Privacy policy

This website and learning platform (the "Platform") is operated by [[LEGAL NAME OF THE OPERATOR]], [[REGISTERED ADDRESS]], Egypt ("we", "us", "our"). We decide how and why your personal data is used, which makes us the data controller under Egypt's Personal Data Protection Law No. 151 of 2020 and, where it applies to you, the EU and UK General Data Protection Regulation (GDPR).

Contact for anything in this policy: alighalithebest@gmail.com · [[POSTAL ADDRESS]] [[If a Data Protection Officer is appointed: name and contact.]]

• Visitors to our public website (home, courses, blog, contact pages).
• Students with an account on the Platform, and their parents or guardians.
• Teaching staff — the teacher, administrators and teaching assistants who use the Platform.

3.1 Information you give us

We store your password only in a scrambled, one-way form (a "hash"). Nobody at the Platform can read it.

3.2 Information created while you learn

• Marks and feedback: scores, written feedback, and annotations your teacher draws on your submitted work, together with the history of any changes.
• Attendance for live sessions (present, late, absent).
• Lesson progress: which recorded lessons you have opened and completed.
• Group and course membership: which course and group you belong to.
• Notifications we show you, whether you have read them, and your notification preferences.
• Weekly progress reports, when this feature is available: a summary of your attendance, homework completion and marks for the week, prepared automatically, checked by your teacher and then shown to you in the Platform. Reports are not emailed.

3.3 Information provided by your teaching staff

• The name of your school and a parent or guardian's email address, which staff may record so that they can contact your family about your studies.
• Private teaching notes about your learning, visible only to staff. You can ask to see them (§8).

3.4 Homework set as a Google Form

Some homework may be set as a Google Form. When you fill one in, Google collects your answers under Google's own privacy policy. After the deadline, your teacher downloads the responses from Google as a spreadsheet and imports them into the Platform. We then store the email address you used on the form, your answers, your score and the time you submitted, and link them to your account to show you and your teacher your results.

If the email you used on the form differs from your account email, staff may match the response to you by hand, and may record that alternative address on your account so future responses match automatically.

3.5 Signing in with Google (optional)

If you choose to link a Google account for sign-in, we receive and store your Google account identifier and the email address on that Google account. We never receive your Google password. You can unlink Google at any time from your account settings.

3.6 Technical information

• IP address and request details: processed briefly by our servers and our security provider (Cloudflare) to deliver pages and to protect accounts from repeated sign-in attempts. Our application does not store your IP address in its database; our web server keeps standard access logs for up to [[14]] days for security and troubleshooting.
• Browser storage: while you are signed in, a sign-in token is kept in your browser's session storage and is deleted when you close the tab. We also remember your light/dark theme and how you prefer lessons to be listed, on your device only. We do not set advertising or analytics cookies. Cloudflare may set a strictly necessary security cookie to tell people and automated traffic apart.

3.7 Staff activity

For accountability, the Platform keeps a record of actions taken by teaching staff, such as who entered or changed a mark and when. These records may refer to the student the action concerned.

We do not use your data for advertising, we do not sell it, and we do not make decisions about you by automated means alone. Marks are awarded by your teacher, and scores imported from Google Forms reflect the marking set up by your teacher on that form.

Many of our students are under 18. We collect no more about a younger student than about any other student, and nothing in §3 is used for advertising or profiling.

• A parent or legal guardian may contact us at alighalithebest@gmail.com about a student's data and may exercise the rights in §8 on the student's behalf. Tell us which student you are writing about; we may need to confirm that you are their parent or guardian.
• If a parent or guardian asks us to stop processing a student's data or to delete the account, we will do so, subject to §7 and to anything the law requires us to keep.

Inside the Platform

• You can see your own profile, work, marks, feedback, attendance and progress.
• Your teacher and administrators can see the data of all students.
• Teaching assistants can see the data of students in the groups they are assigned to (or of all students, where the teacher has given an assistant access to every group).
• Other students can see only your name, and only if they share a group with you. They never see your email, your work or your marks.

Service providers who process data for us. Each works under our instructions and only for the purposes in §4.

Services with their own privacy policies. When you use these, the provider acts on its own account, not ours:

• Google: Google Forms homework and optional Google sign-in.
• YouTube / Vimeo: some recorded lessons are hosted there and play inside our page. When you play one, that service may collect data and set cookies under its own policy.
• WhatsApp (Meta): if you choose to message us on WhatsApp.

We may also disclose data if the law requires it, or to protect the safety of our students or staff.

When a period ends we delete the data or make it anonymous.

You have the right to:

• be told how your data is used (this policy);
• access your data and receive a copy, including staff notes about you;
• correct data that is wrong or incomplete;
• delete your data, unless we must keep something by law or to settle a dispute;
• withdraw consent at any time, where we rely on it (for example, linking a Google account for sign-in); this does not affect anything done before you withdrew it;
• object to processing based on our legitimate interests;
• receive your data in a portable format, where GDPR applies to you;
• complain to Egypt's Personal Data Protection Center, or to your local data-protection authority if you live in the EU or UK.

To use any of these rights, email alighalithebest@gmail.com from the address on your account (or, for a parent or guardian, tell us which student you are writing about). We will reply within [[30 days]]. We may need to confirm your identity first. There is no charge.

• All traffic to the Platform is encrypted (HTTPS).
• Passwords are stored only as one-way hashes; sign-in sessions expire automatically.
• Access inside the Platform is limited by role and, for teaching assistants, by assigned group.
• Uploaded files can only be opened through short-lived links issued to people allowed to see them.
• Staff actions are recorded.
• The database is backed up regularly, and backups are kept separately with restricted access.

No system is perfectly secure. If a personal-data breach is likely to put you at risk, we will tell you and the relevant authority as the law requires.

Our service providers may store or process data outside Egypt, including in [[HOSTING REGION]] and wherever Cloudflare and our email provider operate. We use providers that offer appropriate safeguards and we transfer only what each needs for its task, in line with Egypt's Personal Data Protection Law and, where it applies, the GDPR.

If we change this policy we will update the date at the top. If a change materially affects how we use your data, we will tell you by email or by a notice in the Platform before it takes effect.

[[LEGAL NAME OF THE OPERATOR]] · [[POSTAL ADDRESS]] · alighalithebest@gmail.com