Privacy Policy

AP Elite Academy ("we," "our," or "us") is an online educational institution registered in the Hashemite Kingdom of Jordan under the domain apelite.academy (.edu.jo). We are committed to protecting the personal data of our students, instructors, and all users.

This Privacy Policy explains how we collect, use, store, share, and protect your personal information. It complies with the Jordanian Personal Data Protection Law No. 24 of 2023 and applicable international best practices.

By using our platform, you acknowledge that you have read and agree to this Privacy Policy.

2.1 Account & Registration Data

• Full name, email address, phone number, and password (encrypted)
• Country of residence and preferred language
• Date of birth where required for age verification

2.2 Academic Data

• Course enrollment records and cohort selections
• Progress, quiz results, assignments, and completion certificates
• Communication with instructors through the platform

2.3 Payment & Billing Data

• Billing name, address, and country
• Payment method details processed via PayTabs — we do not store card numbers
• Transaction history and invoices

2.4 Technical & Usage Data

• Approximate location (city/country) derived from your connection — your IP address is not stored
• Browser type, operating system, device type, and preferred language
• Pages visited, referral source, time on page, and aggregate usage data

Our website analytics are privacy-first and cookieless. To count unique visits we use only a temporary, daily-rotating anonymous identifier (a one-way hash) that cannot be linked back to you and is automatically discarded each day. We do not store IP addresses and do not use analytics or third-party tracking cookies.

3.1 Service Delivery

• Creating and managing your student account
• Processing enrollments and payments
• Delivering course content and materials
• Issuing certificates upon completion

3.2 Communication

• Sending enrollment confirmations and course updates
• Responding to support inquiries
• Notifying you of new courses or changes (opt-out available)

3.3 Platform Improvement

• Analyzing usage to improve course quality
• Diagnosing technical problems and ensuring security
• Conducting anonymized performance analytics

3.4 Legal Compliance

• Complying with Jordanian education and tax regulations
• Responding to lawful requests from Jordanian authorities
• Enforcing our Terms of Service

Under the Jordanian Personal Data Protection Law No. 24 of 2023, we rely on:

• Contractual Necessity: Fulfilling your enrollment and delivering educational services
• Legitimate Interests: Platform improvement, fraud prevention, and security
• Legal Obligation: Compliance with Jordanian laws
• Consent: Marketing communications — withdrawable at any time

We do not sell your personal data. We share data only with:

• PayTabs: Payment processing (PCI-DSS compliant)
• Supabase: Secure cloud database hosting
• Vercel: Website hosting infrastructure
• Instructors: Limited to name, enrollment, and progress for course delivery only
• Legal Authorities: When required by Jordanian law or court order

• Account Data: Duration of account plus 3 years after closure
• Academic Records & Certificates: 7 years for verification purposes
• Payment Records: 7 years per Jordanian tax regulations
• Support Communications: 2 years from last contact
• Usage Logs: 12 months then anonymized

You may request deletion of your data subject to our legal retention obligations.

• Essential Cookies: Authentication, security, and cart persistence — cannot be disabled
• Analytics: Privacy-first and cookieless — only aggregate, anonymized usage data is collected; no analytics cookies are set
• Preference Cookies: Language and display settings

You may manage cookie preferences through your browser settings.

Under the Jordanian Personal Data Protection Law No. 24 of 2023, you have the right to:

• Access: Request a copy of the personal data we hold
• Rectification: Correct inaccurate or incomplete data
• Erasure: Request deletion subject to legal obligations
• Restriction: Limit how we use your data
• Portability: Receive your data in a machine-readable format
• Object: Object to processing or direct marketing
• Withdraw Consent: At any time where processing is consent-based

Contact privacy@apelite.academy. We respond within 30 days. You may also file a complaint with the National Cybersecurity Authority of Jordan.

• Students under 18 require parent or guardian consent to register
• We collect only data necessary for educational service delivery
• Parents may contact us to review, correct, or delete their child's data
• We do not display targeted advertising to identified minors
• Data collected without parental consent will be deleted upon notification

• Encryption: HTTPS/TLS for all transmissions. Passwords are bcrypt-hashed
• Access Controls: Authorized personnel only on a need-to-know basis
• Database: Row Level Security (RLS) — not publicly accessible
• Payments: PCI-DSS compliant via PayTabs — no card data stored
• Breach Notification: You and Jordanian authorities notified within 72 hours

Your data may be processed outside Jordan by providers maintaining SOC 2 or ISO 27001 certifications (Supabase, Vercel), with standard contractual safeguards in place.

Material changes will be communicated by email at least 14 days before taking effect. Continued use after the effective date constitutes acceptance.

• Email: privacy@apelite.academy
• Website: apelite.academy
• Jurisdiction: Hashemite Kingdom of Jordan

If not satisfied with our response, you may lodge a complaint with the National Cybersecurity Authority of Jordan or the competent court.