Privacy Policy

1. Who we are

Mashrouh Training Center, Commercial Registration No. 2055142478, is the controller of personal data on Mashrooh under the Personal Data Protection Law of the Kingdom of Saudi Arabia.

For privacy questions, write to the support email: mashroo7.live3@gmail.com

2. What we collect

• Account: your name (and your name in Arabic or English as written on your ID, when a certificate needs it), mobile number, email and account type.
• Sign-in security:
  • verification codes, stored in a form that cannot be read;
  • passkey public keys;
  • your device's notification token and app language;
  • sign-in times.
• Organisations:
  • for trainers and centres: the Commercial Registration or Freelance Document and its copy, the payment provider's supplier code, and the bank-link confirmation;
  • for centres: the authorised signatory's name and masked ID number, and the time, IP address and device when the financial undertaking was accepted;
  • for companies: the company name and contact person's details, training requests and their negotiation, and employee codes and who used them.
• Purchases and payouts:
  • what you bought, the amounts and the payment method;
  • the masked card number and payment references;
  • refunds, earnings and transfers.
• Learning: course enrolments, watch progress, live-session attendance, exam answers and scores, certificates and ratings.
• National ID or Iqama: the number and your English name as written on the ID. We ask for them only when you complete a course that gives a verified certificate, and they are not kept on your profile. See section 6.
• Live sessions: your voice, video and name in live sessions and consultations, and their recordings.
• Messages: complaints and the evidence attached, negotiation messages and offers, providers' messages to their trainees, and notifications.
• Usage: app usage statistics through Firebase Analytics.

We do not receive your card number: you type it on the payment provider's page. We do not use the camera or microphone outside live sessions, and we do not collect your location.

3. Why we use it

• To create and protect your account and sign you in.
• To sell and deliver training, including payments, refunds, payouts to trainers and centres, live sessions, exams and certificates.
• To handle complaints, prevent fraud and protect the platform.
• To send service messages, warnings, updates and offers in the app and as phone notifications.
• To show the company whose code you used how your training in that course is going, as set out in section 4.
• To keep financial and legal records and answer the competent authorities.
• To understand how the platform is used and improve it.

We rely on:

• our agreement with you;
• our legal obligations;
• our legitimate interest in security and improvement, as far as the law allows;
• your consent where the law requires it. You may withdraw your consent at any time; this does not affect what was done before.

4. Who receives it

• The trainer or centre you learn with sees your name, progress, attendance and exam results in their programmes. Only the centre issuing your verified certificate sees your ID number; every view is logged, and the number is then erased from Mashrooh.
• The company whose code you used: if you enrol in a course with a company's code, the company that owns the code sees the following, for that course only:
  • your name and the date you enrolled;
  • what you paid of your share, or that it covered the whole seat, and any refund of your share;
  • how many sessions you completed, and your progress percentage;
  • your attendance at live sessions;
  • your final exam score and whether you passed;
  • whether your certificate was issued, and its date.
  • It does not see your ID number, phone, email, other courses, complaints or messages.
  • Purpose: the company follows the training it paid for. Basis: you enrolled in the course with the company's code, and the company has a legitimate interest in following the training it paid for.
  • If you delete your account, the company no longer sees your name; the record of the paid seat stays, because it is a financial record.
• Whoever checks your certificate: the check page opened by the QR code on an attendance certificate shows your name, the course, the provider and the date of issue.
• Service providers working for us:
  • Google Firebase: hosting, database, files, sign-in, notifications and usage statistics. Our database and servers run inside the Kingdom (Dammam region).
  • MyFatoorah: payments, refunds, payouts and invoices.
  • 100ms: live video; recordings are stored with Amazon Web Services.
  • Meta: verification by WhatsApp.
  • Resend: email, including sign-in codes and copies of complaints to the support team.
  • Google and Apple: if you choose to sign in with them.
• Official authorities: when the law requires it.

We do not sell personal data.

5. Transfers outside the Kingdom

Some service providers may process data outside the Kingdom, such as video, recordings, email, WhatsApp messages, notifications and usage statistics. We transfer data only as the Personal Data Protection Law and its regulations allow, with appropriate safeguards.

6. How long we keep it

• Account and profile: while the account exists; erased when it is deleted.
• Payment, refund and payout records: Mashrooh keeps the transaction records needed for refunds, payouts and what the law requires (amounts, dates and references, never any card details), linked only to an anonymous account number after the account is deleted. Detailed card and payment data is kept by MyFatoorah for security, payments and the protection of rights.
• ID or Iqama number: only to issue verified certificates. It is kept encrypted until the centre receives it, then erased at once, and after 30 days at the latest; it is never stored on your profile.
• Recordings of sessions and consultations: always, unless the provider or the admin deletes them for poor quality.
• Complaints and evidence: always.
• Exam results and certificates: always.
• What the company whose code you used sees: while your account exists; your name is removed from it when you delete your account.
• Sign-in codes: 5 minutes; an unused code is erased automatically when they end.

7. Your rights

You have the right to:

• know how your data is used;
• see it and get a copy;
• correct it;
• ask for it to be destroyed when it is no longer needed;
• withdraw your consent.

You can delete your account in the app (More › Delete account); see Delete your account. For any other request, write to the support email above. We will answer within 30 days at the most.

8. Messages and notifications

We send service messages, warnings, updates and offers in the app and as phone notifications. You can switch marketing messages and offers off at any time in your Mashrooh account settings (More › Notifications and contact), and you can switch phone notifications off in your phone's settings. Sign-in codes, service messages and important notices cannot be switched off.

9. Security

• Connections are encrypted.
• Permissions are limited by account type and checked on our servers.
• Sign-in codes are stored in a form that cannot be read.
• ID numbers are kept encrypted until the centre receives them, then erased; every view is logged.
• Our servers grant access to course videos.
• Administrative actions are recorded.

If a breach could harm you, we will tell you and the competent authority as the law requires.

10. Children

The Mashrooh platform is not directed at people under 18, who need a parent's or guardian's consent.

11. Device permissions

The app asks for these permissions only when needed:

• camera and microphone: for live sessions and consultations;
• photos and files: to choose an image or a file, such as complaint evidence;
• calendar: to add course video dates;
• Face ID or fingerprint: for quick sign-in; the biometric data never leaves your device;
• Bluetooth: for wireless headsets;
• local network: to keep course video sound and picture connected;
• notifications.

12. Changes and contact

We publish any change here and tell you about important changes in the app. Contact: mashroo7.live3@gmail.com

This page is the same text shown in the Mashrooh app and website. The Arabic text prevails if the two differ.