Roblox; coming soonA new learning path with Roblox is on its way.

Privacy

This page explains what data Cankav collects from parents, children, and teachers, why it is needed, and how to request retention or deletion information.

Last reviewed: 22 Tir 1405

What information is recorded?

We record parent mobile and account details, child name and age, assessment answers, bookings, attendance, homework, progress reports, support messages, and transaction IDs. Cankav does not receive or retain full bank card details.

What is this data used for?

Data is used to create accounts, match times and teachers, deliver and follow up classes, report to parents, process payments and payouts, answer support requests, prevent misuse, and meet legal obligations. It is not used to sell lists of children or serve behavioural advertising to them.

Children’s information

Child accounts are created under parental supervision. We prioritize data minimization, private settings, and age-appropriate explanations. Age verification data is used only for that purpose. Unnecessary data, images, audio, or classroom content must not be collected or shared outside the educational purpose. A parent or legal guardian handles requests concerning the child’s data.

Who can see the data?

Teachers see only information needed for their own classes. Infrastructure, SMS, payment, and classroom providers access only what is required for their service. Disclosure to legal authorities is limited to valid requests and legal obligations.

Retention and deletion

Data is retained while an account is active or as needed for finance, support, security, or legal obligations. You can request access, corrections, or deletion. Some financial or investigation records may need to be retained until a legal retention period expires.

Security and incidents

Access is role-based, sensitive communications are encrypted, and key events are logged. No system is risk-free. Incidents that seriously affect users’ rights are investigated, contained, and communicated as appropriate.

Cookies and usage statistics

Essential cookies support sign-in and account security. Aggregate usage is measured using a data-minimizing tool without creating advertising profiles for children. The website banner explains this essential use.

Privacy requests

To access, correct, delete, or ask about data, use the contact page or parent dashboard ticket system. Account identity verification may be required to avoid disclosing data to someone else.

International child protection principles

Our procedures draw on recognized international principles: the child’s best interests, demonstrable parental consent for young children, clear information, minimal collection, access and deletion rights, limited retention, and no behavioural advertising to children. The EU GDPR, US COPPA, UN Committee on the Rights of the Child General Comment No. 25, and UK Children’s Code apply according to their respective jurisdictions and conditions. Mentioning them does not claim that all automatically apply to Cankav.

Legal sources

For reading the original texts; this list is not legal advice.

  1. Islamic Consultative Assembly. (1382). Electronic Commerce Act, Articles 58–61.
  2. Islamic Consultative Assembly. (1388). Computer Crimes Act.
  3. Islamic Consultative Assembly. (1399). Protection of Children and Adolescents Act.
  4. Supreme Council of Cyberspace. (1400). Document on the Protection of Children and Adolescents in Cyberspace.
  5. European Union. (2016). General Data Protection Regulation (GDPR), particularly Articles 5, 8, 12–17, and 25.
  6. US Federal Trade Commission. (2025). Children’s Online Privacy Protection Rule (COPPA), 16 CFR Part 312.
  7. UN Committee on the Rights of the Child. (2021). General Comment No. 25 on children’s rights in the digital environment.
  8. UK Information Commissioner’s Office. (2020). Age Appropriate Design Code (Children’s Code).