Privacy Policy
Last updated 2026-09-01
This policy explains what personal data we collect when you use REEX at reexai.com, why we collect it, who else sees it, and what you can ask us to do about it.
1. Who is responsible
REEX, established in Jordan, is the controller of the personal data described here. Contact us at reextech0@gmail.com.
2. What we collect
Account details: your email address, your name, and the password you set (stored only as a cryptographic hash — we never see it).
Profile details: the information you give us when you set up your account, such as your country, field of study, university, and current status.
Your work: the files you upload, the written answers, email drafts and rationale you type, and your messages to the in-program characters and the guidance assistant.
Results: your scores, the AI's written feedback, your performance reports, and your certificates.
Activity: which stages you opened, how long you actively spent on a stage, and when you submitted.
Technical data: your IP address, browser and device information, and error diagnostics.
3. Why we use it
To give you an account and let you sign in.
To run programs, evaluate your submissions, and produce your feedback, reports and certificates. This includes automated decision-making: your score and whether you pass a stage are determined by an AI system, not by a person. You can ask us to review a result — see section 8.
To recommend programs that match the interests and field of study you told us about.
To keep the platform secure, detect abuse, and diagnose faults.
To communicate with you about your account.
4. Legal basis
We process your account and submission data to perform our agreement with you. We rely on our legitimate interest in running a secure and functional platform for security and diagnostics, and on your consent where consent is required in Jordan.
5. Who else sees your data
Supabase — hosting for our database, authentication, and the storage where your uploaded files are kept.
Anthropic — the AI provider whose models evaluate your submissions and power the guidance assistant. Your submitted work, email drafts and rationale are sent to Anthropic's API for this purpose.
Vercel — application hosting and delivery.
Sentry — error monitoring. It receives technical diagnostics about faults. We have configured it not to collect personal data by default and not to record what you type.
We do not sell your personal data, and we do not share it for advertising.
This list is complete as of the date at the top of this page. If we add another provider that handles your personal data, we will update it here.
6. International transfers
The providers above may process your data outside Jordan. Where they do, we rely on the transfer safeguards those providers offer, such as standard contractual clauses.
7. How long we keep it
We keep your account, submissions and results while your account is open, so that your portfolio and certificates remain available to you.
If you ask us to delete your account we remove your personal data within 30 days, except where we must keep something to meet a legal obligation.
8. Your rights
Subject to the law of Jordan, you can ask us to give you a copy of your data, correct it, delete it, restrict or object to how we use it, or send it to another provider.
Because your scores come from an automated system, you can also ask a person to review a result you believe is wrong.
Write to reextech0@gmail.com. We will respond within the period required by law. If you are not satisfied, you can complain to the data protection authority in Jordan.
9. Security
Your files are held in private storage that only your own account can read. Access to the database is restricted by row-level security rules, and grades can only be written by our server, never by a browser.
No system is perfectly secure. If a breach affects your personal data we will notify you and the relevant authority as required by the law of Jordan.
10. Cookies
We use cookies that are strictly necessary to keep you signed in and to keep the platform secure. We do not use advertising or third-party tracking cookies.
11. Children
REEX is not intended for children below the age at which they can consent for themselves under the law of Jordan. If you believe a child has given us personal data, contact reextech0@gmail.com and we will delete it.
12. Changes
We may update this policy. The date at the top of this page shows when it was last changed, and we will tell you before a significant change takes effect.