How accounts work
There is no self-registration on Kalima. Every account is created by our team after a request is reviewed, which means no one can create an account in someone else’s name, and the number of accounts that exist is always something we can account for.
Accounts are personal. Sharing a login is the single most common way a learner’s records end up somewhere they should not be, so please do not do it.
Passwords
Your password is stored as a salted hash — it is never held in a readable form, and nobody at Kalima can see it. If you ask for a password reset, we send a one-time link rather than the password itself.
Choose something long and unique to this site, and use a password manager if you can. If you think someone else has your password, change it and tell us at [SECURITY EMAIL].
Your data
- Traffic between your browser and the platform is encrypted in transit (HTTPS).
- The platform and its database run on [HOSTING PROVIDER AND REGION].
- Backups are taken [FREQUENCY] and kept for [RETENTION PERIOD].
- Card details, if you pay online, are handled by [PAYMENT PROVIDER] and never stored by us.
Who can see what
Your tutor sees the work and notes for the learning you do together. A small number of administrators can reach account records when they need to in order to run the service or help you with a problem. Other learners see nothing about you.
Reporting a problem
If you find a weakness in the platform, we would rather hear it from you than from anyone else. Write to [SECURITY EMAIL] with enough detail to reproduce it. We will confirm we received it and tell you what we are doing about it.
Two requests while you look: please do not run automated scanners against the platform, and please do not access, change or download anyone else’s data to prove a point — a clear description is enough. We will not pursue anyone who reports in good faith and follows those two rules.