Privacy Policy / سياسة الخصوصية

Privacy Policy (English)

Effective date: October 2026

This platform is operated for the students and teaching staff of ثانوية المتفوقين الثانية (Al-Mutafawqeen Secondary School), Basra, Iraq.

1. Information We Hold

Accounts for teachers and administrators are created and managed exclusively by school administration. Students can create their own account by signing in with Google; no password is chosen or stored by us. For each account we hold: display name, email address, profile photo (if any), role, and, for students, grade and class section. Staff data is entered by authorised school staff. For students, the name, email and photo come from the Google account, and the grade and class section are chosen once by the student when they first sign in; afterwards they can only be changed by school administration. When an account is created we also record the date and version of the terms and privacy policy accepted.

When you use the chat, the messages you send, files you share, and poll responses you submit are stored in our database. If you report a message, a copy of that message (including a private message) is stored and can be read by school administrators reviewing the report.

2. How We Use Your Information

Your information is used solely to operate and provide the school communication platform - to identify you to other members of your school, display your name in chat, and ensure the correct channels and permissions are assigned to your account.

3. Who Can See Your Information

Your name and profile photo are visible to other teachers and students on this platform. Your messages are visible to members of the channels you belong to, or to the other participant in a private conversation. School administrators do not browse private conversations: they can read a message only if it is reported. The developer who maintains the platform has technical access to the database for maintenance and security.

4. Third-Party Services

We use Supabase for all authentication, data storage, file storage, and the chat system. We use Google Sign-In so students can log in without a password; Google shares your name, verified email address and profile photo with us, and processes the sign-in under its own privacy policy. We use UploadThing to store files uploaded for homework, announcements and the photo gallery. We use Sentry to receive technical crash and error reports so we can fix bugs; these reports may include basic device and browser details and the page where the error occurred, plus your account type (student, teacher or admin) and an anonymous account identifier, never your name or email. We use LiveKit to power live broadcast and lecture sessions; during these sessions, audio and video data is transmitted through LiveKit's real-time infrastructure. We use OneSignal to deliver push notifications to the mobile application; to do this, OneSignal stores a device identifier associated with your account. All of these services process data under their own privacy policies. We do not sell or share your data with any third party for commercial purposes.

Students may change their display name once every 30 days; we keep a log of each change (old name, new name, date) so administrators can review name reports. Accounts that sign in with a password can turn on two-step verification, which stores an authenticator factor with our authentication provider.

If you choose to turn on browser notifications (in the chat or from the prompt on the home and homework pages), we store a push subscription for that browser (an address issued by your browser's push service, such as Google, Mozilla or Apple, plus encryption keys) linked to your account. When a message arrives that you have not read, we send a notification containing the channel or sender name and the start of the message text. We also send a notification when new homework is posted for your class or a school announcement is published. The notification content is encrypted so the push service cannot read it. You can turn notifications off at any time from the same button, which deletes the subscription; subscriptions that stop working are also deleted automatically.

To understand how the website is used, we run a self-hosted instance of Umami analytics on our own server (not a third-party service). It is cookieless and does not track you across other sites. It records anonymous page views and basic device information such as browser, screen size, and approximate country. It does not store your IP address or any account details, and it is not linked to your account or identity. The measurement script is loaded from zinc.ayopili.com, a domain operated by the website's developer.

Messages sent through the contact form (your name, email address and message) are stored in our database and read by school administrators. If an administrator replies, the reply is sent to your email address through Resend, our email delivery provider, and a copy of the reply is kept with your message. Administrators can delete a message and its replies at any time.

5. Minors

This platform serves students from grades 7 through 12, some of whom may be under 13 years of age. Students create their own account with Google and choose their grade and class section once; teachers and school administration manage the platform, can see student accounts and chat activity relevant to their duties, and can disable accounts. Students may only exchange private messages with teachers and administrators, never with other students, and file uploads by students are size-limited. We do not show online status or last-seen times, and we do not use student data for advertising. Parents or guardians who have concerns may contact us at the address below.

6. Data Retention & Deletion

Your data is retained while your account is active. Account management (including disabling accounts) is handled by school administration. To request deletion of your data, contact us at contact@almutafawqeen2.com and we will process your request through the school administration.

7. Contact

For any privacy-related questions or requests, please contact us at: contact@almutafawqeen2.com