Privacy Policy

UR ED ("UR ED", "we", "us", or "our") provides a career-orientation platform for high school students, including a major-assessment quiz, hands-on learning programs, events, and a shop for physical learning kits. This Privacy Policy explains what personal data we collect, why we collect it, who we share it with, and the choices you have.

By using ur-ed.com or our related services (the "Service"), you agree to the collection and use of information as described here. If you do not agree, please do not use the Service.

1. Information We Collect

We collect the following categories of information:

• Account information: name, email address, phone number, username, and password (stored hashed, never in plain text).
• Profile & onboarding information: education level, school, gender, age, field of study, interests, and hobbies, which you provide to personalize your experience.
• Assessment data: your answers to the major-assessment quiz and the career/major recommendations we generate from them.
• Learning & gamification activity: course and module progress, quiz/activity attempts, XP, streaks, hearts, and leaderboard standing.
• Event data: answers you submit when registering for an event, and your payment/attendance status.
• Order & shipping data: if you purchase a physical kit, your shipping name, phone number, city, address, and any delivery notes you provide.
• Payment data: we do not store your card number. Payments are processed by YouCan Pay (see Section 3); we retain only the transaction status, amount, and a provider reference for our records.
• Content you create: blog comments, posts, and other content you submit on the platform.
• Technical & session data: IP address, browser/device user agent, and session tokens used to keep you signed in.
• Files you upload: such as profile photos or payment receipt images.

2. How We Use Your Information

• To create and maintain your account and authenticate you when you sign in.
• To generate your major/career recommendations and personalize the courses, programs, and content we show you.
• To operate gamification features (XP, streaks, hearts, leaderboards).
• To process event registrations and fulfil physical kit orders, including shipping.
• To process payments and prevent fraud.
• To send you transactional emails (e.g. email verification, password reset, order and event confirmations) and, where relevant, service updates.
• To maintain the security and integrity of the Service.

We do not sell your personal data, and we do not use it for third-party advertising.

3. Who We Share Your Information With

We share the minimum data necessary with the following service providers, each of whom processes it on our behalf and under their own security and privacy commitments:

• YouCan Pay — payment processing for subscriptions, event tickets, and kit orders.
• Google — optional "Sign in with Google" authentication, if you choose to use it.
• Zoho — delivery of transactional emails (verification, password reset, receipts).
• Uploadthing — storage of files you upload (e.g. images, receipts).
• Vercel — website hosting and privacy-respecting usage analytics (Vercel Analytics).
• Railway — hosting for our backend infrastructure and database.

Some of these providers process data outside Morocco (including in the United States or the European Union). Where that happens, we rely on the safeguards each provider offers as part of its own service. We do not otherwise share your personal data with third parties, except where required by law or to protect our legal rights.

4. Children's & Minors' Data

UR ED's core audience is high school students, many of whom are minors. We take this seriously:

• The Service is intended to be used by students with the awareness of a parent or legal guardian, particularly for users below the age of legal majority in their country of residence.
• We only collect the information described in Section 1, and only for the purposes described in Section 2 — never for advertising or profiling unrelated to career guidance.
• If you are a parent or guardian and believe your child has provided us with personal data without your awareness, or you would like to review, correct, or request deletion of that data, please contact us at hello@ur-ed.com and we will act on your request promptly.
• We do not knowingly collect more information from minors than is necessary to provide the assessment, learning, and event features described in this policy.

5. Cookies & Session Data

We use essential cookies only: an httpOnly session cookie that keeps you signed in, and, if you sign in with Google, a short-lived state cookie used to securely complete that sign-in. We do not use advertising or third-party tracking cookies. Vercel Analytics collects aggregated, privacy-respecting usage statistics (such as page views) and does not use cookies to track you individually across sites.

6. Data Retention & Deletion

We retain your account and activity data for as long as your account is active, so that your progress, plan, and history remain available to you. If you would like your account or personal data deleted, email us at hello@ur-ed.com from the address associated with your account, and we will process the deletion request. Deletion requests are currently handled manually by our team rather than through a self-service tool; we aim to complete them within a reasonable time. Some information may be retained where required for legal, accounting, or fraud-prevention purposes (for example, payment records).

7. Your Rights

Under Moroccan data protection law (Law No. 09-08 on the Protection of Individuals with Regard to the Processing of Personal Data), you have the right to access, rectify, and object to the processing of your personal data. To exercise any of these rights, contact us at hello@ur-ed.com. We will respond as required by applicable law.

8. Security

We use industry-standard practices to protect your information, including encrypted connections (HTTPS), hashed passwords, and httpOnly session cookies. We do not store raw payment card numbers — these are handled entirely by our payment processor. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will update the "Last updated" date above when we do. Material changes will be communicated to you, for example by email or an in-app notice.

10. Contact Us

If you have questions about this Privacy Policy or how we handle your data, contact us at hello@ur-ed.com or +212 667-020892. See also our Terms of Service and Refund & Return Policy.