The Full Play.maahir.io Walkthrough

1. App Identification

2. Login Flow

1. Visit /login (or any /student/* URL — they all show this page when unauthenticated)
2. Single field: "Email / Phone / CNIC" — accepts any of the three identifiers
3. Password field (no strength meter)
4. OR ✨ Magic link — paste email, get one-time login URL
5. On success → redirect to /student/dashboard
6. Session cookie set for 7 days

Issue noticed: No visible CSRF token, no CAPTCHA, no 2FA option. Login is form-post only. No "remember me" toggle visible. No signup for 2FA device in flow.

Issue noticed: Login page includes "🎭 Try Demo (No Registration)" — this is a frictionless entry point for new users, but the URL pattern is unclear — does it create a session? Does it expire? If yes, after how long?

3. Student Dashboard — First Impression

The dashboard is the most pixel-dense screen in the app. Here's what a new learner sees on Day 1:

Header (top bar)

• 🌙 Theme toggle (light/dark)
• 💎 "Lv 6 — 1726 to next — 3,274 XP" — gamification pill
• Language switcher dropdown (17 languages)
• 🔔 Notifications button (61 unread — appears heavy)
• Avatar "M" with link to /student/profile
• Logout

Welcome Strip (4/5 setup progress)

"Welcome back, munaf! Complete your setup (4/5)" — links to /student/onboarding/checklist. The 5-step setup is the user's first 5 actions.

My Journey (Stage 4: Specialize)

Visual progress bar showing the user's stage in the Zero-to-Hero journey. Stage 4 = "Specialize — Go deep in your track." The full 6-stage journey: Discover → Learn → Practice → Build → Grow → Earn (or similar). /student/journey is the full map.

Job-Ready Checklist (50% — emojis show progress)

📊📁🎭✓💼📧✓🏆✓ — visual progress through the 5-7 job-readiness items. Clicking leads to /student/job-ready.

Streak Warning

"Your 1-day streak is at risk! Complete an exercise or survey today to keep it alive!" — Persistent nudge. Note: A user since June 2026 has a 1-day streak. Either the streak feature is broken, or engagement is genuinely low. Both are findings.

Today's 5-Minute Skill (micro-lesson)

Featured: "Ask Questions That Open Up Conversations" (Communication, +5 XP, 3 min). Links to /student/micro. This is a daily micro-content slot.

Next Assignment Card

"Daily Routine Planner with AI — 22 assignments pending · Beginner difficulty · Start →" with link to /student/assignments/2.

Resume Exercise

Last-active exercise reminder: "Imposter Syndrome — What It Is and How to Beat It · Module 1: Professional Confidence · last active: never · Resume →".

Today's Goal Widget

0/3 tasks. Dropdown: 1/day, 2/day, 3/day (default), 5/day, 7/day, 10/day. Daily task count target. Big, always-visible motivator.

Stats Card

• ⭐ 3,274 XP
• #72 Ranked (but: rank of what? cohort? all-time? platform? unclear)
• 📚 48 Started exercises
• ✅ 7 Completed
• 🔥 1 Day Streak
• ⚡ Combo Chain x1.0 (resets on inactivity)

WhatsApp Group CTA

"Join your batch WhatsApp group — AI Pakistan - Summer 2026" — links to a real WhatsApp invite link (https://chat.whatsapp.com/IbayQgqGiSfAjaDVfrkFoT). Note: This is the user-facing batch coordination channel, not the platform's own chat.

Support Strip

"🎫 Open Ticket" → /student/support · "✉️ hello@maahir.io" — direct email fallback.

Learning Guide CTA

"Read Guide →" → /student/guide — onboarding for new users.

Maahir Score (engagement score)

"67 overall engagement" with sub-scores:

• ✏️ Exercises: 7 (+14)
• 🧠 Assessments: 2 (+10)
• 🎯 Scenarios: 24 (+24)
• 💬 Forum Posts: 3 (+9)
• 🚀 Projects: 1 (+10)
• 🎓 Track Mods: 0 (+0)

Note: The +N numbers appear to be the points earned (or worth) of items, not deltas. Confusing. Should be renamed.

Choose Your Career Path

11 specialized tracks picker → /tracks.

Mentor Matching (NEW)

"Connect with experienced peers who can guide you" → /student/mentors.

Your Learning Domains (6 tiles)

• 🧠 Foundation (Think, speak, connect) — 5/897 scenarios · 1%
• 💼 Career (Survive & thrive at work) — 1/967 · 0%
• 📈 Business (Earn, build, grow) — 13/1126 · 1%
• 💻 Digital & AI (Use tech safely & powerfully) — 3/667 · 0%
• 💰 Life Skills (Protect your money & rights) — 1/770 · 0%
• 🌱 Wellbeing (Stay healthy & resilient) — 0/174 · 0%

Total: 4,601 scenarios in the 6 domain tiles. Combined with the role-play page's 9,259 scenarios, the app has ~14,000+ practice scenarios — which matches the homepage's "14,900+ practice items" claim.

Life Skills Sub-Categories

0/7 categories started → "Explore Life Skills"

Projects Tile

1 submitted · 0 featured. "+ Submit New Project" → /student/projects/new.

Quick Action Tiles (9 items)

• 🔧 AI Tools Quick access directory (126 tools available)
• 🧬 Master Profile (Assessments, traits, fun facts)
• 🧠 Take Assessments (2/44 completed)
• 🎮 Practice a Prompt (AI Playground)
• ❓ Take a Quiz
• 📊 My Progress (Stats & charts)
• ⚔️ Battle Arena (0W/0L)
• 🎯 AI Coach (0 active goals)
• 👥 Teams (Join a team)

Hakeem (mascot character)

"💎 Hakeem · Level 6 · 1,726 pts to level up · 42% · 3,274 XP" — a character in the gamification system.

Weekly Leaderboard (top 5)

1. 🥇 areeba aamir — 272,170
2. 🥈 Fatima Faisal — 267,209
3. 🥉 Tehzeeb Shah — 175,731
4. syed muneeb abbas naqvi — 160,229
5. Iman Faisal — 159,944

User's rank: #72. Issue: total cohort size not shown. If 72 of 100, the user is on the board. If 72 of 10,000, that's mid-pack. Without context, the number means little.

Class Activity Feed

Real-time stream: "manal fatima completed exercise: Creating a Study Guide · 7h ago · 🚀". This is the social proof + FOMO driver. Shows ~20 recent activity items in a scrollable feed.

4. Sidebar Navigation — 11 Groups, 94 Routes

Total: 94 student-area routes. See Section 2 — Feature Encyclopedia for the breakdown of each route.

5. Top Header (post-login) — The Conflict

When logged in, the top header still shows the marketing-site navigation:

• 🎓 Maahir (logo)
• Why Maahir → /why-maahir
• Tracks → /tracks
• Curriculum → /curriculum
• How We Teach → /methodology
• Features → /features
• Special Needs → /special-needs
• Success → /success
• About → /about
• For Govt & Agencies → /ngo
• Empower → /empower
• Tour → /tour
• Try Demo → /try-demo
• Preview → /demo
• FAQ → /faq
• Login (still shows!) → /login
• Apply Free → (login redirect)
• Dashboard → (login redirect)

🔴 Major UX issue: Logged-in users see 15+ links that take them OUT of the app to marketing pages. They should see a different header: Dashboard, My Learning, My Earnings, My Passport, Support, Logout.

See Section 6 for the full fix proposal.

6. Visit Sequence — The Real Learner Path

Here's what a real learner would do in their first week:

Day 1 (Onboarding)

1. Land on homepage → click "Apply Free" or "Try Demo"
2. Register (email + password + ?) → email verification?
3. Arrive on dashboard → see "Complete your setup (4/5)"
4. Click through setup: profile, learning style, language, accessibility, batch selection
5. First role-play prompt
6. First scenario → choice → feedback

Week 1 (Discovery)

1. Take 2-3 assessments (personality, learning style, AI aptitude)
2. Browse 73 profession packs → pick 1-2 favorites
3. Try 3-5 role-plays (5-10 min each = ~30-50 min)
4. Complete first assignment (Daily Routine Planner)
5. Visit Forum → see Classmates → follow a thread
6. 5-minute skills daily (3 min/day)
7. Streak hits 7

Month 1 (Practice Loop)

1. Choose a track (Marketing, Freelance, etc.)
2. Complete Module 1-2 of that track
3. Submit a Capstone project draft
4. Apply for 1-2 Maahir Works gigs
5. First 1:1 session with AI Coach
6. First multiplayer roleplay
7. Earn first certificate

Month 3 (Earning)

1. Complete Track Module 1-4
2. Build portfolio (3-5 projects)
3. Win first paid Maahir Works gig (Rs 8-25K typical)
4. Public Skills Passport ready to share with employers
5. Consider Talent Portal (employer-facing public profile)

7. Engagement Mechanics — What Drives Return Visits

8. Tech Stack & API Surface

Security Headers (sampled)

• X-Powered-By: PHP/8.3.31 — visible — should be stripped
• Set-Cookie: HttpOnly · Secure · SameSite=Lax · domain=.maahir.io · 7-day expiry ✓
• Cache-Control: no-store, no-cache, must-revalidate ✓
• HSTS — not visible in response headers — should add
• CSP — not visible — should add
• X-Frame-Options — not visible — should add

9. Public vs Protected — Auth Boundary

Critical finding: All 94 /student/* routes return HTTP 200 + the login page when unauthenticated. There's no server-side redirect to /login. The redirect is client-side JS only.

What this means:

• Anyone hitting /student/dashboard directly gets a 200 OK response with login form HTML in the body. They CAN'T see the dashboard content (it's loaded async), but the URL stays at /student/dashboard.
• SEO crawlers will index /student/dashboard as a real page, then complain it's the login form — bad for SEO.
• If there are any /api/* endpoints under /student/, they may not have the same client-side check. Worth verifying with a targeted API probe.

Public routes that work WITHOUT auth (no JS redirect needed):

• /status (System Status page)
• /tracks/* (all 10 named track pages)
• /ai-economy (Pakistan AI Economy landing)
• /industries (industries overview)
• /partners (Partner Ecosystem — 100+ orgs)
• /forum (Community Forum — public, but login required to post)
• /sdg (UN SDG Impact page)
• /resources/library (Free Learning Library)
• /jobs (Job Board)
• /talent (Talent Portal — employer-facing)
• /changelog (What's New — 136KB!)
• /transition (Career Transition Pathway)
• /roadmap (Product Roadmap — 245KB!)
• /login, /register, /forgot-password, /try-demo, /demo, /tour, /empower, /ngo, /features, /curriculum, /methodology, /why-maahir, /about, /special-needs, /success, /faq

11. The Journey Map (/student/journey) — Zero to Hero

The Journey Map is the user's 9-stage progression through Maahir. This is the gamified career ladder.

My profile: At Stage 4 (Specialize), 0/3 Track Modules started. Goal: Become a Freelancer. AI suggests next: "Complete the freelance-ready assessment" → /student/assessments/freelance_ready.

12. Job-Ready Checklist (/student/job-ready) — 6 Verifiable Steps

From signup to hireable, every step is checked against your real activity. This is the verifiable proof layer.

My job-ready score: 50% (3/6). Steps 2 and 4 remaining.

13. Business Toolbox (/student/toolbox) — 16+ AI Generators

The Tools nav group has 3 routes. The Business Toolbox is the working one — 16+ AI generators for freelance/business:

Business Generators (9)

• 🎤 Elevator Pitch (English + Roman Urdu)
• 📊 Pitch Deck Outline (8 slides)
• 💰 Pricing Calculator (3-tier in PKR)
• 🧾 Quotation / Invoice (WhatsApp-ready)
• 📋 Lean Business Plan (one-page canvas)
• 🔍 SWOT + Competitors
• 📣 30-Day Marketing Plan
• 🚜 Payment Reminder Ladder
• 🔬 Gig Analyzer (paste Fiverr/Upwork gig)

Job Seeker Tools (4)

• 📧 AI Cover Letter Generator
• 🎯 Job Description → Skill Gap Analyzer
• 💵 Pakistan Salary Benchmark (by city + experience)
• 🔗 LinkedIn Profile Optimizer

Legal Toolkit (3, with disclaimer)

• 📝 NDA Template
• 📄 Freelance Agreement
• 🤝 MoU Template

Note: Legal templates carry a clear disclaimer: "These are templates for learning purposes. They are not legal documents. Always consult a qualified lawyer before signing or using any agreement in real business." Good practice.

NEW: Build Defense

"Let AI grill you on what you built. Prove you understand your own system." — This is the AI-led code/system defense feature, which is unique to Maahir (no peer has it). It supports the Capstone flow.

14. 5-Minute Skills (/student/micro) — 1,079 Cards Across 6 Categories

The micro-learning layer. One card per day, +5 XP, 4 minutes.

Today's Featured Card (observed)

"Give Feedback Using the SBI Framework — INTERMEDIATE · 4 min · +5 XP
SBI = Situation, Behavior, Impact. Instead of 'You're sloppy', say 'In yesterday's client presentation (situation), when you skipped the data slides (behavior), the client looked confused and asked basic questions (impact).' Specific behavior beats personality judgments. Deliver privately, not in front of others — respect matters deeply in Pakistani work culture."

This is excellent content. Pakistan-specific cultural guidance embedded in a universal framework.

6 Categories, 1,079 Total Cards

• 🗣️ Language (1 skill: Business English · 40 cards)
• 🧠 Soft Skills (18 skills · Communication, Negotiation, Leadership, Resilience, Confidence, Time Management, Ethics, Teamwork, Critical Thinking, Emotional Intelligence, Networking, Problem Solving, Interview Skills, Crisis Management, Public Speaking, Client Management, Cross-Cultural, Customer Success)
• 🛠️ Technical (21 skills · Prompt Engineering, Canva, Excel, WordPress, Digital Payments, AI Tools, Typing, Digital Literacy, Social Media, Email, AI Ethics, AI Advocacy, AI Transformation, IT Support, Enterprise Tools, Data Skills, System Blueprints, AI Economy, Cyber Careers, Trade Digitization, Green Jobs)
• 💰 Daily Life & Rights (38 skills · Money Basics, Tenant Rights, Employee Rights, Consumer Rights, Women's Rights, Freelancer Rights, Cyber Safety, Family Legal, Health, Daily Life, Money Conversations, Mental Health, Women at Work, Pakistani Daily Life, Digital Parenting)
• + Business & Career categories (more)

15. AI Coach (/student/coach) — Quiz + Practice + Ask + Goals + Career

5 modes: Quiz, Practice, Ask, Goals, Career. Quick Quiz dropdown: Easy/Medium/Hard. Recent quizzes shown. 0/15 Exercises, 38% Mastery on my profile.

Combines structured learning with on-demand help.

16. Feedback Board (/student/feedback) — Transparency Win

The Feedback Board is a public-feature-request tracker with 5 types: Scenario Request, Tool Request, Feature Request, Bug Report, Content Request. Sortable by Top/New. Status: Open, Planned, In Progress, Shipped, Declined.

5 Real Examples Observed

1. 34 votes — Add scenarios about dealing with load-shedding during client calls. Status: Planned. Maahir team: "Building a 'resilient freelancer' scenario pack."
2. 27 votes — Tool for generating Daraz product descriptions in Roman Urdu. Status: In Progress. Maahir team: "Roman Urdu output toggle being tested."
3. 22 votes — Roleplay for negotiating with electricians/plumbers on repair costs. Status: Open.
4. 19 votes — Micro-cards about filing taxes for freelancers (filer vs non-filer). Status: Planned. Team: "10-card 'Freelancer Tax Basics' deck scheduled."
5. 15 votes — Series arc: from WhatsApp seller to Daraz store owner. Status: Open.

This is one of the strongest trust signals on the platform. Users can see exactly what's being built, what shipped, and what declined. No competitor has this level of transparency.

17. Capstone (/student/capstone) — 3 Artifacts to Graduate

Matched to your goal. 3 artifacts to complete:

1. 📝 Client Contract (Freelance Agreement or NDA/MoU) — generate in Business Toolbox
2. 📁 Portfolio (upload at least one project proof) — DONE for me
3. 🧾 Client Quotation (Quotation / Invoice) — generate in Business Toolbox

Submit when all 3 are ✅. Reviewer approves or tells you what to improve. Reward: Capstone Complete badge + 200 XP.

My status: In Progress · 1/3 artifacts complete (33%).

18. Women Empowerment Hub (/student/empowerment) — The Hidden Gem

The /student/empowerment page is dedicated women's content. Incredibly rich.

What it offers

• 162 total exercises across 7 character modules + 8 home-based business modules
• 146 Saheli Toolkit resources: 73 Business Ideas + 30 AI Prompts + 20 Templates + 13 Guides + 10 Legal & Safety
• 744 female role-play scenarios (filter=female)
• 295 female decision scenarios (filter=female)
• AI Business Consultant with women-specific persona
• Know Your Rights resource hub (harassment laws, helplines, legal resources)
• Inspiring Pakistani Women in Tech feature: Arfa Karim, Faiza Yousuf, Fatima Riaz, Hira Zainab, Jehan Ara (former P@SHA president), Maria Umar, Marvi Memon (former BISP chair), Roshaneh Zafar (Kashf Foundation), Sadaffe Abid, Sidra Qasim (Markhor)
• Confidential Harassment Reporting link → /student/support

Why this matters for the user's question: If you're pitching Maahir to UN Women, BISP women's component, or any gender-focused CSR program — this page is your sales collateral. It has more than any competitor, all in one place.

19. NGO Donor Sub-Pages — Deeper Pitches

Each major donor has its own bespoke pitch page under /ngo/{donor}. Walked 8 sub-pages (all public).

These are already-written partnership proposals. The donor sub-pages are essentially pre-baked 1-pagers for each major funder. With 2-3 days of polish (add proof points, named contacts, cost numbers), they're ready to send.

Example — /ngo/jica's "Possible Scenarios"

The JICA page includes 10 specific possible use cases. Example #5:

"After a flood, a family from Khairpur could be relocated to a relief camp in Sukkur. Their 9-year-old daughter had completed Grade 3 before the disaster; her school records are gone. But her Maahir account would remember everything — she could log into a camp volunteer's phone and resume her Sindhi-language exercises exactly where she stopped. The batch system would flag her as 'displaced — progress continued,' and JICA could track that education was not interrupted despite the displacement. This would be human security in action."

The page explicitly marks these as "POSSIBLE SCENARIO" and notes: "Maahir is a new platform in active development. These are not case studies of completed deployments — they demonstrate capability and potential alignment." Good honesty disclosure.