Privacy Policy

Last updated: August 28, 2026

About Us

Nabras is a standardized exam-preparation platform (Qudrat/Qiyas General Aptitude Test) in Saudi Arabia, built around an initial diagnostic, a personalized study plan, and AI-powered explanations of mistakes. This policy explains what data we collect when you use nabras.app, why, and who we may share it with.

Data We Collect

• Usage and diagnostic data: your answers to diagnostic questions and your study progress are stored locally in your browser (localStorage) and are not sent to our servers except when you request an AI explanation (see below). There is currently no account registration or password system.
• Usage analytics: we use PostHog and Google Analytics to understand how the site is used (pages visited, clicks, session duration). This includes technical session recording for some browsing sessions, with automatic masking of any text you type into input fields (maskAllInputs); we do not see your actual keystrokes.
• Telegram bot (optional): if you start a conversation with the Nabras Telegram bot, we store your chat ID and visible username (if any), to send follow-up messages related to your use of the platform only.
• Waitlist (optional): if you register your email in a waitlist or interest form, we use it only to contact you about Nabras.
• We do not collect: payment or credit card details (there is currently no paid subscription), and we do not request national ID or other sensitive data.

How We Use Your Data

• Generating a personalized explanation for your wrong answers via the Anthropic (Claude) API: we send only the question text, your answer, and the correct answer, without any personal identifier.
• Understanding and improving platform performance (the usage analytics described above).
• Contacting you if you left your email or started a Telegram conversation, about Nabras only, no marketing messages from other parties.

Who We Share Data With

We do not sell your personal data to anyone, and we do not run advertising on Nabras. We use technical service providers to operate the platform only:

• Supabase: database and backend infrastructure.
• Anthropic: AI-generated mistake explanations (Claude API).
• PostHog and Google Analytics: usage analytics.
• Telegram: if you choose to interact with the Nabras bot.
• Vercel: website hosting.

YouTube and YouTube API Services

Nabras publishes educational videos to its YouTube channel using YouTube API Services. By using this feature, we are bound by the YouTube Terms of Service, and Google's use of related information is governed by the Google Privacy Policy. This use does not involve accessing your personal YouTube or Google account data, only publishing content to Nabras's own channel.

Cookies and localStorage

We use localStorage to save your study progress locally on your device, and standard cookies for the analytics tools mentioned above. You can clear this data at any time from your browser settings.

Data Security

We apply reasonable technical measures to protect the data we store (HTTPS transport encryption, restricted database access). We cannot guarantee absolute security for any internet-connected system, but we do not store sensitive data (no payment details, no national ID).

Legal Basis & Saudi Personal Data Protection Law (PDPL)

We follow the principles of Saudi Arabia's Personal Data Protection Law (PDPL), issued by the Saudi Data & AI Authority (SDAIA): we collect the minimum data necessary to operate the platform, we do not use it for purposes beyond those disclosed in this policy, and you may request access to, correction of, or deletion of your data at any time via privacy@nabras.app. This policy is a general description of our practices and is not a substitute for legal advice.

Your Rights

You can request deletion of any data we have stored about you (your waitlist email, or your Telegram bot conversation) by contacting us at privacy@nabras.app. You can delete your local study progress data (localStorage) yourself from your browser settings at any time.

Children

Nabras is intended for high-school students preparing for the General Aptitude Test (typically age 17 and above). We do not knowingly collect data from children under 13.

Changes to This Policy

We may update this policy from time to time. Any material change will be posted here along with an updated "Last updated" date above.

Contact Us

For any privacy inquiry: privacy@nabras.app