Privacy Policy for SamiAI

1. Introduction

Welcome to SamiAI (Smart AI-Powered Educational Assistant), a product of Smart Records for Information Technology & Software ("we," "us," "our," or "SRITS"). SamiAI is an intelligent AI-powered educational platform designed to enhance teaching and learning experiences for educational institutions, educators, and students.

This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our SamiAI application and related services. We are committed to protecting your privacy and ensuring the security of your personal and educational information.

Company Information:

• Company Name: Smart Records for Information Technology & Software
• Website: https://www.srits.website/
• Location: Jordan

By using SamiAI, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with our policies and practices, please do not use our application.

2. Information We Collect

2.1 Personal Information

We collect information that identifies, relates to, or could reasonably be linked to you, including:

• Account Information: Name, email address, phone number, educational credentials, institution name, role (teacher/student/administrator), and login credentials
• Profile Information: Professional or academic title, grade level, subject specialization, institution affiliation, profile picture
• Communication Data: Messages, feedback, support requests, and correspondence with us or other users through the platform

2.2 Educational Information

SamiAI is specifically designed for educational purposes. We collect and process:

• Student Information: Academic performance data, assessment results, learning progress, assignment submissions, grades, and educational records
• Teacher Information: Lesson plans, teaching materials, course content, curriculum designs, assessment criteria
• Learning Analytics: Student engagement metrics, learning patterns, time spent on activities, progress tracking
• Content Data: Educational content generated or uploaded by users, including documents, presentations, multimedia files, and AI-generated content
• Interaction Data: Questions asked, responses provided, discussions, comments, and collaborative activities

2.3 AI-Generated and Processed Information

As an AI-powered platform, SamiAI processes and generates:

• AI Interactions: Queries submitted to AI models, AI-generated responses, recommendations, and personalized content
• Learning Insights: AI-generated analysis of learning patterns, performance predictions, and personalized recommendations
• Content Generation: AI-created educational materials, lesson plans, assessments, and study resources

2.4 Usage and Technical Information

We automatically collect certain information when you use SamiAI:

• Device Information: Device type, operating system, browser type, unique device identifiers
• Usage Data: Features accessed, pages viewed, time spent on platform, interaction patterns, click-through data
• Log Data: IP address, access times, app version, crash reports, system activity, error logs
• Performance Data: Application performance metrics, response times, and system diagnostics

2.5 Location Information

With your permission, we may collect:

• Precise Location: GPS location for location-based features (optional)
• Approximate Location: General location derived from IP address for regional settings and content localization

3. How We Use Your Information

3.1 Service Delivery

• Provide and maintain the SamiAI platform and its features
• Enable content creation, management, and delivery
• Facilitate teaching and learning activities
• Generate personalized learning recommendations and insights
• Process AI requests and deliver AI-generated content
• Enable collaboration between educators and students
• Monitor student progress and engagement
• Support assessment and grading workflows

3.2 Personalization and Enhancement

• Personalize learning experiences based on individual needs
• Customize content recommendations and educational materials
• Adapt AI responses to user preferences and learning styles
• Provide intelligent suggestions for teaching strategies

3.3 Service Improvement

• Analyze usage patterns to improve features and user experience
• Train and improve our AI models for better educational outcomes
• Develop new functionalities and AI capabilities
• Enhance platform performance and reliability
• Conduct research on educational effectiveness

3.4 Communication

• Send service-related notifications and updates
• Provide technical support and respond to inquiries
• Send educational content and tips
• Communicate about your account or subscription
• Notify about important platform changes

3.5 Security and Compliance

• Detect, prevent, and address security incidents
• Protect against fraudulent, unauthorized, or illegal activity
• Comply with legal obligations and educational regulations
• Maintain data integrity and system security
• Enforce terms of service and acceptable use policies

3.6 Analytics and Research

• Conduct aggregated and anonymized educational research
• Generate usage statistics and learning trends
• Measure educational impact and effectiveness
• Improve pedagogical approaches and methodologies

4. Legal Basis for Processing (for applicable jurisdictions)

We process your personal information based on:

• Consent: You have given explicit consent for specific processing activities, including AI processing and personalization
• Contract Performance: Processing is necessary to provide the educational services you've requested
• Legal Obligations: We must process data to comply with applicable education and data protection laws
• Legitimate Interests: Processing is necessary for our legitimate business and educational interests, provided these don't override your rights

5. How We Share Your Information

We do not sell your personal information. We may share your information in the following circumstances:

5.1 With Your Consent

We share information when you explicitly authorize us to do so, such as when sharing work with classmates or collaborating on projects.

5.2 Within Your Educational Institution

• Educational records may be shared with authorized personnel within your school or institution
• Teachers, administrators, and authorized staff may access relevant student information
• Students may view their own academic information and materials shared by their teachers
• Parents/guardians may access their children's educational information where authorized

5.3 AI Service Providers

We use third-party AI services to power SamiAI features:

• Your queries and content may be processed by AI service providers
• We use reputable AI providers with strong privacy commitments
• AI providers are contractually bound to protect your data
• We do not allow AI providers to use your data to train public models without consent

5.4 Service Providers

We may share information with third-party vendors who provide:

• Cloud hosting and storage services
• Analytics and performance monitoring
• Customer support services
• Payment processing (if applicable)
• Communication and notification services

All service providers are contractually bound to maintain confidentiality and security.

5.5 Legal Requirements

We may disclose information when required by law, including:

• Compliance with legal processes (court orders, subpoenas)
• Compliance with educational regulations and reporting requirements
• Enforcement of our terms and conditions
• Protection of our rights, property, safety, or those of users
• Investigation of fraud or security issues
• Response to child safety concerns as mandated by law

5.6 Business Transfers

In the event of a merger, acquisition, or sale of assets, user information may be transferred, subject to the same privacy protections.

6. Data Security

We implement comprehensive security measures to protect your information:

6.1 Technical Safeguards

• Encryption: Data encrypted in transit (TLS/SSL) and at rest (AES-256 or equivalent)
• Access Controls: Role-based access control (RBAC) with multi-factor authentication
• Secure Infrastructure: Use of secure, reliable cloud hosting with industry certifications
• Regular Updates: Security patches and system updates applied promptly
• Data Isolation: Institutional data kept separate and isolated

6.2 Organizational Safeguards

• Staff Training: Regular security and privacy training for all personnel
• Access Limitations: Strict need-to-know basis for data access
• Incident Response: Established procedures for security breach response
• Regular Audits: Periodic security assessments and audits
• Background Checks: Screening of personnel with data access

6.3 Educational Data Protection

We take special measures to protect student educational records in accordance with applicable educational privacy regulations.

Note: While we strive to protect your information, no method of transmission or storage is 100% secure. We cannot guarantee absolute security.

7. Data Retention

We retain your information for as long as necessary to:

• Provide our services to you
• Comply with legal obligations (including educational record retention requirements)
• Resolve disputes and enforce agreements
• Support educational continuity and historical records

Specific Retention Periods:

• Account Information: Duration of account activity plus 3 years after closure or as required by institutional policy
• Educational Records: As required by applicable educational regulations and institutional policies (typically 5-7 years)
• AI Interaction Data: 1 year for personalization; aggregated data retained indefinitely
• Usage Data: Aggregated data retained indefinitely; identifiable data for 2 years
• Backup Data: Maintained for disaster recovery purposes (30-90 days)

When data is no longer needed, we securely delete or anonymize it.

8. Your Rights and Choices

Depending on your location, you may have the following rights:

8.1 Access and Portability

• Request access to your personal information
• Receive a copy of your data in a portable format
• View and download your educational content and records

8.2 Correction and Updates

• Request correction of inaccurate information
• Update your account information directly in the app
• Edit your profile and preferences

8.3 Account and Data Deletion

8.4 Restriction and Objection

• Request restriction of processing in certain circumstances
• Object to processing based on legitimate interests
• Opt out of non-essential communications

8.5 Consent Withdrawal

• Withdraw consent for AI processing and personalization features
• Withdraw consent for optional data collection (e.g., location data)
• Note: Withdrawal doesn't affect prior lawful processing and may limit platform functionality

8.6 Data Portability

• Receive your data in a structured, machine-readable format (e.g., JSON, CSV)
• Request transfer to another educational platform where technically feasible

8.7 Complaint Rights

• File a complaint with relevant data protection authorities
• Contact us first to resolve concerns

To Exercise Your Rights: Email us at support@srits.website. For account deletion, follow the specific instructions in Section 8.3 above.

9. Children's Privacy and Student Data

SamiAI may be used by students of various ages in educational settings. We are committed to protecting student privacy:

9.1 Children Under 13

• We only collect information from children under 13 with verifiable parental or institutional consent
• Schools and educational institutions act as agents for parents in providing consent
• We comply with applicable children's privacy laws (e.g., COPPA in the US)
• Parents have the right to review, request deletion of, and refuse further collection of their child's information

9.2 Student Data Protection

• Student data is used solely for educational purposes
• We do not use student data for targeted advertising
• We do not sell student data
• We do not create personal profiles of students beyond educational purposes
• Educational institutions maintain primary control over student data

9.3 Parental Rights

Parents and legal guardians have the right to:

• Access their child's educational information
• Request correction of inaccurate information
• Request deletion of their child's account and data
• Refuse collection of certain types of information

10. International Data Transfers

If you access SamiAI from outside Jordan, your information may be transferred to, stored in, and processed in Jordan or other countries where our service providers operate.

We ensure appropriate safeguards are in place for international transfers, including:

• Standard contractual clauses
• Adequacy decisions by relevant authorities
• Your explicit consent where required
• Compliance with applicable educational data transfer regulations

11. Third-Party Services and Links

SamiAI may contain links to third-party websites, integrate with third-party educational tools, or use third-party AI services. This Privacy Policy does not apply to those third parties. We encourage you to review their privacy policies.

We are not responsible for the privacy practices of third parties.

11.1 Third-Party AI Models

SamiAI may use various AI models and services from third-party providers. When you interact with AI features:

• Your queries may be processed by third-party AI providers
• We select providers with strong privacy commitments
• We configure services to maximize privacy protection
• We do not allow providers to use your data for training their public models without consent

12. Beta Testing Program

If you participate in our beta testing program:

• Additional data collection may occur for testing and improvement purposes
• Beta features may have different privacy practices
• We will inform you of any special data handling
• You may opt out of beta testing at any time
• Beta test data may be used to improve the platform

13. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect:

• Changes in our practices
• Legal, regulatory, or operational requirements
• New features, services, or AI capabilities
• Feedback from users and stakeholders

Notice of Changes:

• Material changes will be posted prominently in the app
• We will notify you via email for significant changes
• Institutions will be notified of changes affecting student data
• Continued use after changes constitutes acceptance
• Review the "Last Updated" date at the top of this policy

14. Contact Information

For questions, concerns, or requests regarding this Privacy Policy or your personal information:

15. Data Protection Officer

For data protection matters (if applicable in your jurisdiction):

Data Protection Officer: Available upon request

Email: support@srits.website

16. Jurisdiction-Specific Provisions

16.1 For Users in the European Union/EEA

If you are located in the EU/EEA, you have additional rights under the General Data Protection Regulation (GDPR), including:

• Right to lodge a complaint with a supervisory authority
• Right to data portability
• Right to object to automated decision-making and profiling
• Right to be informed about AI-driven decisions

Our legal basis for processing your personal data includes consent, contractual necessity, legal obligations, and legitimate interests.

16.2 For Users in the United States

We comply with applicable U.S. federal and state laws, including:

• FERPA: Family Educational Rights and Privacy Act (for educational records)
• COPPA: Children's Online Privacy Protection Act (for children under 13)
• State Laws: California CCPA/CPRA and other state-specific privacy laws where applicable

16.3 For Users in Jordan

We comply with all applicable Jordanian laws regarding data protection and educational information privacy.

16.4 For Users in Other Jurisdictions

We respect and comply with applicable local data protection and educational privacy laws in your jurisdiction.

17. Educational Privacy Considerations

As an educational platform, SamiAI is designed with special consideration for:

• Educational privacy regulations (FERPA, GDPR Article 8, etc.)
• Student data protection best practices
• Institutional compliance requirements
• Age-appropriate data handling
• Parental rights and consent requirements

We implement appropriate safeguards to meet educational industry standards and best practices.

18. AI-Specific Privacy Considerations

As an AI-powered platform, we want you to understand:

18.1 How AI Processes Your Data

• Your queries and content may be processed by AI models to generate responses
• AI models analyze patterns to provide personalized recommendations
• We use AI to improve educational outcomes and user experience

18.2 AI Model Training

• We may use aggregated, anonymized data to improve our AI models
• Personal data is not used to train public AI models without explicit consent
• Educational institutions can opt out of having their data used for model training

18.3 AI Transparency

• AI-generated content is clearly labeled as such
• Users are informed when interacting with AI systems
• We provide information about AI limitations and accuracy

This Privacy Policy is effective as of the date stated above and applies to all users of SamiAI.