Privacy Policy

1. Information We Collect

We collect information in the following ways:

2. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain the Adibi LMS platform
• Process transactions and manage subscriptions via Paddle
• Send administrative communications (invoices, system alerts, account updates)
• Respond to support requests and enquiries
• Improve our services through usage analytics
• Comply with legal obligations
• Prevent fraud and ensure platform security

We do not sell your personal data to third parties. We do not use student data for advertising purposes.

3. Data Sharing

We may share your information with:

• Paddle — our payment processor (Paddle.com Market Limited, registered in England and Wales). Paddle acts as Merchant of Record for all transactions.
• Supabase — our database and authentication infrastructure provider
• Vercel — our hosting infrastructure provider
• Resend — our transactional email provider
• Legal authorities — when required by applicable law or valid legal process

All third-party service providers are contractually obligated to use your data only to provide services to us and in accordance with this policy.

4. Student Data & FERPA / Child Privacy

Adibi LMS is used by educational institutions. When institutions use our platform to manage student records, they act as the data controller for that student data, and we act as the data processor. Institutions are responsible for obtaining appropriate consent from parents or guardians for students under 18 (or the applicable age of majority in their jurisdiction).

We do not knowingly collect personal information directly from children under 13 without verified parental consent as required by applicable law.

5. Data Storage & Security

Your data is stored on servers located within the European Union (Supabase infrastructure). We implement industry-standard security measures including:

• Encryption in transit (TLS/HTTPS)
• Encryption at rest for sensitive data
• Role-based access controls
• Regular security reviews

No method of transmission over the internet is 100% secure. While we strive to use commercially acceptable means to protect your data, we cannot guarantee its absolute security.

6. Data Retention

We retain your account data for as long as your subscription is active and for a reasonable period thereafter (up to 90 days) to allow for account recovery. Upon written request for deletion, we will remove your personal data within 30 days, except where retention is required by law.

Student records created by an institution remain under that institution's control. Institutions may request full data export or deletion at any time by contacting us.

7. Cookies

We use the following types of cookies:

• Essential cookies: Required for authentication and session management
• Functional cookies: Remember your preferences (e.g., language, timezone)
• Analytics cookies: Anonymous usage statistics to improve our service

You can control cookie preferences through your browser settings. Disabling essential cookies may prevent you from using certain features of the platform.

8. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Access: Request a copy of the data we hold about you
• Correction: Request correction of inaccurate data
• Deletion: Request deletion of your personal data
• Portability: Receive your data in a machine-readable format
• Objection: Object to certain types of processing

To exercise any of these rights, contact us at privacy@adibi.co.uk. We will respond within 30 days.

9. International Transfers

Adibi International is based in the United Kingdom. By using our service, you acknowledge that your information may be processed in countries outside your country of residence, including the UK and EU, which may have different data protection laws.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by email or by a prominent notice on our platform at least 14 days before the change takes effect. Your continued use of Adibi LMS after changes constitutes acceptance of the updated policy.

11. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at: