سياسة الخصوصية

This Privacy Policy explains how AMS Benha (the "School") collects, uses, stores, and shares information when you use the EduFlow web application and mobile app (together, the "Service"). The Service is a school management platform used by students, parents or guardians, teachers, administrators, human-resources staff, supervisors, and other employees of the School.

1. المعلومات التي نجمعها

نجمع الفئات التالية من المعلومات:

• Account information: full name, email address, role (student, parent, teacher, admin, HR, supervisor, employee), school ID, grade, section, and links between parents and their children.
• Academic records: assessment submissions, scores, gradebook entries, certificates, weekly plans, and report cards.
• Attendance records: daily attendance, gate scans, dismissal duty logs, vacation requests, and early-leave requests.
• Messaging: messages sent and received inside the Service.
• Device and push: a Firebase Cloud Messaging (FCM) push token issued by Google for your device, used only to deliver notifications. We also collect basic device information that Firebase provides, such as device model and OS version.
• Camera images: when you use a QR or answer-sheet scan feature, the camera processes images locally on the device to extract a code or marks. Camera images are not uploaded to our servers or to third parties.
• Logs: standard server logs, including IP address, timestamps, and which page or API endpoint was requested, for security and troubleshooting.

2. كيف نستخدم المعلومات

نستخدم المعلومات المذكورة أعلاه لـ:

• Run the Service: deliver lessons, assessments, grades, attendance, certificates, and messages to the right user.
• مصادقة المستخدمين وحماية الحسابات.
• Send push and in-app notifications about assessments, grades, attendance, vacation requests, dismissal duties, and messages.
• Generate reports for teachers, administrators, and parents about their own students and classes.
• التحقيق في إساءة الاستخدام والحفاظ على أمان الخدمة.
• Meet record-keeping obligations under the laws of the Arab Republic of Egypt.

We do not sell personal information. We do not use the data inside the Service for advertising.

3. مكان تخزين المعلومات

Application data is stored on servers operated for the School. Push tokens and push delivery are handled by Google Firebase Cloud Messaging, a service provided by Google. When a notification is delivered, the message title, short body text, and a target identifier pass through Firebase to reach your device. Camera images used for scanning are processed on the device and are not stored on our servers unless you explicitly submit a result (for example, a graded answer sheet).

4. خدمات الطرف الثالث

The only third-party service the Service shares data with is Google Firebase Cloud Messaging, used to deliver push notifications to the mobile app. Use of Firebase is governed by Google's privacy policy at policies.google.com/privacy.

5. الاحتفاظ بالبيانات

Academic records, attendance records, and HR records are retained for the lifetime of your relationship with the School (enrollment or employment), plus an additional five years, to support official transcripts, employment history, and audits. Push tokens are retained while a device is active and are removed automatically when the device unregisters or the token becomes invalid. Server logs are kept for a shorter window for troubleshooting and security.

6. بيانات الأطفال

The Service is designed for use by students of the School, including students under 18. We apply data-minimization principles: we collect only what we need to run the academic program. Parents and legal guardians receive their own accounts and can view their child's grades, attendance, and report cards. Requests to access, correct, or remove a child's data should be made by the parent or legal guardian directly to the School administration. Children should not share their account credentials with anyone, including classmates.

7. حقوقك

يمكنك أن تطلب من المدرسة أن:

• تقديم نسخة من البيانات الشخصية التي نحتفظ بها عنك.
• تصحيح المعلومات غير الدقيقة.
• Delete data that is no longer needed and that we are not required to keep by law or for academic record purposes.
• تقييد أو الاعتراض على معالجة معينة.

To exercise these rights, contact the School administration through the Service, or email privacy@eduflow.school. Requests are typically handled within 30 days.

8. الأمان

We use industry-standard practices to protect the Service, including encrypted connections, password hashing, role-based access control, audit logs of sensitive actions, and regular software updates. No system is fully secure, but we work to reduce risk and respond quickly to incidents.

9. إشعارات الدفع وخياراتك

You can disable push notifications at any time in your device settings. Disabling notifications does not affect your ability to sign in and use the web app or mobile app.

10. إذن الكاميرا

The mobile app asks for camera permission only to scan QR codes and answer sheets. Granting the permission is optional. If you decline, you can still use the rest of the app, but scan-based features will be unavailable.

11. التغييرات على هذه السياسة

We may update this Privacy Policy. When we do, we will change the "Last updated" date at the top of this page. Material changes will also be announced inside the Service.

12. اتصل بنا

Questions about this Policy or about your data can be sent to privacy@eduflow.school.

See also our الشروط والأحكام.