Privacy Policy

Last Updated: May 8, 2026

Introduction

Afghan Geeks Education ("we," "us," or "our") operates the Afghan Geeks Learning Management System (LMS) at afghangeeksedu.org. We are committed to protecting your personal data and respecting your privacy rights in accordance with the General Data Protection Regulation (GDPR) and applicable European Union data protection laws.

This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our educational platform.

Who We Are

Organization: Afghan Geeks Education  
Contact Email: info@afghangeeks.com  
Location: European Union  
Data Controller: Afghan Geeks Education

What Data We Collect

We collect and process the following categories of personal data:

1. Account & Authentication Data

• Email address
• Password (encrypted and hashed)
• User role (Student, Instructor, or Administrator)
• Registration timestamp
• Account activation tokens
• JSON Web Tokens (JWT) for secure authentication

2. Profile Information

• Full name
• Display name or pseudonym
• City/location
• Profile photo or avatar
• Language preference (English, Dari, or Pashto)
• Course preferences
• Learning style preferences

3. Educational Data

• Course enrollments and group assignments
• Assignment submissions (uploaded files, submission status, grades, feedback)
• Session attendance records
• Learning progress and completion status
• Course materials accessed
• Instructor feedback and evaluations

4. Technical Data

• Session data (to keep you logged in)
• Login timestamps

How We Collect Your Data

We collect data through:

1. Direct provision: When you register, complete your profile, or submit assignments
2. Automated collection: Session data when you use the platform
3. Third-party services: Google Analytics for platform usage statistics

Why We Process Your Data (Legal Basis)

We process your personal data based on the following legal grounds:

1. Contractual necessity: To provide educational services you've enrolled in
2. Legitimate interests: To improve our educational platform and ensure platform security
3. Consent: For optional features like language preferences and learning style customization
4. Legal obligation: To maintain educational records and ensure platform security

How We Use Your Data

We use your personal data to:

• Create and manage your student or instructor account
• Deliver course content and educational materials
• Track your learning progress and provide feedback
• Enable communication between students and instructors
• Improve our educational platform and services
• Ensure platform security and prevent unauthorized access
• Comply with legal and regulatory requirements

Data Sharing and Third-Party Services

We use the following third-party services that may process your data:

Resend (Email Service)

Purpose: Sending account activation emails, password resets, and course notifications  
Data shared: Email address, name  
Location: EU-compliant servers

Amazon S3 (File Storage)

Purpose: Storing assignment submissions, profile photos, and course materials  
Data shared: Uploaded files, user identifiers  
Location: EU region servers

Google Analytics

Purpose: Understanding platform usage and improving user experience  
Data shared: Anonymized usage statistics  
Privacy Policy: https://policies.google.com/privacy

We do not sell your personal data to third parties. We only share data with service providers necessary to operate our educational platform.

Data Storage and Security

Where We Store Your Data

All data is stored on secure servers located in the European Union, ensuring compliance with GDPR requirements.

How We Protect Your Data

• Passwords are encrypted using industry-standard hashing algorithms
• Data transmission is secured using HTTPS/TLS encryption
• Access to personal data is restricted to authorized personnel only
• Regular security audits and updates
• Secure authentication using JWT tokens

Data Retention

We retain your personal data for as long as:

• Your account remains active
• Required to provide educational services
• Necessary to comply with legal obligations (e.g., educational record retention requirements)

You may request deletion of your account and associated data at any time (see "Your Rights" below).

Your Rights Under GDPR

As a data subject in the European Union, you have the following rights:

Right to Access

You can request a copy of all personal data we hold about you.

Right to Rectification

You can update or correct inaccurate personal information through your profile settings or by contacting us.

Right to Erasure ("Right to be Forgotten")

You can request deletion of your personal data, subject to legal retention requirements.

Right to Restrict Processing

You can request that we limit how we use your data.

Right to Data Portability

You can request your data in a structured, machine-readable format.

Right to Object

You can object to processing of your data based on legitimate interests.

Right to Withdraw Consent

Where processing is based on consent, you can withdraw it at any time.

Right to Lodge a Complaint

You can file a complaint with your local EU data protection authority.

How to Exercise Your Rights

To exercise any of these rights, please contact us at:

Email: info@afghangeeks.com  
Subject line: "Data Privacy Request - [Your Request Type]"

We will respond to your request within 30 days.

Cookies and Tracking

We use minimal cookies to:

• Keep you logged in (session cookies)
• Remember your language preference
• Analyze platform usage (via Google Analytics)

For detailed information about cookies we use, please see our Cookie Policy.

Children's Privacy

Our platform is designed for users aged 13 and above. We do not knowingly collect data from children under 13. If you believe we have collected data from a child under 13, please contact us immediately.

International Data Transfers

All data is stored within the European Union. When using third-party services (Resend, AWS S3), we ensure they comply with GDPR through appropriate safeguards such as Standard Contractual Clauses (SCCs).

Changes to This Privacy Policy

We may update this Privacy Policy periodically. We will notify you of significant changes via email or platform notification. The "Last Updated" date at the top indicates when changes were made.

Contact Us

If you have questions about this Privacy Policy or how we handle your data:

Email: info@afghangeeks.com  
Organization: Afghan Geeks Education  
Location: European Union