Privacy Policy

​ Overview

Noor Patente ("we", "our", "us", or "the App") is an e-learning mobile application developed and operated by Noor un nisa, based in Lithuania. The App provides enrolled students with access to structured course content including video lectures, chapters, and downloadable study materials.

This Privacy Policy describes how we collect, use, store, and protect your personal information when you use our mobile application and related backend services. By accessing or using Noor Patente, you agree to the practices described in this Policy. If you do not agree, please discontinue use of the App.

1 Information We Collect

We collect the following categories of personal data:

a) Account Information

• Full name (first and last name)
• Email address and/or username used to log in
• Password — stored exclusively as a one-way cryptographic hash (bcrypt); the plain-text password is never retained
• Phone number and/or WhatsApp number (optional — only if provided by your institution's administrator)
• Profile photo URL (optional)

b) Device Information

• Device type (e.g., Android, iOS, Windows) — used to record which platform you are using
• Device identifier — a unique ID generated on your device, used solely to enforce our one-device-per-account security policy and prevent unauthorised account sharing

c) Learning Progress Data

• Records of lectures and PDF materials you have viewed
• Quiz attempts, answers submitted, and scores achieved
• Course completion status

d) Information We Do NOT Collect

• We do not collect your precise GPS location
• We do not access your contacts, camera, microphone, or photos
• We do not collect advertising identifiers (GAID / IDFA)
• We do not use cookies, tracking pixels, or any third-party analytics SDK

2 How We Use Your Information

We use the data we collect for the following purposes only:

• Authentication — to verify your identity and grant access to your assigned course content
• Course delivery — to present the categories, chapters, lectures, and study materials assigned to your account
• Progress tracking — to record and display your learning progress, quiz scores, and completed lectures
• Account security — to enforce single-device access and detect unauthorised login attempts
• Account management — to allow administrators and super-administrators to manage student enrolments, access periods, and account status
• Service communications — to send in-app notifications relevant to your course (e.g., new content, announcements)
• Legal compliance — to comply with applicable laws and regulations where required

We do not use your data for profiling, targeted advertising, or automated decision-making that produces legal or similarly significant effects.

3 Legal Basis for Processing (GDPR)

If you are located in the European Economic Area (EEA), we process your personal data under the following legal bases as defined by the General Data Protection Regulation (GDPR):

• Contractual necessity — processing is required to provide the e-learning service you enrolled in
• Legitimate interests — to maintain the security and integrity of the platform (e.g., device binding, session management)
• Legal obligation — where processing is required by applicable law
• Consent — for optional data fields (phone/WhatsApp number, profile photo) where you or your administrator has explicitly provided them

4 Data Sharing and Disclosure

We do not sell, rent, trade, or license your personal information to any third party for commercial or marketing purposes.

We may share your data only in the following limited circumstances:

• Cloud infrastructure provider — your data is stored and processed on Amazon Web Services (AWS), which provides our secure backend infrastructure. AWS acts as a data processor under appropriate data processing agreements and does not use your data for its own purposes.
• Institution administrators — the administrators of your enrolled institution can view and manage your account details (name, email, progress, course assignment, account status) through a secure admin panel, solely for the purpose of managing your enrolment.
• Legal requirements — we may disclose your information if required to do so by law, court order, or governmental authority, or to protect the rights, property, or safety of our users or the public.

No other third-party sharing takes place.

5 Data Storage and Security

All user data is stored on Amazon Web Services (AWS) servers located within secured data centres. We implement the following security measures:

• All network communication between the App and our servers is encrypted using HTTPS / TLS
• Passwords are hashed using bcrypt — a one-way hash function — and are never stored or transmitted in plain text
• API endpoints are protected by JWT-based authentication; tokens are validated on every request
• Access to the backend is restricted by role-based permissions (student / admin / super-admin)
• Session tokens are invalidated immediately upon logout or device reset
• Account status checks (active, banned, expired) are enforced on every API call

While we implement industry-standard security practices, no method of electronic storage or transmission is 100% secure. We encourage you to keep your login credentials confidential and to contact us immediately if you suspect unauthorised access to your account.

6 Data Retention

We retain your personal data for as long as your account is active or as needed to provide you with the service. Specifically:

• Account data (name, email, device ID) is retained until your account is deleted by an administrator or upon your request
• Learning progress data (viewed lectures, quiz results) is retained for the duration of your course subscription and may be kept for up to 12 months after your course end date for record-keeping purposes
• After deletion, your data is permanently removed from our active systems within 30 days

To request deletion of your account and associated data, please contact us using the details in Section 11.

7 Your Rights

Depending on your country of residence, you may have the following rights regarding your personal data:

• Right of access — request a copy of the personal data we hold about you
• Right to rectification — request correction of inaccurate or incomplete data
• Right to erasure ("right to be forgotten") — request deletion of your personal data
• Right to restriction — request that we limit how we process your data
• Right to data portability — request your data in a structured, machine-readable format
• Right to object — object to processing based on our legitimate interests
• Right to withdraw consent — where processing is based on consent, you may withdraw it at any time

To exercise any of these rights, please send a written request to noorpatenteapp24@gmail.com. We will respond within 30 days of receipt. We may ask you to verify your identity before processing your request.

If you are located in the EEA and believe we have not addressed your concern adequately, you have the right to lodge a complaint with your local data protection supervisory authority.

8 Children's Privacy

The Noor Patente application is not directed to children under the age of 13 (or under 16 where required by applicable law). We do not knowingly collect personal information from children without verifiable parental or guardian consent.

If you are a parent or guardian and believe that your child has provided us with personal data without your consent, please contact us immediately at noorpatenteapp24@gmail.com and we will take steps to delete such information promptly.

9 Third-Party Services

The App does not integrate third-party advertising SDKs, social login providers, or analytics platforms (such as Google Analytics, Firebase Analytics, Facebook SDK, etc.).

Video lectures may be hosted on or streamed through third-party video platforms. When you access such content, you may be subject to that platform's own terms of service and privacy policy. We encourage you to review those policies independently.

File storage (images, PDFs) is provided by Amazon S3, operated under AWS's data processing terms. AWS does not access or use your content for its own purposes.

10 International Data Transfers

Noor Patente is operated from Lithuania (European Union). Our backend infrastructure is hosted on Amazon Web Services. If you access the App from outside the EU/EEA, your data may be transferred to and processed in countries that may have different data protection laws than your jurisdiction.

Where such transfers occur, we rely on appropriate safeguards (such as AWS Standard Contractual Clauses) to ensure your data receives an adequate level of protection consistent with this Privacy Policy and applicable law.

11 Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will update the "Last Updated" date at the top of this page.

We encourage you to review this page periodically. Continued use of the App after any changes constitutes your acceptance of the updated Privacy Policy.

12 Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your personal data, please contact us:

We aim to respond to all privacy-related inquiries within 5 business days and to resolve requests within 30 calendar days.