Privacy Policy

The applicable Regional Operator identified in Section 2 below ("Vizipedia", "we", "us", or "our") is committed to protecting the privacy, security, and integrity of personal data processed through the Vizipedia platform (the "Service"). This Privacy Policy explains how we collect, use, store, share, and protect personal data when users access or use Vizipedia.

This Privacy Policy is designed in alignment with applicable data protection laws, including the ADGM Data Protection Regulations 2021, Bahrain Personal Data Protection Law No. 30 of 2018, Qatar Law No. 13 of 2016 on the Protection of Personal Data Privacy, Kuwait Law No. 26 of 2024 concerning Personal Data Protection Law, Jordan’s Personal Data Protection Law No. 24 of 2023, and, to the extent applicable to EU processing and EU data-transfer arrangements, the EU General Data Protection Regulation (GDPR). It also reflects industry best practices consistent with ISO/IEC 27001 (Information Security Management) and ISO 9001 (Quality Management).

1. Introduction & Definitions

This Privacy Policy applies to personal data processed by Vizipedia through:

use of the Vizipedia platform and related services
creation and interaction with educational games, projects, and AI-generated content
institutional, educational, and enterprise deployments

Personal data means any information relating to an identified or identifiable individual.

You or Your refers to the individual user, or the organisation or institution on whose behalf the Service is used.

Vizipedia does **not** process employee or job applicant data under this Policy.

2. Company Information

Controller. Except for student and learner data controlled by an institution as described in Section 17.1, the data controller for vizipedia.me is the applicable Regional Operator for your country. “Regional Operator” means Dawraty Educational Group, operating through: Dawraty Education Holding Limited (ADGM, Abu Dhabi, Qatar and Jordan); Dawraty Web Co (Kuwait); and Dawraty Educational Group W.L.L. (Bahrain). Contact: info@dawraty.com.

Processor. Your personal data is processed on Vizipedia’s behalf by Vizlai Ltd., Sofia, Bulgaria (info@vizipedia.ai), as the underlying technology provider operating the Vizipedia platform.

Purposes. Your personal data is processed to provide, operate, and maintain the Service; to enable game-based and project-based learning; to administer your account and your institution’s access; and to comply with legal obligations. The legal bases for processing are set out in Section 4, and the categories of data collected are set out in Section 5.

Third parties. Your personal data may be disclosed to Vizlai Ltd. for platform delivery purposes and to trusted infrastructure and AI providers as strictly necessary to deliver the Service, in each case under contractual data protection obligations. Details are set out in Section 10.

Duration. Your personal data is retained for the duration of your account or your institution’s subscription with Vizipedia, unless earlier deletion is requested. Details are set out in Section 11.

Security. Vizipedia and Vizlai implement appropriate technical and organizational measures to protect your personal data, including encrypted storage and transmission, role-based access controls, and security monitoring. Details are set out in Section 12.

Profiling. Vizipedia does not conduct profiling of individual users for commercial, advertising, or decision-making purposes. Learning analytics generated through use of the platform are used solely for educational purposes and are visible only to authorized educators and administrators, as described in Section 9.

Your rights. Depending on the law applicable in your country, you may have the right to access, correct, delete, restrict, or port your personal data, and to object to its processing or withdraw your consent. How to exercise these rights is described in Section 15.

3. Scope & Applicability

This Policy applies globally to:

students (including minors)
educators and instructors
institutional administrators
business and enterprise users

Additional provisions apply when Vizipedia is used by universities or schools (see Section 17).

4. Lawful Basis for Processing

Vizipedia processes personal data based on one or more of the following legal grounds:

performance of a contract
legitimate interests in operating and improving the Service
compliance with legal obligations
consent, where required (including parental consent for minors)

5. Personal Data We Collect

Vizipedia collects only data necessary to deliver educational and platform functionality.

5.1 Account & Identity Data

name or pseudonym
email address (for educators, administrators, and enterprise users)
username
role (student, educator, administrator)
institutional or organisational affiliation

5.2 Platform Usage & Learning Data

learning progress and activity
participation in games, projects, and challenges
engagement metrics and learning analytics

5.3 User-Generated Content

games and projects created by users
text, prompts, educational materials, and uploaded media
collaborative content based on visibility settings

Vizipedia does not collect payment data and does not use third-party advertising or behavioral analytics services.

6. Children and Minors

Vizipedia supports educational use by minors.

Accounts for minors are created and managed by institutions or guardians
Data is processed solely for educational purposes
Vizipedia does not directly market to minors
Institutions are responsible for obtaining legally required parental consent. For deployments involving minors in Kuwait, Bahrain, Qatar, or Jordan, institutions must ensure compliance with applicable local consent requirements. Vizipedia can provide guidance on request by directing institutions to applicable government information resources (such guidance does not constitute legal advice and any institution receiving such guidance confirms that it alone is solely responsible for compliance).

7. How We Use Personal Data

We use personal data to:

provide, operate, and maintain the Service
enable game-based and project-based learning
support collaboration and learning analytics
administer accounts and institutional access
improve platform quality, security, and reliability
comply with legal obligations

8. AI & Content Processing

Vizipedia uses AI technologies to support learning and content creation.

User content is processed only to provide requested functionality
Content is not used to train public or external AI models
Public sharing or reuse occurs only when explicitly enabled by the user or institution

8.1 External AI Providers

Vizipedia may use:

OpenAI services
open-source AI models, e.g. Stable Diffusion and Hunyuan3D-2

All AI processing is governed by contractual and technical safeguards.

9. Learning Management & Analytics

Vizipedia provides dashboards and analytics tools for educators and administrators to:

monitor progress
identify learning gaps
support assessment and instruction

Analytics are visible only to authorised users. Vizipedia does not use third-party analytics platforms.

10. Data Sharing

Vizipedia does not sell personal data.

Data may be shared only:

with institutional administrators within the same organisation upon request
with trusted infrastructure or AI providers strictly necessary to deliver the Service
with Vizlai Ltd. as the underlying technology provider, strictly for platform delivery purposes, under contractual data protection obligations consistent with this Policy
when required by law or valid legal requests

All sharing is subject to confidentiality and data protection obligations.

11. Data Retention

For institutional deployments, retention is controlled by institutional administrators. For individual accounts, retention is controlled by Vizipedia in accordance with this Policy.
Data is retained only as long as necessary for educational or operational purposes
Upon account deletion or institutional request, data is deleted or anonymised unless legally required otherwise

12. Data Security

Vizipedia applies safeguards aligned with ISO/IEC 27001 best practices, including:

role-based access controls
secure authentication
encrypted storage and transmission where applicable
security monitoring and incident response procedures

13. Infrastructure & Hosting

Hosted in Germany (Hetzner Ltd.)
European data infrastructure
High-availability and redundancy measures

14. International Data Transfers

Where data is processed across jurisdictions, Vizipedia applies appropriate safeguards consistent with the applicable data protection laws as identified in Section 1 above.

15. Infrastructure & Hosting

Depending on applicable law, users may have the right to:

access personal data
correct inaccurate data
request deletion or restriction
object to processing
request data portability

Requests: info@dawraty.com (primary contact for vizipedia.me users). For platform or technology matters: info@vizipedia.ai

16. Changes to This Policy

We may update this Privacy Policy to reflect legal, technical, or operational changes. Updates will be published with a revised date.

17. University & Educational Institution-Specific Provisions

17.1 Controller–Processor Roles

For users who transact directly with Vizipedia as consumers (business-to-consumer, or “B2C”), Vizipedia acts as Data Controller. For deployments where Vizipedia contracts directly with institutions such as schools, universities, or enterprises (business-to-business, or “B2B”), and for deployments where Vizipedia contracts with institutions that in turn provide access to individual end users such as students (business-to-business-to-consumer, or “B2B2C”), institutions act as Data Controllers for student and learner data, and Vizipedia acts as Data Processor for that data to the extent it processes it on documented instructions from the institution. Vizipedia acts as Data Controller for its own customer, account, support, and commercial relationship data. Vizlai Ltd. acts as Vizipedia’s technology provider and as processor or sub-processor, as applicable, under contractual data protection obligations

17.2 Student Data Use Limitations

Vizipedia:

does not use student data for advertising or marketing
does not sell or monetise student data
does not conduct profiling beyond learning analytics
does not use data for research or publication without institutional approval

17.3 Learning Analytics

Used exclusively for educational purposes and visible only to authorised staff.

17.4 Minors & Consent

Accounts managed by institutions or guardians
Institutions ensure parental consent
No direct marketing to minors

17.5 Intellectual Property & Academic Freedom

Vizipedia does not claim ownership of teaching materials, course content, or student-created work. All rights remain with the creator or institution.

17.6 Data Retention & Exit

Institutions may request deletion, anonymisation, or export of data upon course completion, graduation, or user exit.

How to contact us

If you have questions about this privacy policy or want to exercise your data protection rights:

Regional Operator: Dawraty Educational Group
Email: info@dawraty.com

Technology Provider: Vizlai Ltd., Sofia, Bulgaria
Email: info@vizipedia.ai

Last updated: May 2, 2026