Privacy Policy

1. Who we are

Nabraty ("we", "us", "our") is an English language coaching platform for Gulf and Arabic-speaking professionals. Our website is available at www.nabraty.com. For data-related enquiries, contact us at [email protected].

2. What data we collect

Account data

When you create an account, we collect your email address. We use passwordless authentication (magic link) via Supabase. We do not collect passwords.

Audio recordings

When you practise a scenario, your browser records audio using your microphone. This audio is sent to our backend for transcription and coaching analysis. We do not permanently store your audio recordings. Audio is processed in transit and discarded after the feedback is generated.

Usage and anti-spam data

To prevent abuse of our free trial, we store a hashed version of your IP address and a browser token (a random identifier stored in your browser). These are never linked to your name or email unless you choose to submit your email. We also use Cloudflare Turnstile for bot protection — see Cloudflare's privacy policy at cloudflare.com/privacypolicy.

Payment data

Payments are handled entirely by Stripe. We never see or store your full card number. Stripe may retain billing name, email, and transaction records as required by financial regulations. Stripe's privacy policy is available at stripe.com/privacy.

Contact form submissions

Messages sent via our contact form are processed by Formspree and forwarded to our email. Formspree's privacy policy applies to that data.

Mobile app waitlist

If you submit your email to be notified about our mobile app, that email is stored by Formspree and used only for that notification.

3. How we use your data

• To provide and improve our coaching service
• To authenticate your account and manage your subscription
• To process payments via Stripe
• To prevent spam and abuse of our free trial
• To respond to enquiries submitted via the contact form
• To notify you when our mobile app launches (if you opted in)

We do not sell your data. We do not use your data for advertising profiling.

4. Third-party services

We use the following third-party services which may process your data:

• Supabase (EU — Frankfurt): Authentication and database hosting
• Microsoft Azure (UAE North): Speech-to-text processing of audio
• Stripe: Payment processing
• Cloudflare: Website hosting, CDN, and bot protection (Turnstile)
• Formspree: Contact form and waitlist email processing

Each of these services has its own privacy policy and data processing agreement. We only share the minimum data necessary for each service to function.

5. Data retention

• Audio recordings: Not retained — discarded immediately after processing
• Account data (email): Retained while your account is active. You can request deletion at any time.
• Anti-spam records (IP hash, browser token): Retained for 30 days, then deleted automatically
• Payment records: Retained by Stripe as required by law (typically 7 years)
• Contact form messages: Retained in our email inbox until manually deleted

6. Cookies and local storage

We use browser local storage to maintain your authentication session (via Supabase) and to store your browser token for anti-spam purposes. We do not use third-party advertising cookies. Cloudflare may set cookies on their infrastructure pages for security and performance purposes.

7. Your rights

You have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Delete your account and associated data
• Object to processing in certain circumstances
• Data portability — request an export of your data

To exercise any of these rights, email us at [email protected]. We will respond within 30 days.

8. Children

Nabraty is designed for working professionals and is not intended for users under the age of 18. We do not knowingly collect data from children. If you believe a child has submitted data to us, contact us and we will delete it promptly.

9. Changes to this policy

We may update this policy from time to time. If we make material changes, we will notify registered users by email. Continued use of Nabraty after changes are published constitutes acceptance of the updated policy.

10. Contact

For any privacy-related questions or requests: [email protected]