Legal & trust
Privacy Policy
How IG-AIM handles account information, learning work, voice sessions and privacy requests.
Effective and last updated: 1 November 2026 · Version 1.0
Controller and contact
Sigma Z Line For AI Development operates IG-AIM and is responsible for the personal data it processes for its own service purposes. Address: 132 El Bahr El Aazam, 1st floor, office 101, Giza, Egypt. Send privacy requests to [email protected] or [email protected]; telephone +20 101 079 8703. This policy describes IG-AIM specifically, rather than unrelated company products.
Information you provide
Account data includes name, email, phone number, date of birth, role, profile details and authentication information. Learning data can include messages, uploaded work and documents, answers, grading reports, mock exam submissions, class membership and speaking transcripts or feedback. Microphone audio is processed when you choose a voice feature. Support tickets may include messages and attachments. Do not upload unnecessary identity documents, sensitive personal information or another person’s data without authority.
Technical, billing and usage data
We process device and browser information, IP address, approximate location associated with login sessions, security records and service usage. AI usage records can include model/provider information, token counts, latency, errors and excerpts of prompts and responses. Billing records include plan, payment status, transaction identifiers and limited payment-method metadata. Payment details entered into Paymob are handled by that provider; do not send card details to our support team.
Purposes and legal grounds
We use data to create and secure accounts, deliver requested learning tools, calculate usage entitlements, process payments, support users and meet legal obligations. Processing relies on the applicable legal ground for each purpose, including valid consent where required, steps to perform an agreement, and legal obligations. We do not treat acceptance of Terms as blanket consent for every processing purpose. Where consent is required for children’s or sensitive data, it must be obtained from the appropriate person before that processing.
AI and other recipients
Content needed for a requested feature is sent to the relevant processing provider. Depending on the feature and configuration, integrations include Google Gemini for live voice, Groq and models accessed through OpenRouter. Hosting, email, payment and notification providers also process necessary information. Teachers or institution administrators can access work and participation shared through their classroom workflows. Authorised staff may access data for support, security and service operation. We do not sell personal data. Providers’ retention and model-improvement practices depend on their service terms and configured arrangements; do not assume every model has zero retention.
International processing
Some service providers may process information outside Egypt. Cross-border processing remains subject to applicable Egyptian requirements and any required authorisations and safeguards. This policy is not a waiver of transfer restrictions or a claim that all information stays in Egypt. Contact us for information about the providers relevant to your feature before submitting sensitive material.
Storage and retention
Some chat history and preferences are stored on your device. Server records may separately include saved reports, submissions, usage excerpts, support correspondence and billing records. Clearing browser data does not delete those server records. We retain personal information only for the service purpose and any necessary legal, accounting, security or dispute requirements; the relevant purpose and record type determine the duration. You can request deletion. Required records may be retained, and backup removal follows the applicable backup lifecycle rather than immediate deletion from every copy.
Children and guardian involvement
For student registration under 18, we first collect the limited details needed to request permission: student name, email and date of birth, guardian email and chosen language. No learning account is created until the guardian approves through their private email link. We record the guardian’s name, declared relationship, affirmative authorisations, policy version, scope, decision date and any withdrawal date. Invitation tokens are stored as hashes. Unused invitations expire after 7 days; the scheduled cleanup removes unconsumed requests 30 days after expiry. Consent records associated with an account are retained as needed to evidence authorisation and meet applicable obligations. Guardians can decline or withdraw through the same email link, or contact support. Withdrawal immediately blocks account access and revokes sessions; it does not automatically erase records or cancel billing. Contact support for deletion, billing or corrections. This email-based process verifies mailbox access and a declaration of authority, not a government identity document.
Your rights and complaints
Subject to applicable law, you may request access, a copy, correction or deletion of personal data, withdraw consent, or object to or restrict processing where that right applies. Email [email protected] from your account email and describe the request. We may verify identity without collecting more than necessary, and respond within the applicable legal period. Withdrawal does not make earlier lawful processing unlawful, but may prevent continued use of a dependent feature. You may complain to the competent data-protection authority without first waiving other remedies.
Security, optional features and updates
Keep account credentials private and sign out on shared devices. No online service can promise absolute security. Microphone access is controlled through your device; optional push or Telegram notifications depend on your choices and the relevant provider. The Cookie and Storage Policy explains browser storage and Google Fonts. Material privacy changes will be communicated where required, and new consent will be requested where the law requires it.