Privacy Policy

Who we are

Al Rahma Studio is the content tool of Al Rahma Academy, a madrasah for children aged 4–12. It is used only by authorised Al Rahma staff to create posts and videos and publish them to Al Rahma's own social media accounts (Instagram, YouTube and TikTok).

Contact: social@alrahmaacademy.co.uk

What we access from connected accounts

When an Al Rahma administrator connects one of Al Rahma's own accounts, the studio receives:

• Basic profile information: the account name, profile picture and account ID, so the studio can show which account is connected.
• Permission to publish: to upload and post the photos and videos our staff choose, and to read the account's own posts, comments, messages and statistics where the platform allows it.
• Access tokens issued by the platform, which let the studio act on the account's behalf.

The studio only connects to Al Rahma's own accounts. It does not collect data about other people's accounts.

How we use it

Only to run Al Rahma's social media: publishing content our staff have prepared, scheduling posts, reading comments and messages sent to Al Rahma, and seeing how our posts perform. We do not sell data, use it for advertising, or share it with anyone except as described below.

Where it is kept and who processes it

• Access tokens are stored on our servers and can only be read by the studio's server; they are never shown in a web browser.
• Our database and file storage are provided by Supabase, and the studio is hosted on Cloudflare.
• Content is sent to the platform it is being posted to (Instagram, YouTube or TikTok) only when a staff member chooses to publish it.
• Staff may use AI services (Anthropic, OpenAI and Google) to help write captions and create images. Children's personal data is not sent to them.

YouTube

The studio uses YouTube API Services to upload videos to Al Rahma's YouTube channel. By using the studio to upload to YouTube, you agree to the YouTube Terms of Service, and Google's handling of data is covered by the Google Privacy Policy.

• What we access: the connected channel's ID and name (to show which channel videos go to), and permission to upload the videos our staff choose. We do not read other channels, subscribers or viewing data.
• What we store: Google's access token, the channel's ID and name, and for each video we upload, its YouTube link and privacy setting. The token is kept on our server only.
• How it is used and shared: only to upload Al Rahma's videos and show where they went. It is not sold, used for advertising or shared with anyone else.
• Removing access: disconnect YouTube in the studio (this deletes the stored token and channel details straight away), or remove Al Rahma Studio from your Google security settings. If access is removed at Google, the studio notices at its next check and deletes the stored token and channel details within a day, and never later than 30 days.
• Keeping it current: the channel's name is refreshed from YouTube at least once a day. If you ask us to delete YouTube data, we do so within 7 days.

Cookies and advertising

The studio uses only the cookies needed to keep staff signed in and to protect the connection steps with YouTube and TikTok. It has no advertising and no third-party tracking, and no one serves ads through it.

Children

The studio is not used by children, and connecting social media accounts does not give us any information about the children in our classes.

How long we keep it

Access tokens are deleted as soon as an account is disconnected in the studio, and you can also remove the studio's access at any time from the platform's own settings. Posts and media we create are kept until our staff delete them.

Your rights

You can ask what information we hold, ask us to correct or delete it, or raise any concern, by emailing social@alrahmaacademy.co.uk. If you are in the UK you can also contact the Information Commissioner's Office (ico.org.uk).

Changes

If this policy changes, we will update this page and the date at the top.