Terms and conditions

1. Parties and scope

These terms are between AML SOLUTIONS LTD, company number 17075113, registered at 3rd Floor, 86–90 Paul Street, London, EC2A 4NE, United Kingdom (trading as “Riwaq”, “we” or “us”), and the mosque, madrasa or school subscribing to Riwaq (“customer” or “you”). The person who accepts these terms confirms that they can bind the customer. These terms govern organizational use of the Riwaq service. The acceptable-use, intellectual-property and third-party-link provisions also apply to visitors to our public website. A visitor does not become a subscribing customer simply by browsing. Parents’ tuition arrangements remain with their school.

2. The service and your responsibilities

Riwaq provides hosted registration, class, attendance, communication, safeguarding record and payment administration tools. The customer is responsible for teaching, safeguarding decisions, student welfare, records it enters and the legal duties that apply to its setting. Riwaq does not provide legal, educational or safeguarding advice.

You must keep account access limited to authorized people, remove access when roles change, use accurate contact details, and promptly tell us about suspected account misuse. You must have the right and lawful basis to enter personal information, give required privacy information to students, parents, contacts and staff, and identify any condition required for health, religious or safeguarding information. You must not use the service unlawfully, interfere with its security or upload malicious material. You must not attempt unauthorised access to another organisation’s records, bypass access controls, scrape personal data, impersonate another person, or copy, resell or reverse engineer the service except where law expressly permits it. During an active subscription, we grant your authorised users a limited, non-exclusive right to use Riwaq for your organisation’s own administration, within your plan.

3. Plans, charges and changes to prices

US enrollment is being prepared. These pages describe the planned US pilot and do not take payment or start a subscription. We will confirm your subscription terms and any applicable sales tax before enrollment. SMS and online parent-payment collection are excluded from the initial US pilot.

The applicable subscription plan, price, student limit, payment method and any optional charge are shown on the pricing or checkout page when you subscribe. The current advertised plans are $30 per month for up to 50 current students, $40 per month for up to 120, and $85 per month for unlimited students. Parent-payment processing and Riwaq service fees are shown separately. Tuition and registration fees chosen by a customer are that customer’s charges to parents, not Riwaq subscription fees.

Eligible new US madrasa signups pay $1 for the first 30 days of their selected Riwaq subscription plan, plus applicable tax. This introductory month begins when verified signup and payment-method setup are completed, and the $1 payment is collected at signup. The selected monthly price is collected automatically after those 30 days unless you cancel before the introductory month ends. Cancellation stops future subscription charges; the $1 first-month charge remains payable. Free trials that already started keep their agreed terms. The US offer is available only after USD enrollment opens and eligibility is confirmed.

We will give the account administrator at least 30 days’ notice before any change to the price payable by an existing customer. The notice will explain the new price and when it applies. You can cancel before it takes effect. A plan change you request yourself may change your price sooner, with the new amount shown before you confirm it.

4. Rolling subscription, cancellation and refunds

The subscription runs month to month with no fixed minimum term. You may cancel at any time through the billing page. Cancellation stops future Riwaq subscription collection when confirmed. The export and retention process in section 6 starts when the subscription actually ends, rather than when a future cancellation is requested. Charges already incurred remain payable. Fees for a period already started are not refunded merely because you cancel during that period.

If a material fault in Riwaq prevents you from receiving the service, tell us promptly at contact@riwaq.uk. We will investigate reasonably and seek to fix it. We may offer an appropriate credit or refund after assessing the fault and its effect. Nothing in these terms removes a refund or other remedy that applicable law requires. Parent tuition refunds and provider processing charges are governed by the customer’s own fee arrangements and the payment terms shown at the time of payment.

5. Availability, changes and suspension

We will use reasonable care and skill to operate Riwaq and maintain appropriate security. Maintenance, internet issues and provider outages can affect access. We may change the service for security, legal compliance or improvement and will give reasonable notice if a change materially reduces a core function. We may suspend access where reasonably necessary for a serious security, legal or payment issue, and will explain the reason where practicable. We do not guarantee uninterrupted access.

6. Customer data and departure

You remain the controller of student, parent, staff and safeguarding information entered for your organization. We process it under section 9. When your subscription ends, we email a private, time-limited CSV export link to the verified administrator who set up the account. Download, check and securely store the export within 30 days. Our daily process permanently erases student and parent operational records, including attachments, attendance, reports, messages and safeguarding records, after 30 days from the subscription ending; other customer operational records after one year. A delayed export email gets a full 30-day download window before erasure. Undelivered exports, unclear ownership, unresolved payments and documented legal holds temporarily block erasure for review. Exclusive logins are erased while logins shared with another customer are preserved. Registered schools may have longer statutory duties for attendance, admissions, student and child-protection records. You are responsible for identifying, retaining and securely transferring those records after we return them to you. We strip personal details from retained payment records and keep only limited records needed for our own legal obligations, unresolved payments, claims or documented legal holds, restrict access to them, and erase them when the reason ends. Our company accounting records are generally kept for six years after the relevant financial year ends. Other payment providers may keep their own records under their notices.

If you wish to return during the 30-day export period, contact us before deletion. Reactivation requires an active subscription and cannot restore information already deleted. Backups are removed on their normal expiry cycle and are not used to restore a canceled customer’s access except where legally required.

7. Ownership and confidentiality

You retain rights in the information you enter. You permit us to host, transmit and process it to provide the service and meet our legal obligations. We retain rights in the Riwaq software, design and brand. Our permission to process your information is limited to providing the service on your instructions and meeting applicable law; it does not transfer ownership to us or permit targeted advertising or general-purpose AI model training. Each party must protect the other’s confidential information, share it only with people who need it and are bound to protect it, and disclose it when law requires. Confidentiality does not cover information the receiving party can show was already lawfully known, became public without breach, was independently developed, or was lawfully received without a duty of confidence. Where legally allowed, a party required to disclose confidential information will give notice and limit disclosure to what is required. These duties continue after the subscription ends.

8. Liability and disputes

Nothing limits liability for death or personal injury caused by negligence, fraud, fraudulent misrepresentation, or another liability that law does not permit us to limit. Subject to that, each party’s aggregate liability arising from the service is limited to the Riwaq subscription fees paid or payable by the customer in the 12 months before the event giving rise to the claim. This limit applies only to the extent it is fair, reasonable and lawful in the circumstances. Neither party excludes liability for a remedy that law requires. The customer remains responsible for its educational and safeguarding decisions.

Contact us first at contact@riwaq.uk so we can try to resolve a dispute. The law of England and Wales governs these terms and its courts have jurisdiction, subject to mandatory rights that apply elsewhere.

9. Data processing agreement

Our data processing agreement forms part of these terms. It sets out our processing instructions, the data and people covered, security and confidentiality duties, breach and rights assistance, subprocessor notice and objection rights, international transfers, audits and return or deletion. It takes priority over conflicting terms about customer personal data. It continues to apply while that data is retained.

10. General

We will send contractual notices to the account administrator’s email. Keep it current. For a material change to these terms, we will give reasonable advance notice explaining the change and effective date, except where an urgent legal or security requirement needs earlier action. The existing 30-day price-change and subprocessor notices continue to apply. Changes will not retrospectively remove rights already accrued. Any separately signed agreement prevails only to the extent it expressly varies these terms and can lawfully do so; the DPA’s processing priority still applies. If part of these terms is unenforceable, the rest remains effective. A delay in enforcing a right does not waive it. Neither party may transfer this agreement without the other’s consent, except as part of a genuine business transfer with continued protection of customer information. See our privacy policy for details of personal-data use and our cookie notice for browser storage and statistics choices.

11. Third-party links and contacting us

Links to another website do not mean we endorse or control it. Separate third-party services have their own terms and notices; this does not remove our responsibilities for subprocessors under the DPA. If you have an accessibility difficulty, security concern or question about these terms, email contact@riwaq.uk.