error and security logging for abuse prevention and incident response.
No online service can guarantee perfect security. You are responsible for using a strong password, protecting your email account, and signing out on shared devices.
Data Breach Notification
If Syllaro Academy becomes aware of a personal data breach that creates a legal notification duty or a meaningful risk to affected users, Syllaro Academy will take reasonable steps to investigate, contain, and remediate the incident.
Where required by applicable law, Syllaro Academy will notify affected users, relevant regulators, processors, or other required parties within the required timeframe and with the information reasonably available at that time.
Changes to This Policy
Syllaro Academy may update this Privacy Policy when the Service changes, providers change, legal requirements change, or privacy practices need clarification.
The latest version will be posted at https://www.syllaro-academy.com/privacy with the last reviewed date. For material changes, Syllaro Academy may also provide notice by email, in-app notice, checkout notice, or another reasonable method.
Continued use of the Service after an updated policy becomes effective means the updated policy applies to future use of the Service.
Contact
For privacy questions, rights requests, account deletion, or security concerns, contact: