Privacy Policy

THEKEY is an educational platform operated by a Saudi-based company. Our website is located at https://thekey.sa. When we refer to “THEKEY”, “we”, “us”, or “our” in this policy, we mean the company operating the THEKEY platform.

We collect information in several ways:

• Information you provide directly: Name, email address, password, and other profile details you submit when registering or using the platform.
• Information collected automatically: Usage data, device and browser information, IP addresses, and cookies when you interact with our platform.
• Information from third parties: Authentication data from OAuth providers (such as Microsoft) when you choose to sign in via a third-party service.

We use the information we collect to:

• Provide, operate, and improve the THEKEY platform
• Authenticate your identity and maintain your account security
• Facilitate course enrollment, assignments, and exam participation
• Send you important notifications about your courses and account
• Analyze usage patterns to enhance platform performance and user experience
• Comply with applicable legal obligations
• Communicate with you about updates, features, and support requests

We process your personal data based on the following legal grounds: contractual necessity (to deliver the service you signed up for), legitimate interests (improving platform performance and security), legal compliance (where applicable law requires), and your consent (for optional communications and cookies).

We do not sell your personal data. We may share your information with:

• Service providers: Third-party vendors who help us operate the platform (hosting, email delivery, payment processing).
• Educational institutions: Coordinators and instructors at your enrolled institution may see your name, progress, and grades as part of the educational service.
• Legal requirements: When required by law, regulation, or valid governmental request.

We use essential cookies to maintain your session and authentication state. We may also use analytics cookies to understand how the platform is used. You can control cookie behavior through your browser settings. Disabling essential cookies may prevent you from using certain platform features.

Depending on your location (including GDPR and Saudi Arabia data protection laws), you may have the right to:

• Access the personal data we hold about you
• Correct inaccurate or incomplete information
• Request deletion of your data (subject to legal obligations)
• Object to or restrict certain types of processing
• Data portability where technically feasible

To exercise any of these rights, contact us at support@thekey.sa.

We retain your personal data for as long as your account is active or as needed to provide services. After account deletion, we may retain certain data for a limited period to comply with legal obligations, resolve disputes, or enforce our agreements.

We implement industry-standard security measures including encryption in transit (TLS/HTTPS), role-based access controls (RBAC), and secure data centers. While we strive to protect your data, no system is completely impenetrable and we cannot guarantee absolute security.

THEKEY is not directed at children under the age of 13. We do not knowingly collect personal data from children under 13. If you believe a child under 13 has provided us with personal information, please contact us at support@thekey.sa and we will delete it promptly.

Your data may be processed and stored on servers located outside of Saudi Arabia. Where such transfers occur, we ensure appropriate safeguards are in place in accordance with applicable data protection laws.

Our platform may contain links to third-party websites or services. We are not responsible for the privacy practices of those third parties. We encourage you to review their privacy policies before providing any personal information.

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the “Last Updated” date. Your continued use of THEKEY after changes are posted constitutes your acceptance of the updated policy.