Privacy Policy

This Privacy Policy applies to the RBCs mobile application, its content, courses, mentor sessions, support features and any website or API operated by us (including rbcs.on-stage.site).

By creating an account or using the app you agree to the collection and use of information as described here. If you do not agree, please do not use the app.

The app is available in English and Arabic; you can change your language at any time from your profile.

We collect information you provide directly, information generated as you use the app, and limited technical information:

• Account data: your name, username, email address, phone number and password (stored only as a secure, non-reversible credential).
• Profile data: your profile photo (when you choose one with your device gallery), your preferred language and your notification preferences.
• Learning activity: courses you enrol in, lessons completed, progress and quiz results, favourites, reviews you write, and orders you place.
• Support data: tickets, messages and attachments you send to our support team.
• Device & technical data: a device identifier, app version, language, operating system and diagnostic/error information needed to keep the service reliable.
• Authentication data: if you sign in with Google, we receive the basic profile information you approve (name, email and profile picture).

We use the information we collect to:

• Create and manage your account, and keep you signed in securely.
• Provide courses, lessons, progress tracking and personalised recommendations.
• Process orders and payments, and send transactional receipts.
• Send service and marketing notifications you have enabled.
• Handle support tickets and respond to your requests.
• Detect, prevent and fix abuse, fraud and technical problems.
• Comply with legal obligations and enforce our terms.

We do not sell your personal information to third parties.

When you buy a course, we process your order through our secure API. Full payment card details are handled by our payment provider and are never stored on your device or in our app database.

Locally, the app only keeps non-sensitive payment references (such as the last digits and brand of a saved card for display) using encrypted device storage. Authentication tokens are stored with the platform's secure keychain/keystore.

We use Firebase Cloud Messaging to send push notifications (new courses, reminders, order and ticket updates) and local notifications scheduled on your device.

To do this, your device may share an installation token with us. You can turn categories on or off at any time from Profile → Notifications, and you can disable notifications entirely from your device settings.

The app relies on a small number of trusted providers:

• Google Sign-In — optional sign-in; governed by Google's own privacy policy.
• Firebase (Google) — hosting, cloud messaging and crash/diagnostic reporting.
• RBCs API servers — where your account and learning data is stored.
• External links — the app can open websites (e.g. mentor or payment pages) with your device browser; those sites are not covered by this policy.

Each provider processes data under its own terms and privacy policy.

We apply reasonable technical and organisational measures to protect your data:

• All communication with our servers is encrypted with HTTPS/TLS.
• Sensitive values (tokens, credentials) are kept in the device's secure keychain/keystore; preferences are kept in local app storage.
• Access to production data is restricted to authorised personnel.
• Passwords are never stored in plain text.

No method of transmission or storage is 100% secure, but we work to keep your data protected at all times.

We keep your personal information only as long as needed for the purposes described above, including legal and accounting requirements.

• Account deletion: you can request deletion from Profile → Delete Account. Your account is permanently deleted after 30 days; please avoid signing in during that period so the deletion can complete.
• After deletion, your profile, progress and orders are removed or irreversibly anonymised, except data we must retain by law.
• Notification tokens are deleted when you log out or disable notifications.

Subject to applicable law, you can:

• Access and review the personal data we hold about you (via Profile).
• Correct inaccurate or incomplete data.
• Delete your account and data.
• Opt out of marketing and category-based notifications.
• Change your language and preferences at any time.
• Withdraw a Google sign-in or request a copy of your data by contacting us.

To exercise any of these rights, use the in-app support ticket or the contact details in section 13.

RBCs is an educational platform intended for a general audience. It is not directed at children under 13 (or the minimum age required in your country), and we do not knowingly collect personal information from them.

If you believe a child has provided us with personal data, contact us and we will delete it promptly.

Your information may be processed and stored in countries other than the one you live in, including where our servers and providers (such as Firebase) operate. Where required, we use appropriate safeguards for such transfers.

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page and, for material changes, notify you in the app.

Continued use of the app after an update means you accept the revised policy.

Questions, requests or concerns about your privacy? Reach us any time: