Privacy policy

This Privacy Policy describes the rules and procedures for collection, processing, use, storage, disclosure and destruction of personal data of users of the Taalim mobile application and web service (the Service), and informs about measures to protect personal data in accordance with the Law of the Republic of Kazakhstan No. 94-V of May 21, 2013 "On Personal Data and Their Protection" (the Law). By using the Service, you agree to the terms of this Policy. If you disagree, you must stop using the Service.

1. Operator and details

Personal data operator — ITEM TECHNOLOGY LLP.

2. Terms and definitions

• Service — Taalim mobile application (Android, iOS), website taalim.kz and related server services.
• Personal data — information relating to an identified or identifiable individual (user).
• Processing of personal data — actions of collection, recording, systematization, accumulation, storage, clarification, extraction, use, transfer, depersonalization, blocking, deletion, destruction of personal data.
• Cookies — small text files placed on the user's device when visiting the website.
• Usage data — data collected automatically when using the Service (IP address, device type, OS version, actions in the app, etc.).

Terms used in this Policy are construed in accordance with the Law of the RK "On Personal Data and Their Protection" and other applicable regulations.

3. Acknowledgements

First and foremost, we thank Allah (glorified and exalted is He). We express sincere gratitude to the projects and sources whose data was used or served as a reference in creating Taalim:

• quran.com — Quran texts, translations, tafsir;
• tanzil.net — Quran text in standard orthography;
• Open and publicly available sources of the Holy Quran text, translations and tafsir, used for educational purposes.

Use of the said data is for non-commercial educational purposes. Rights to original works belong to their authors and rights holders.

4. Information collected

We may collect the following categories of data:

4.1. Personal data

• name (upon registration or when contacting support)
• email address
• phone number (if necessary)
• account data (login, password hash) for access to the Service.

4.2. Usage data

• IP address, browser/OS type and version, device type
• facts and parameters of app usage (learning progress, completed lessons, settings)
• date and time of access to the Service, session duration.

The said data is used to provide and improve the Service, ensure security and compliance with applicable law.

5. Purposes of data processing

• providing access to app functions and personalizing learning;
• recording progress (lessons, tests, achievements);
• communicating with the user (support, notifications, if consent is given);
• analyzing Service usage to improve the product (in anonymized form where applicable);
• performance of the contract and compliance with obligations under the law of the RK.

6. Legal basis for processing

Processing of personal data is carried out on the basis of:

• consent of the personal data subject (registration, use of the Service);
• performance of a contract (offer) of which the user is a party;
• legitimate interests of the operator (security, improvement of the Service) subject to observance of user rights;
• requirements of the legislation of the Republic of Kazakhstan.

7. Data storage and destruction

Personal data is stored for the period necessary to achieve the purposes of processing, as well as in cases provided by the law of the RK (including for dispute resolution and performance of obligations). After achieving the purposes or expiration of storage periods, data is anonymized or destroyed in a manner that ensures impossibility of their recovery.

8. Data transfer

We do not sell or transfer personal data to third parties for marketing purposes. Data transfer is possible:

• to service providers ensuring the operation of the Service (hosting, analytics), on confidentiality terms and only in the volume necessary for service provision;
• to authorized state bodies in cases provided by the law of the RK;
• upon change of operator (sale of business, reorganization) with notification of users and observance of rights to personal data.

Data processing is carried out on the territory of the Republic of Kazakhstan and/or on the territories of countries providing adequate protection in accordance with the requirements of the Law.

9. Information protection

We apply organizational and technical measures to protect personal data from unauthorized access, alteration, disclosure or destruction (access restriction, encryption, secure communication channels, employee access control). No method of transmitting or storing data on the internet is absolutely secure; we strive to use commonly accepted means of protection but cannot guarantee absolute security.

10. Cookies and similar technologies

The web part of the Service may use cookies and local storage to ensure authorization, save settings and analyze traffic. You can restrict or disable cookies in browser settings; some website functions may become unavailable.

11. Data subject rights

Under the Law you have the right to:

• obtain information about the operator having your personal data, their content and purposes of processing;
• demand clarification, blocking or destruction of data in case of their unlawful processing;
• withdraw consent to processing of personal data (where consent exists), including through app settings or by contacting the operator.

To exercise these rights, send a request to the operator's contact address specified below. The operator will consider the request within the timeframes established by the law of the RK.

12. Policy changes

We may make changes to this Policy. The current version is always available on this page. Material changes (e.g., expansion of processing purposes or data categories) will be brought to the attention of users through an in-app notification or to the email address specified upon registration. Continued use of the Service after publication of changes means acceptance of the updated Policy.

13. Contact information

For questions related to processing of personal data and this Privacy Policy, you may contact the operator:

ITEM TECHNOLOGY LLP
Address: Republic of Kazakhstan, Almaty, Aksai-5 microdistrict, 25, building 4, 2nd floor, office 2
Email: info@taalim.kz

By using the Taalim Service, you confirm that you have read this Privacy Policy and agree to the terms of processing of your personal data set forth therein.

Last updated: 21 March 2026