Privacy Policy

1. Who We Are and How to Reach Us

AlifBee US LLC provides Arabic language learning apps, curriculum, assessments, and instruction to individuals, families, schools, and organizations in the United States. In this policy, "AlifBee," "we," "us," and "our" mean AlifBee US LLC. "You" means the person using our services or the parent, guardian, or school acting on a learner's behalf.

We have designated one person to be responsible for the information we collect, use, and share. That person coordinates our information security program, handles privacy requests, and is the contact for schools and regulators.

2. Three Ways You May Use AlifBee

Different rules apply depending on how you reach us. Find your situation below, because the rest of this policy refers back to these three channels.

3. Information We Collect

3.1 Information you give us

3.2 What we do not collect

• We do not ask learners about their religious practices, beliefs, or observance, or about their family's religion.
• We do not ask about political views, health, sexual orientation, immigration or citizenship status, or household income.
• We do not collect precise location. We do not track where a device physically is.
• We do not collect voiceprints, faceprints, or other biometric identifiers used to identify a person. Where a learner records speech for pronunciation practice, the recording is used to score that exercise and is deleted as described in Section 8.
• We do not buy personal information about you from data brokers.

4. How We Use Information

We collect only what we reasonably need for the purposes below, and we use it only for those purposes.

5. Children Under 13

AlifBee Kids and parts of our curriculum are built for young learners. We follow the Children's Online Privacy Protection Act and the Federal Trade Commission's rule at 16 C.F.R. Part 312, as amended effective April 2026. All information we collect from a child under 13 is treated as sensitive information, and we handle it as described here.

5.1 Parental consent

Before we collect personal information from a child under 13, we give the parent direct notice of what we collect, how we use it, and who we share it with, and we obtain the parent's verifiable consent.

We ask for consent in two separate parts. You may consent to our collecting and using your child's information to provide the service without also consenting to our sharing that information with any third party. Sharing that is not necessary to run the service requires its own separate consent. We never bundle the two.

We do not require a child to disclose more information than is reasonably necessary to take part in an activity.

5.2 School consent

Where a public school district contracts with us and provides student accounts, the district may consent on behalf of parents, but only for educational use and for no other commercial purpose. We give the district full written notice of our practices before any collection so it can make an informed decision. We never use information collected under a school's consent for advertising, for marketing to families, or for any purpose outside the educational service. In the private and state-funded school channel we do not rely on school consent. We obtain parental consent directly.

5.3 Parent rights

At any time, a parent or guardian may:

• Review the personal information we have collected from their child.
• Ask us to delete it.
• Refuse to allow us to collect or use any more of it, by closing the account or contacting us.
• Withdraw a consent previously given, including consent to third-party sharing.

Write to info@alifbee-us.com. We verify that the requester is the child's parent or guardian before we act. Refusing further collection may mean we can no longer provide the service to that child.

5.4 What we never do with children's information

• No behavioral or targeted advertising to children, on our service or anywhere else.
• No selling, renting, or sharing children's information for money or anything else of value.
• No using children's information to train artificial intelligence models.
• No building profiles about a child for any purpose other than teaching that child.
• No conditioning a child's participation in an activity on giving us more information than that activity needs.

6. Students and Schools

This section applies when a school, district, or co-op uses AlifBee with its students. It applies alongside our written agreement with that school, and if the two conflict, the agreement controls.

6.1 The school owns the data

Student records and student information supplied to us or generated through a student's use of the service remain the property of, and under the control of, the school or district. We hold that information on the school's behalf. We use it only to provide the service the school has contracted for, and only as the school directs.

6.2 Our role under federal student records law

For a school subject to the Family Educational Rights and Privacy Act, we act as a school official with a legitimate educational interest under 34 C.F.R. 99.31(a)(1)(i)(A) and (B). We perform an instructional and assessment function the school would otherwise perform with its own employees, namely delivering Arabic language instruction, practice, and assessment and reporting progress to teachers. We are under the direct control of the school with respect to the use and maintenance of education records. We do not redisclose personally identifiable information from education records without the school's authorization, and we use it only for the purpose for which it was disclosed to us, as required by 34 C.F.R. 99.33(a).

6.3 Our commitments to every school

6.4 Surveys and questionnaires

We do not collect information from students for marketing purposes or to sell it. If a school asks us to administer any survey or questionnaire that touches the protected categories under the Protection of Pupil Rights Amendment, 20 U.S.C. 1232h(b), we will do so only after the school has completed its own parental notice and consent process, and we will support that process. Our placement tests measure Arabic language ability only.

6.5 Data privacy agreements

We sign school and district data privacy agreements, including agreements required by California Education Code 49073.1, New York Education Law 2-d and 8 NYCRR Part 121, Texas Education Code Chapter 32, and comparable laws in other states. Schools may request our standard data privacy addendum and our current list of subprocessors at info@alifbee-us.com.

7. How We Share Information

We do not sell personal information, and we do not share it for cross-context behavioral advertising. We share information only in the situations below.

8. How Long We Keep Information, and When We Delete It

We keep personal information only as long as we reasonably need it for the purpose we collected it for. We do not keep children's personal information indefinitely. The table below is our written data retention policy.

When a retention period ends we delete the information using reasonable measures to protect it during deletion, or we de-identify it so it can no longer be connected to a person. We may keep information longer where the law requires it, or where we need it to resolve a dispute or enforce our agreements, and we keep only what that purpose needs. Schools may ask us to delete student information at any time. We complete school deletion requests within 60 days.

9. How We Protect Information

We maintain a written information security program with safeguards appropriate to the sensitivity of the information we hold and to the size and nature of our business. The program covers children's personal information specifically. It includes:

• A named employee responsible for coordinating the program.
• A risk assessment at least once a year covering internal and external risks to the confidentiality, security, and integrity of the information we hold, including information collected from children.
• Safeguards designed to control the risks we identify, including encryption of personal information in transit and at rest, access controls limiting staff access to those who need it, multi-factor authentication on administrative systems, logging, and secure development practices.
• Regular testing and monitoring of whether those safeguards work.
• A review of the whole program at least once a year, updated for new risks and new methods.
• Written security assurances from any third party before we release personal information to it.
• Alignment with the National Institute of Standards and Technology Cybersecurity Framework.
• Staff training on privacy and security at hire and annually.

No system is perfectly secure. If personal information is subject to a breach, we notify affected individuals and schools as required by law and without unreasonable delay, and we tell schools what happened so they can meet their own obligations.

10. Your Privacy Rights

Depending on where you live, you have some or all of the rights below. We give every user in the United States the same core rights regardless of state, because we would rather not run different rules for different families.

A parent or legal guardian exercises these rights on behalf of a child. A school exercises them for student information it controls, and parents in the school channel should contact their school first.

11. How to Exercise Your Rights, and How to Appeal

11.1 Making a request

Submit a request in either of these ways. You do not need to create an account to make a request.

• Email info@alifbee-us.com with the subject line "Privacy Request."
• Use our Contact page and select a privacy request.

We verify your identity before acting, using information already associated with your account. We will not ask for more information than we need to verify you. An authorized agent may submit a request on your behalf with written permission that we can verify.

11.2 Our deadlines

11.3 Appeals

If we decline a request, you may appeal by emailing info@alifbee-us.com with the subject line "Privacy Appeal." Appealing is as easy as making the original request. We respond in writing within 60 days and explain our reasoning.

If we deny your appeal, you may submit a complaint to your state attorney general. Texas residents may contact the Office of the Texas Attorney General through its consumer complaint page at texasattorneygeneral.gov/consumer-protection/file-consumer-complaint. We will provide a direct link to that page in our appeal decision.

12. Cookies, Tracking, and Browser Signals

We use cookies and similar technologies to keep you signed in, remember your settings, keep the service secure, and understand how the service performs. We do not use advertising cookies, advertising pixels, or cross-site tracking technologies, and we do not allow third parties to collect information about your activity across other sites through our service.

We honor browser-based opt-out signals, including Global Privacy Control. If your browser or a browser extension sends one of these signals, we treat it as a request to opt out of targeted advertising and sale of personal information for that browser. Because we do neither, the signal changes nothing about how we treat your information, but we recognize it and record it. We do not respond to Do Not Track headers, which have no agreed standard. Global Privacy Control does have one, and we honor it.

13. Learners Aged 13 to 17

We apply a single national rule to every user we know or reasonably should know is under 18, regardless of which state they live in:

• No targeted advertising to them, ever.
• No sale of their personal information, ever.
• No profiling of them in ways that produce legal or similarly significant effects.
• No use of their information to train artificial intelligence models.
• Collection limited to what is needed to provide the learning service they signed up for.

Where a state requires opt-in consent before processing a teenager's information for any of these purposes, the answer is simpler: we do not do them at all. Parents of learners aged 13 to 17 may contact us to review or delete their child's information, and we verify the relationship before acting.

14. State-Specific Disclosures

14.1 Texas

This policy is our notice under the Texas Data Privacy and Security Act, Texas Business and Commerce Code Chapter 541. Section 3 lists the categories of personal data we process. Section 4 states our purposes. Section 7 lists the categories of personal data we share and the categories of third parties we share it with. Sections 10 and 11 explain your rights, how to submit a request, and how to appeal. We do not sell personal data. We do not sell sensitive personal data. We do not sell biometric data. We do not process personal data for targeted advertising.

14.2 California

We are an operator of an online service designed and marketed for K-12 school purposes, and we comply with the Student Online Personal Information Protection Act, California Business and Professions Code 22584. We do not engage in targeted advertising using covered information, do not amass a profile about a student except to further K-12 school purposes, do not sell or rent student information, and do not disclose covered information except as that section permits. We delete a student's covered information at the request of a school or district. For contracts with California local educational agencies we include all terms required by California Education Code 49073.1. California residents also have the rights described in Sections 10 and 11, and we do not sell or share personal information as those terms are defined under California law.

14.3 New York

For contracts with New York educational agencies we comply with New York Education Law 2-d and 8 NYCRR Part 121. We do not sell student, teacher, or principal personally identifiable information and do not use or disclose it for any marketing or commercial purpose. We limit internal access to staff who need it, use encryption to protect information in motion and at rest, align our practices with the NIST Cybersecurity Framework, and bind subcontractors to the same terms. The Parents' Bill of Rights for Data Privacy and Security, together with the supplemental information required by 8 NYCRR 121.3, is appended to each such contract and is available from the contracting school.

14.4 Other states

Residents of Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Utah, and Virginia have privacy rights under their own state laws. We provide the rights in Section 10 to residents of every state, using the deadlines in Section 11. Maryland residents should note that we do not sell sensitive personal data under any circumstances, and we do not process the personal data of anyone under 18 for targeted advertising or sale.

15. Changes to This Policy

If we make a material change to how we handle personal information, we post the updated policy here with a new effective date and notify account holders by email at least 30 days before the change takes effect. We notify schools directly. Where a change would materially affect information already collected from a child under 13, we obtain new verifiable parental consent before the change applies to that information rather than relying on the consent already given.

16. Contact Us

Questions, requests, and complaints about privacy go to our Data Protection Officer.