Privacy Policy

Misbah Al-Ilm is operated by Mo Hasan, as an individual rather than a registered company. That means there is one person responsible for the decisions described here, and you can reach them at support@misbahalilm.com.

When you sign in with Google, Google gives us your name, your email address, and a stable account identifier. We never see or receive your Google password.

When you subscribe, you upload an image of your payment receipt. We store that image, along with the details read from it: the amount, the currency, the sender and recipient shown on it, the date, and any reference number.

We also store which manager you chose, the state and dates of your subscription, any rating you write about your manager, and a record of each time you open the tutor.

Your IP address is used to rate-limit sign-in and upload requests, so that one source cannot flood them. It is not used to build a profile of you.

To give you access to the tutor, to check that a payment actually arrived before granting that access, to stop the same receipt being used twice, and to answer you when you write to us.

Your data is not sold, rented, or used for advertising. There are no advertising or analytics trackers on this site.

The tutor is a Gemini Gem, which is a file in Google Drive. Granting you access means adding your Google address as a viewer on that file, so your address is visible to the account that owns the Gem. When your subscription ends, that permission is removed.

Sign-in and Gem sharing use two separate Google applications on purpose. The one you sign in with asks only for your name, email address and profile — it has no access to your Google Drive, your files, or anything else in your account.

To check a payment without making you wait for a human, the receipt image you upload is sent to Anthropic's Claude, which reads the amount, date, recipient and reference number from it. Anthropic processes the image to produce that reading and is not permitted to use it for anything else.

The model only ever reads. It cannot reject your payment: refusals are always made by a person, because a wrong refusal blocks someone who has paid. A payment may be approved automatically when every check passes.

Images are also fingerprinted so that a receipt already used cannot be submitted again, including as a cropped or resized copy.

Receipt images are deleted 12 months after they are uploaded. That is long enough to settle any realistic dispute about a payment, and we would rather not hold images of your financial documents beyond it.

The fingerprints and reference numbers taken from a receipt are kept after the image is gone. They are what stops an old receipt being reused, and they cannot be turned back into the image or read as one.

Your account and subscription history are kept while your account exists. If you ask us to delete your account, we delete it and its receipts; we keep the fingerprints, and records we are required to keep to show that a payment was made.

The site and its database run on Railway, which hosts the servers and stores the data. Google receives your sign-in and the address the Gem is shared with. Anthropic receives receipt images to read them, as described above.

Nobody else. There are no advertising networks, data brokers, or analytics companies involved.

A session cookie keeps you signed in. A second cookie remembers whether you are reading in Arabic or English. Your theme choice and whether you have seen the opening animation are stored in your own browser and never sent to us.

None of these track you across other websites, and there are no third-party cookies.

If you rate your manager, nothing you wrote appears publicly unless you tick the box asking for it, and an administrator also approves it. Both are required.

If it is published, you are shown by first name and last initial — never your full name, your email address, or a photo. You can take it down at any time by unticking that box and saving, or by writing to us.

Write to support@misbahalilm.com to see what we hold about you, correct anything wrong, delete your account, or withdraw permission for a published rating. We will answer within 30 days.

This service is intended for students, and many of them are under 18. If you are under 18, use it with the knowledge and permission of a parent or guardian, and have them read this page with you. If you are a parent or guardian and would like your child's data removed, write to us and it will be.

This policy was last updated on 2026-08-22. If it changes in a way that affects what is collected or who receives it, the date here changes and the new version replaces this one on this page.