Privacy Policy

1. Data we collect

• Account data: name, email, phone number, role, and a hashed password.
• Operational data: classes, attendance, grades, subscriptions, payment and wallet records.
• Guardian contact details for minor students (email or phone) for oversight and communication.
• Technical records: sign-in timestamps and audit logs of sensitive operations.

2. Protection of minors — a core rule

• Any student not verifiably 18+ is automatically treated as a minor.
• A minor's messaging with adults requires a guardian contact channel; an approved linked guardian has read-only visibility into their child's conversations with adults, disclosed to both sides.
• We never sell student data or use it for advertising.

3. Payments

Card and mobile-wallet payments run on the licensed payment provider's (Paymob) secure pages — we never store card numbers. We keep the transaction record (amount, time, status, reference) for accounting and refunds.

4. Who sees your data

• A center or teacher sees only their own linked students (attendance, grades, payments of their classes).
• A parent sees the children linked to their account by approval.
• Platform staff access data for operations and support; sensitive actions are written to a tamper-proof audit log.
• We share data with third parties only as operational providers (payments, email, hosting) or under legal obligation.

5. Security

• Encrypted transport (HTTPS); passwords stored as strong one-way hashes.
• Per-center data isolation at the database level; financial records that cannot be edited or deleted.
• Changing your password ends old sessions on all devices.

6. Your rights over your data — Law 151/2020

These rights are implemented in the product, under Settings → Your data and rights. They are not a promise to contact us.

Access and a copy

• You can request a copy of your data at any time. We prepare it as a single file and the download button appears on that page as soon as it is ready.
• The file contains no password, no session tokens and no two-factor secrets — those are credentials rather than personal data, and exporting them would turn a privacy feature into an account-takeover tool.
• The file is deleted automatically 7 days after it is prepared.
• A guardian with an approved link may request a copy of their minor child's data.

Deletion

• You request deletion from the same page. The request does not delete your account at that moment — the platform team reviews it, and you may withdraw it before review.
• For a minor student's account, the request is made by the guardian linked to it, not by the student. Any student not verifiably 18+ is treated as a minor.
• On execution: your personal details are permanently erased — name, email, phone, guardian contact, date of birth — the account is disabled and all its sessions end immediately.
• What remains, and why: financial and accounting records (payments, receipts, settlements, ledger entries) and the audit log. Egyptian law requires us to retain accounting records, and those records cannot be edited or deleted at the database level in the first place. They remain attached to an account id carrying no name and no contact details — the books stay auditable without staying attributable to you.
• Every deletion request, and every decision on one, is written to a tamper-proof audit log.

Correction

You can edit your details directly in Settings, or contact us to correct anything you cannot change yourself.

7. Cookies

Essential cookies only — sign-in, language, and theme. No advertising trackers.

8. Communication

We send operational notifications (attendance, payments, invites) in-platform and by email, and may use WhatsApp for operational messages when enabled. No marketing messages without your consent.

9. Changes to this policy

Material changes will be announced in the platform before taking effect.