1. Overview
Ikarus ("Ikarus", "we", "us", or "our") is an online learning and tutoring platform that lets students discover courses, book sessions with instructors, message instructors, and manage payments for those services. This Privacy Policy explains what information we collect through the Ikarus mobile application (the "App"), how we use and share it, and the choices available to you.
By creating an account or otherwise using the App, you agree to the collection and use of information as described in this policy.
2. Information We Collect
2.1 Information you provide directly
- Account information — your name, email address, and phone number when you register, and a password if you sign up with email. You may instead sign in using Google or Apple, in which case we receive the basic profile information (name and email address) authorized by that provider.
- Profile photo — an optional picture you choose to upload from your photo library.
- Course and session activity — the courses you view or enroll in, sessions you book with instructors, your booking history, and reviews or ratings you submit.
- Messages and attachments — the content of messages you send through in-app chat with instructors or support, including any images or files you choose to attach.
- Support requests — information you provide when you contact us for help, including the reason you give if you choose to delete your account.
2.2 Information collected automatically
- Device and app information — device platform (Android or iOS), app version, and general diagnostic information needed to operate the App and keep it secure.
- Usage information — actions you take in the App (such as pages viewed and features used) so we can operate and improve the service.
- Push notification identifier — a device token used to deliver notifications about your bookings, messages, and account activity. See Section 6.
- Language preference — the display language of your device, so notifications and content can be shown in your preferred language.
We do not collect precise location data, and we do not access your contacts. We do not request or process any health, fitness, or biometric information.
3. How We Use Information
We use the information described above to:
- create and manage your account, and authenticate you when you sign in;
- let you browse courses, book sessions, and communicate with instructors;
- process payments and maintain your transaction and credit history;
- send you service notifications, such as booking confirmations, session reminders, chat messages, and payment updates;
- respond to support requests and troubleshoot problems;
- maintain the security, integrity, and reliability of the App; and
- understand how the App is used so we can improve it.
5. Payments
Payments made in the App are processed by a licensed third-party payment gateway. When you pay for a course, session, or credits, you are directed to the payment provider's own secure payment page to enter your card details. Ikarus does not receive or store your full card number, expiry date, or card security code — we only receive confirmation that a payment succeeded or failed, together with a transaction reference, which we use to maintain your order and credit history.
6. Push Notifications
With your permission, the App sends push notifications about bookings, messages, and account activity. You can disable notifications at any time from your device's system settings. Disabling notifications will not affect your ability to use the rest of the App.
7. Data Retention
We retain your account information for as long as your account is active, and for a reasonable period afterward to meet legal, accounting, dispute-resolution, or fraud- prevention obligations — for example, records of completed transactions may be kept longer where required by financial regulations. When you delete your account, we delete or anonymize personal information that is no longer required to be retained for these purposes.
8. Data Deletion
You can request deletion of your account and the personal data associated with it at any time.
8.1 How to request deletion
- In the App (recommended) — go to Profile → Delete Account and confirm the request. This immediately deactivates your account and starts the deletion process described below.
- By email — if you no longer have access to the App, email inquiry@vgaadvisory.com from the address associated with your account, or write to us at the postal address in Section 13. We verify your identity before processing email requests.
8.2 What is deleted
Once a request is verified, we permanently delete or anonymize:
- your profile information (name, email address, phone number, profile photo);
- your chat messages and attachments;
- your course and session booking history, and any reviews you submitted; and
- your push notification device token.
8.3 What we retain, and why
Some records cannot be deleted immediately because we are required or entitled to keep them, specifically:
- transaction and payment records, kept for the period required by applicable financial and accounting regulations; and
- information needed to resolve an open dispute, complaint, or investigation of fraud or misuse, until it is resolved.
Retained records are kept solely for these purposes and deleted once the applicable retention period ends, consistent with Section 7.
8.4 Timeframe
We process verified deletion requests without undue delay, and in any case within 30 days. Copies of data held in routine backups are removed from active systems immediately and are purged from backups as part of our normal backup rotation cycle.
9. Your Choices & Rights
- Access and update — you can review and update your profile information at any time from the Profile section of the App.
- Delete your account — see Section 8 for how to request deletion of your account and data.
- Notifications — you can turn push notifications on or off from your device settings.
- Sign-in permissions — if you signed in with Google or Apple, you can review or revoke the App's access from your Google or Apple account settings at any time.
Depending on where you live, you may have additional rights over your personal information, such as the right to request a copy of it or to object to certain processing. You can exercise these rights by contacting us using the details in Section 13.
10. Data Security
We use reasonable technical and organizational measures — such as encrypted network connections and access controls — designed to protect your information from unauthorized access, alteration, disclosure, or destruction. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.
11. International Transfers
Your information may be stored and processed in a country other than the one in which you live, including countries where our service providers operate their infrastructure. Where this occurs, we take steps to ensure your information continues to be protected in line with this policy.
12. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in the App or our practices. If we make material changes, we will update the effective date at the top of this page and, where appropriate, notify you through the App.
13. Contact Us
If you have questions about this Privacy Policy or want to exercise any of the rights described above, contact us at:
VGA
Email: inquiry@vgaadvisory.com
Address: Kuwait, Qibla - Fahad AL Salem ST, Salam Tower, Floor 6