Privacy Policy

What we collect

• Account details: email, name, username, password (stored hashed, never in readable form).
• If you choose Continue with Google, Google tells us your Google account id, email address, name and profile picture. We use the email to create or find your account. Our sign-in service keeps these details with your login record, but your name appears on your profile only if you confirm it on our form. No Google script runs on our pages.
• If you start signing up with Google and do not finish, we delete that unfinished account after 14 days.
• Your country, and your school if you tell us — so we understand where our students come from. Never shown to other users.
• We may pre-select your country from the approximate location of your internet connection. You can change it.
• Your IB subjects and levels, and your graduation session — used for recommendations.
• Who referred you, if you signed up with a referral code.
• How you heard about us, so we know which channels work. Never shown to other users.
• If you apply to teach: the answers on your application, the documents you upload with it (proof of your results or certificates, and your CV if you add one), and your LinkedIn profile link if you give one. Your CV, your documents and your LinkedIn link are seen by admins only. If you sign up as a teacher, the answers from the second step of that signup are kept with your account's sign-in record until you submit your application or delete your account.
• Purchases, wallet credits and refunds.
• Learning activity, in more detail than you might expect: while a lesson video is playing, your browser tells us roughly every 15 seconds how far you have got. For each lesson we keep the total time you have watched, the furthest point you reached, and when you were last watching. For a note we keep less — only that you opened it, and when you first did. This drives your progress bar and the refund and review eligibility rules. It is kept for as long as your account exists, and there is no setting to turn it off.
• Anything you write: reviews, discussion posts, reports, refund reasons.
• Searches in the course catalog that find nothing are counted per day, by subject and search text only — nothing about who searched is recorded.

“Post anonymously” hides you from other users, not from us

When you post anonymously, other students and the teacher see “Anonymous student” — neither your name nor your username is shown to them. Platform admins can always see who wrote a post, including anonymous ones, and they need to in order to act on reports and abuse. The same applies to anonymous reviews.

Watermarking

Course videos and notes are displayed with your username and a short code overlaid on them. The code identifies your account to us and means nothing to anyone else — it is there so that leaked material can be traced back to the account it came from. It is deliberately not your email address.

Who else sees your data

• Teachers see aggregate figures for their own courses — enrolment counts, watch time, ratings — and your name on any non-anonymous post or review (your username, if you have not set a name). They are not given your email.
• The companies that run this service for us, each handling only what their part needs: Supabase (the database, your account, and the emails that confirm your address or reset your password), Bunny (delivering course video), Railway (running the website), Cloudflare (the domain and our email routing), Resend (sending our emails), PayTabs (card payments) and Google (identity provider, only when you choose Continue with Google). These companies are outside Jordan; where each one handles your data is set out under “Where your data is”, below.
• Some actions — approving or rejecting a teacher application, or sending a moderation warning — write a line to our server log that includes the email address the message was addressed to. Those logs are held by our hosting provider.
• Our payment provider handles your card details. We never receive or store your card number.

Where your data is

Our database, which holds your account and the records described on this page, is in Frankfurt, Germany (eu-central-1). Our website is hosted in Amsterdam, the Netherlands. The countries where Resend, which sends our emails, and our other providers handle your data are [BUSINESS INPUT REQUIRED: PROCESSOR LOCATIONS].

Two things we keep that you might not expect

Masked contact details are kept unmasked. When you write a phone number, email address or social handle in a discussion, we hide it from other users — but we keep what you originally typed, so a moderator can see what was actually written if the post is reported.

Teacher applications are kept even if we say no. If you apply to teach, the name, schools and any documents you upload stay with us after a rejection, so we have a record of the decision and can recognise a re-application. They are deleted when you delete your account.

Payout and identity details (teachers)

• What we keep: your legal identity (your legal name, the type, number and issuing country of your ID, and a tax number if you give one) and your payout method (the bank account or CliQ details we pay you through, and your address for a bank transfer abroad).
• Why: to pay you, and to keep a record of those payments.
• Your consent: you give it when you save them. Saving a record means you agree that we may hold and use it for those purposes.
• How they are protected: they are stored encrypted, and the keys that unlock them are held separately from the database. Only our two admins can view them in full, and every view is logged.
• Who we share them with: only with our bank, and only to send your payment.
• How long we keep them: as set out in the teacher payout terms. Backups keep encrypted copies until they expire.
• Emails: we email you when you save or change these details, and when we record a payment to you or reverse one. These emails are sent through Resend.

Your rights, and how to use them

Jordan's Personal Data Protection Law gives you rights over the data we hold about you — to see it, to have it corrected, to object to how we use it, and to withdraw consent you have given. To use any of them, email support@libraryandco.com, telling us what you want and which account it concerns.

We are not quoting a response time here, because we would rather not promise one we have not committed to. We will acknowledge your message and tell you what we are doing.

What we do not do

We do not sell your data, and we do not run third-party advertising or analytics trackers on the site.

Deleting your account

You can delete your account from your settings page by typing DELETE and your current password. It happens straight away and cannot be undone.

If nothing on the platform depends on your account, we erase it completely: your profile, your subjects, any teacher application and the documents you uploaded with it, and any course you created that nobody bought.

If other people's records depend on it — a purchase, an enrolment, a review, a discussion post, earnings or wallet credit — we remove your personal details instead. Your email address, username, name, country and school are replaced or cleared, your teacher application and its documents are deleted, and the records stay without your name so the accounts they belong to still make sense. Any wallet credit left on the account is lost.

If you are, or used to be, a teacher and are still owed money, an admin reviews your request before your account is deleted.

If you are a teacher and we have paid you, we keep the legal identity details you had saved at the time of each payment, the payout details we actually paid to, and any receipt from our bank for those payments (which may show the account we paid), as a record of those payments, for five years after your account is deleted, and then delete them. Payout details we never paid to are deleted at once.

If you teach a course that students are enrolled in, an admin reviews the request first. Those students keep access to what they paid for, and your courses leave the catalogue.

Moderation and audit records are kept, because they exist so that actions taken on the platform can be reviewed afterwards.

We also keep a short record that an account was deleted — its username, when, and the reason you gave, if any — under the same retention question as audit records.

Age

You must be at least 16 to have an account, and you confirm that when you sign up. We store the fact that you confirmed it, when you did, and which minimum applied at the time.

We deliberately do not ask for your date of birth and do not store one. Confirming an age keeps less data about you than proving one would, and for a platform whose users are mostly under 18 that is the safer thing for us to be holding.