fourpointoh Privacy Policy

Last updated: September 5th, 2026.

fourpointoh is operated by IYD Portal, Dubai Economic Department, Dubai, United Arab Emirates, which is the controller of your personal data under the UAE Personal Data Protection Law. This explains what we collect, why, and what happens to it. Short version: we collect what the product needs to work, we use it only to run fourpointoh for you, we never sell it, and you can delete it.

What we collect

Your account details: title, first and last name, email address, phone number, whether you are a student or an instructor, and password (stored only as a secure hash). We use these to run your account and to contact you about your account when needed; we do not use your phone number for marketing. The files you upload and everything generated from them: extracted text, images, questions, answers, grades, and your quiz history. Usage records: which features you use, credits spent, and the processing costs of your activity, which we track to run the service and its billing fairly. Payment details are collected and held by Stripe, our payment processor; we receive your subscription status and invoices, never your card number.

What we use it for

One thing: providing fourpointoh to you. Your files are processed to create practice content for your own account. We do not share your files or generated content with other users, do not publish them, do not use them to build shared question banks, and do not use your data for advertising. There are no ads in fourpointoh.

Who touches your data

We run on trusted providers who each handle a piece of the service: Supabase (database and file storage), Anthropic (the AI that reads your materials and writes your questions; under Anthropic's API terms, data sent to it is not used to train their models), Stripe (payments), Vercel (hosting), Resend (emails like sign-in confirmations), and Sentry (error reporting so we can fix crashes). Each receives only what its job requires. We do not sell your data to anyone, and we only disclose data if the law genuinely requires it.

Where and how long

Your data is stored on Supabase infrastructure in Europe. Some of our providers process data outside the UAE, including in the European Union and the United States; where data leaves the UAE, we rely on the safeguards available under the UAE Personal Data Protection Law, including transfers necessary to provide the service you signed up for and the contractual data protection commitments of our providers. If a data breach ever puts your data at meaningful risk, we will notify you and the relevant authorities as the law requires. We keep your data while your account is active. Delete your account and your files, generated content, and personal details are permanently removed from our systems within 30 days, except minimal billing records we are legally required to keep.

Your rights

You can see and export your content from within the app, correct your account details, and delete your account yourself in settings. You can also ask us to restrict or object to specific processing of your data. If you want a copy of your data or help with any of this, email support@fourpointoh.club and we will sort it within 30 days. If you are in a jurisdiction with specific data protection rights, such as the UAE PDPL or the EU GDPR, we honor requests under those laws through the same address.

Cookies

We use only the cookies needed to keep you signed in. No tracking cookies, no third-party advertising cookies, which is why there is no cookie banner.

Age

fourpointoh is for users 16 and older. We do not knowingly collect data from anyone younger; if that happens, tell us and we will delete it.

Changes and contact

If this policy changes in a way that matters, we will tell you in the app or by email first. Questions or requests: support@fourpointoh.club.