Privacy Policy

Introduction

At Sanabel AI, we are committed to protecting your privacy and the security of your personal information. This Privacy Policy explains how we collect, use, store, and safeguard your data when you use our AI-powered educational platform. Sanabel AI serves teachers, students, and school administrators. We take extra care with data belonging to minors and educational institutions.

By creating an account or using any feature of Sanabel AI, you agree to the practices described in this policy.

Information We Collect

We collect the following categories of information:

• Account information: Full name, email address, password (hashed), and account role (teacher or student) provided at registration.
• Profile data: Display name, language preference (English or Arabic), and any optional profile details you add in Settings.
• Usage data: AI tool usage history, prompt inputs and outputs, session activity, daily and monthly usage counts, XP points, level progress, and battle-pass season data.
• Uploaded files: Documents and images you upload for use with AI tools, stored in Firebase Storage. PDFs are processed for text extraction to power tool responses.
• Support tickets: Messages, subject lines, and contact details submitted via the Help & Support form.
• Technical data: IP address (for guest usage tracking and rate limiting), browser type, device type, and session cookie data.
• Payment information: Subscription plan status and billing period dates. We do not store raw payment card details — these are handled by our payment processor.

How We Use Your Information

• To create and manage your account and authenticate your sessions.
• To deliver AI-generated educational content through our 45+ tools, including quiz generators, lesson planners, flashcard creators, reading comprehension tools, the Student AI Chat, and video generation features.
• To track and display your XP, level, rank, and seasonal battle-pass progress as part of the gamification system.
• To enforce daily and monthly usage limits based on your subscription plan (Starter, Pro, or Enterprise).
• To send important account and service notifications by email, such as password resets, support ticket updates, and subscription changes.
• To improve platform performance, fix bugs, and develop new features.
• To manage organizational accounts and student access for schools using the Enterprise plan.

AI Processing & Third-Party Services

Sanabel AI uses the NVIDIA API to power all AI text and image generation. Prompts you submit and tool inputs you enter are sent to NVIDIA's API to generate responses. These requests may be logged by NVIDIA under their own privacy and usage policies.

We also use Google Firebase for authentication (email/password and Google OAuth), data storage (Firestore), and file storage (Firebase Storage). Firebase operates under Google's privacy framework.

For PDF files over 3,000 characters, we may generate and cache text embeddings to reduce repeated processing costs. Embedding data is stored in Firestore and associated with your account.

We do not sell your personal data to any third party. Data shared with NVIDIA and Firebase is limited to what is necessary to provide the Service.

Data Security

We use industry-standard security practices to protect your data. Authentication is handled via Firebase Authentication with session-based cookies. Passwords are never stored in plain text. File uploads are stored in Firebase Storage with access rules that restrict files to their uploading user.

Server-side API routes are protected by authentication middleware. Admin areas require verified admin role access. Despite these measures, no system is completely secure, and we cannot guarantee absolute security of data transmitted over the internet.

Cookies and Session Data

Sanabel AI uses a session cookie (userCred) to maintain your login state across page visits. This cookie stores your email, role, and session token, is set to expire after 360 days, and is required for the platform to function. We do not use advertising cookies or track you across other websites.

Guest users (not logged in) who access public tool previews are tracked by IP address to enforce rate limits on free trial usage.

Children's Privacy

Sanabel AI is designed to be used by students in educational settings. Users under 13 must access the platform through a school or organization account managed by a teacher or administrator, or with verifiable parental consent. We do not knowingly collect personal data from children under 13 outside of a school-supervised context.

Student accounts on the platform have access to a restricted workspace (/student) that shows only age-appropriate tools and hides features such as video generation and advanced AI agents.

Your Rights

• Access: You can view your account data, prompt history, and usage statistics from your Settings page.
• Correction: You can update your display name and profile information in Settings at any time.
• Deletion: You may request deletion of your account and all associated data by contacting us. Uploaded files can be deleted directly from the My Files page.
• Data portability: You may request an export of your prompt history and account data by emailing us.
• Withdraw consent: You may stop using the Service and close your account at any time.

Data Retention

We retain your account data for as long as your account is active. Prompt history is retained for the last 50 entries on the Starter plan and unlimited on Pro and Enterprise. Uploaded files remain in storage until you delete them or close your account. Support ticket data is retained for up to 2 years. If you request account deletion, we will remove your personal data within 30 days.

Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page and, for material changes, notify you by email or an in-app notice. We encourage you to review this policy periodically.

Contact Us

If you have questions, concerns, or requests regarding your privacy or this policy, please contact us at: