Reab (reab.com) is owned and operated by ULEARNA TECHNOLOGY L.L.C ("we", "us", "our").
This Privacy Policy explains how REAB collects and uses personal information through our website, mobile apps, learning and community services, creator tools, subscriptions and mini apps. It also covers support, creator and affiliate participation, connected social accounts, mobile top-ups and other purchases. “REAB” refers to the services operated by ULEARNA TECHNOLOGY L.L.C.
You can contact REAB about this Policy or a privacy request at support@reab.com. A mini app or partner service may provide an additional notice linked in the feature or our policy directory. This Policy covers REAB's processing; an independent provider's notice covers processing it performs for its own purposes.
1. Information we collect
The information involved depends on the features you use. You can browse some content without an account; registration, purchases, publishing and particular mini apps need additional information.
| Category | Examples and sources |
|---|---|
| Account and sign-in information | Name, username, email, phone number, password hash, date of birth where supplied, country, language, account status and verification details. We receive these from you and, when you choose an external sign-in method, from that provider. |
| Profile and interests | Profile photo, biography, links, interests, preferences and other fields you choose to complete. Identity or business verification can involve documents and review records. |
| Content and communications | Videos, courses, articles, images, comments, reviews, messages, attachments, moderation reports, support requests and feedback you or others submit. |
| Learning and community activity | Enrollments, course and lesson progress, quiz results, viewing and playback activity, searches, follows, likes, saves, interactions and recommendation signals generated through use of REAB. |
| Purchases and program records | Order and subscription details, transaction references, payment status, billing information, refunds, disputes, creator payouts, affiliate referrals, commissions and any required verification or tax information. Payment providers and app stores supply transaction confirmations. |
| Mini-app information | Top-up recipient number, country, network, amount and fulfillment status; eSIM order and activation information; wallet waitlist details; and settings, events or permissions related to the mini app you use. |
| Connected platforms | Account identifiers, profile details, authorization tokens, permissions and publishing results supplied by platforms you connect. The information available depends on the permission you approve. |
| Device, usage and diagnostics | IP address, browser and operating system, device or session identifiers, page addresses, referring pages, interaction events, error reports and performance information. Cookies, browser storage, tags and app SDKs can collect some of these details. |
| Location and device permissions | Approximate location inferred from your IP address; a location you enter or select; and device location when you allow a location feature. Camera, microphone, photos, notifications and sensors may be used for features you choose. |
Payment providers normally collect full payment-card credentials directly through their own payment interfaces. REAB receives the transaction and billing information needed to operate the purchase. Do not send full card numbers, banking passwords or one-time codes in messages to us.
Information can also come from another user who sends you a message, purchases a top-up for your number, reports content, refers you or includes you in material they upload. Such users must have authority to provide information about others.
2. How and why we use information
We use information to:
- register accounts, authenticate sign-ins, verify contact details and protect access;
- deliver courses, videos, articles, messaging, community interactions, creator tools and mini apps;
- display profiles and content to the audience selected for the relevant feature;
- record learning progress, provide recommendations and remember preferences;
- process payments, subscriptions, top-ups, eSIM orders, refunds, referral attribution and creator or affiliate payments;
- send security alerts, receipts, service updates, requested reminders and notifications;
- provide support, investigate reports, moderate content, detect abuse and prevent fraud;
- understand usage, diagnose errors, maintain performance and improve services;
- measure campaigns and use advertising technologies where enabled;
- send promotional communications where permitted and manage unsubscribe choices; and
- meet legal obligations, keep required records, resolve disputes and protect people and the service.
You can decline to supply optional information. Refusing information needed for a particular service may mean we cannot provide that feature, verify a request or complete a transaction.
Legal bases where applicable
Where a privacy law requires a legal basis, the basis depends on the purpose and the circumstances:
| Purpose | Basis that may apply |
|---|---|
| Account access, requested features, purchases and transaction support | Performance of our agreement with you or steps you request before entering it. |
| Security, fraud prevention, moderation, service reliability and handling complaints | Legitimate interests in protecting users and operating the service, where permitted and after considering your rights; legal obligations may also apply. |
| Required financial records, lawful authority requests and other mandatory processing | Compliance with applicable legal obligations. |
| Optional marketing and storage or tracking activities that require permission | Consent where required; another permitted basis may apply to particular communications or technologies under local law. |
| Optional device permissions and sensitive information | Consent or another basis and additional condition permitted by the law that applies to that information and feature. |
An operating-system permission controls device access; it does not by itself establish every legal basis for later processing. Where we rely on consent, you may withdraw it without affecting processing that was lawful before withdrawal. Where we rely on legitimate interests, you may object where the law gives you that right.
3. Visibility, messages and connected accounts
Public profiles and content may be visible to visitors, shared by other users, indexed by search engines or copied elsewhere. Comments, reviews and community relationships may be visible to the audience of the associated feature. Check visibility settings before sharing personal information.
Messages and restricted content are delivered to their intended recipients. REAB and providers may process content and related metadata to deliver it, provide support, investigate abuse, moderate material or comply with law. This Policy does not describe messages as end-to-end encrypted or inaccessible to REAB. Recipients can also copy or forward what you send.
Connecting a social platform allows REAB to use the permissions you approve for features such as publishing. We may retain authorization credentials while the connection is active. You can disconnect using available REAB controls and revoke permissions in the external platform. Previously published posts and information already held by that platform remain subject to its own controls and notice.
4. Mini apps and sensitive information
Mini apps use information needed for their particular service. Mobile top-up processing can share the recipient number, country, operator and transaction details with fulfillment partners. eSIM processing can involve plan, purchase, activation and device-compatibility information. A wallet waitlist records contact or account information, country and signup status; joining it does not itself create a banking relationship.
Deen features may use selected location, prayer calculation settings, notification preferences and device sensors for prayer times, reminders and Qibla direction. Nearby-location searches may send search coordinates to a mapping or places provider. Feature-use events and settings can reveal or allow an inference about religious interests. Precise location, religious information and verification documents can receive additional protection under applicable law.
Avoid placing sensitive information in public content or general support messages. You can change or revoke device permissions in your operating-system settings. Revoking a permission limits future access through that permission; it does not automatically erase information already processed or prevent approximate location being inferred from an IP address.
5. Recommendations, AI and moderation
REAB uses activity, interests, content and account information to support search, recommendations and personalization. Some tools use automated models. Where enabled, AI-assisted search may send your search query, language and relevant source material to a provider such as OpenAI to generate a response. Uploaded images may also be processed by external automated moderation providers where that functionality is enabled.
Automated checks can help detect harmful material, abuse or policy violations, and staff may review reports and moderation results. These systems can make mistakes. Contact support to ask about a result or request review of an action affecting your account or content. Applicable law may give you additional rights concerning profiling or decisions based solely on automated processing.
Do not assume that all REAB information is sent to an AI provider, or that every AI feature is active in every environment. Provider processing depends on the enabled feature and its applicable terms and arrangements.
6. Who receives information
We disclose information in the following circumstances, according to the feature used and the purpose involved:
- Other users and recipients: to show content, deliver messages, enable courses and complete the interactions you choose. A top-up recipient or provider may receive information relating to that transaction.
- Infrastructure and delivery providers: to host systems, store files, distribute and process video, deliver content and maintain service reliability. REAB integrations include cloud infrastructure and video-delivery services such as AWS and BytePlus where deployed.
- Communication providers: to send email, SMS, verification codes and push notifications. Mobile push delivery uses services such as Firebase Cloud Messaging and the relevant device platform.
- Support providers: a help widget such as Oxam/Chatwoot may receive a support conversation and, for a signed-in user, an account identifier, name and email when that integration is enabled. Support services may use automated assistance as well as staff responses.
- Payment and commerce providers: services such as Stripe, PayPal, Apple and Google handle relevant payments or store purchases. Top-up operators, fulfillment partners and services such as Boxo handle the partner products offered through their integrations.
- Diagnostics, analytics and advertising providers: tools such as Sentry may process errors and performance details where configured. Production website integrations include Google Tag Manager and Meta Pixel; their tags may receive identifiers, device information, page visits and interaction events.
- AI, recommendation and moderation providers: to process the relevant inputs for an enabled feature, including the uses described above.
- Connected platforms: when you authorize a connection or send content to an external platform.
- Advisers, authorities and parties to a dispute: where needed for legal obligations, a valid legal process, protecting rights or safety, or resolving a claim.
- A business successor: as part of a proposed or completed merger, restructuring or transfer, subject to applicable privacy requirements.
A provider receives information relevant to its role, rather than every category listed in this Policy. Some act on REAB's behalf; payment providers, external platforms and advertising providers may also process information for their own purposes under their own notices. The providers involved can vary by region, purchase method and enabled feature.
7. Cookies, analytics and advertising
Our website uses cookies, local storage, session storage, tags and pixels for sign-in, security, interface preferences, cached data, referral measurement, analytics and advertising. Mobile services can use app storage and SDKs. Our Cookie Policy explains the known website technologies, their purposes, storage periods and available controls.
Google and Meta integrations may associate website activity with browser or platform identifiers for measurement or advertising. Some disclosures to advertising providers may fall within legal definitions of “sharing,” targeted advertising or, depending on the circumstances, “sale.” Contact us about any related right available where you live. This Policy does not represent that all advertising disclosures fall outside those definitions.
The current website banner records an Accept or Decline selection but does not itself block Google Tag Manager or Meta Pixel. Read the Cookie Policy before relying on the banner as a tracking control. Browser, device and provider privacy controls can restrict some collection but have different scopes and limitations.
8. International processing
Using REAB may involve processing in countries other than the one where you live, including countries where infrastructure and other providers operate. Privacy laws and authority-access rules can differ between countries.
Cross-border processing is subject to the transfer requirements that apply to the information and parties involved. Contact support@reab.com to request information about the locations and safeguards relevant to your information. The location of a user, a website domain or a payment currency does not establish where all information is stored.
9. Retention and account deletion
Retention depends on the purpose and category of information:
| Category | Retention considerations |
|---|---|
| Account, profile and learning information | Account activity, delivery of requested services, account closure and outstanding support or legal requirements. |
| Content and messages | The feature's purpose, your deletion choices, recipient copies, reports or disputes, and technical backup or recovery needs. |
| Purchases, payouts and referrals | Completion of the transaction, reconciliation, refunds, chargebacks, fraud prevention and legally required financial or tax records. |
| Verification and moderation information | The verification or safety purpose, account status, investigation requirements and legal claims or obligations. |
| Logs and diagnostics | Troubleshooting, service reliability, security investigations and applicable recordkeeping requirements. |
| Cookies and browser storage | The periods described in the Cookie Policy and your browser or device settings. |
Account closure and deletion are different from signing out or uninstalling an app. You can submit an account-deletion request through available settings or support. A request may initially deactivate the account; it does not mean that every associated record is erased immediately or on one fixed schedule.
Information may remain where needed for transactions, legal obligations, fraud prevention, safety, a dispute or backup recovery. Content copied by another user or sent to an independent platform may remain outside REAB. Contact us for the status and scope of a deletion request. Subscription cancellation must also be completed through the relevant billing provider.
10. Your controls and privacy rights
Available controls let you update profile details, change certain visibility and notification settings, remove content, disconnect platforms and request account deletion. Marketing emails provide an unsubscribe method. Device settings control notifications, location, camera, microphone and other permissions. Clearing browser data can remove locally stored preferences and caches.
Depending on the law that applies, you may have rights to:
- obtain confirmation of processing and access or a copy of your information;
- correct inaccurate or incomplete information;
- request deletion or restriction of processing;
- receive eligible information in a portable format;
- object to certain processing, including direct marketing;
- withdraw consent where processing relies on it;
- opt out of targeted advertising, sale or sharing where those rights apply; and
- request review or appeal where a law provides that right.
Send requests to support@reab.com with the subject “Privacy request,” the account identifier and a description of the request. Do not send identity documents unless we request them through an appropriate channel. We may need to verify your identity, authority or residence and may ask for information proportionate to that need. An authorized representative can contact us where permitted by law.
Rights are subject to applicable exceptions, including protection of other people and retention required by law. We will explain a refusal or limitation where required and provide any applicable review route. We will not unlawfully discriminate against you for exercising a privacy right. You may also complain to the privacy regulator or other authority competent for your location.
11. Children and teens
Account eligibility is described in our Terms of Use, including a minimum age of 12 and any higher legal or feature-specific requirement. Users below legal adulthood must have any parent or guardian permission required by law. Particular countries and services may require additional protections or restrictions.
If you believe a child has supplied information or created an account contrary to the applicable rules, contact support@reab.com. Parents and guardians can contact us about information relating to their child; we may need to confirm their authority. We will assess the request under the rules applicable to that child and service. Do not submit sensitive details about a child in public content.
12. Security, changes and contact
We use safeguards designed to protect accounts and information, including authentication, access controls and protected password storage. No online system can guarantee absolute security. Use a strong, unique password, protect verification codes and report suspected compromise to support.
We may update this Policy as features, providers, practices or legal requirements change. The current version and effective date appear on this page. We will give additional notice or obtain permission where required. For privacy questions, requests or complaints, email support@reab.com.