Privacy Policy

2. Information We Collect

The information we collect depends on how you use Araby Academy and which features you choose to enable.

Account and profile information

• Full name, email address, phone number, country, time zone, and preferred language.
• Account role, such as student, parent, teacher, or administrator.
• Login credentials, authentication identifiers, and profile details needed for the service.
• Parent or guardian relationship to a student.
• Teacher profile information, qualifications, availability, and teaching assignments.

Student and educational information

• Student name, age or age range, enrollment details, and course placement information.
• Class schedules, attendance, lesson progress, assignments, homework, submissions, and feedback.
• Teacher notes related to learning support, progress reports, certificates, and educational records.
• Communications between teachers, students, parents, guardians, and administrators.

We use student and educational information to deliver education, track progress, coordinate classes, and communicate with families.

Communications information

• Emails, support messages, WhatsApp communications, and class-related announcements.
• Transactional messages, notification history, parent-teacher messages, feedback, and complaints.

Payment and billing information

• Billing name, payment status, subscription or package details, invoices, and receipts.
• Limited payment metadata handled through secure payment and billing systems.

Payment card details, where applicable, are typically processed by secure third-party payment providers. Araby Academy does not intentionally store full payment card numbers unless explicitly stated at the point of collection and handled through a compliant payment system.

Technical and usage information

• IP address, device type, browser type, operating system, referring URLs, and approximate location.
• Pages visited, login timestamps, session activity, error logs, security logs, and cookie identifiers.

3. Google API Services and Google User Data

Araby Academy may use Google APIs to support login, scheduling, communication, classroom workflow, and educational productivity features. Users choose whether to connect Google services, and Google permissions are presented through Google's OAuth consent process.

Araby Academy's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Araby Academy also handles Google Workspace API data in line with the Google Workspace API User Data and Developer Policy, where applicable.

Categories of Google data we may access

• Google Sign-In data: account name, email address, profile picture if provided, and Google account unique identifier. This is used for secure login and account matching.
• Google Calendar data: calendar event titles, dates, times, meeting or class schedule details, calendar identifiers, and event creation or update information. This is used to schedule online classes, reduce conflicts, and send reminders.
• Gmail sending permissions: permission to send class-related, account-related, or educational emails from or on behalf of a connected Google account when the user authorizes that feature.
• Google Classroom data: course identifiers, course names, class rosters where permitted, assignment information, submission status, and educational workflow metadata. This is used to support classroom and learning workflows.
• Google Drive data: file names, file IDs, file metadata, user-selected files, files created or used by Araby Academy, and shared educational materials where permitted. This is used to attach, share, upload, select, store, or retrieve educational resources requested by the user.

Google data commitments

• We request only the minimum Google OAuth scopes needed for the feature the user chooses to use.
• Google user data is used only to provide or improve user-facing Araby Academy features.
• Araby Academy does not sell Google user data.
• We do not use Google user data for advertising, retargeting, unrelated marketing, or data brokerage.
• Araby Academy personnel do not read Gmail message content except when the user gives explicit permission for support, or when required for security, abuse investigation, legal obligations, or protection of users and the platform.
• Access to Google user data is limited to authorized systems and personnel with a legitimate need, and is protected through reasonable access controls and security safeguards.

4. How We Use Information

• Create and manage accounts for students, parents, teachers, and administrators.
• Enroll students in classes, match students with teachers, schedule lessons, and deliver online classes.
• Track attendance, lesson progress, homework, assignments, feedback, and educational reports.
• Send class reminders, schedule changes, account notices, support responses, and educational notifications.
• Support Google-connected features such as login, class calendar events, Gmail sending, Classroom workflows, and Drive materials.
• Monitor performance, fix bugs, improve user experience, and maintain service reliability.
• Verify account access, detect unauthorized activity, prevent misuse, and investigate security incidents.
• Comply with applicable law, maintain records, resolve disputes, and protect legal rights.

5. Google OAuth and Authentication

Araby Academy may offer Google OAuth login, commonly known as "Sign in with Google." This allows users to authenticate using their Google account instead of creating a separate password.

When you use Google OAuth, Google may share basic account information with us, such as your name, email address, profile image, and unique Google account ID. We use this information to authenticate you, create or connect your Araby Academy account, and maintain a secure login session.

Google OAuth may also be used to request additional permissions for optional integrations such as Calendar, Gmail sending, Classroom, or Drive. These permissions are requested through Google's consent screen, and the user can choose whether to grant them.

We do not receive your Google password. Google manages the authentication process, and Araby Academy receives authentication tokens or authorization results needed to confirm your identity or access the specific services you approved.

We store OAuth tokens securely and use them only for the authorized purpose. Access tokens and refresh tokens, where used, are protected using appropriate technical and organizational safeguards.

6. Data Sharing and Third Parties

Araby Academy does not sell personal information. We share information only where necessary to provide, secure, support, or improve our educational services, or where required by law.

Service providers

We may share limited information with trusted providers that help us operate the platform, including cloud hosting providers, secure database providers, email delivery providers, analytics and logging providers, payment processors, customer support tools, security and monitoring services, scheduling tools, and video conferencing tools.

Google

If you use Google Sign-In or Google integrations, information may be exchanged with Google according to your account settings, Google's OAuth consent process, and Google's own privacy terms.

Zoom

Araby Academy may use Zoom or similar video conferencing services to conduct online classes, teacher meetings, parent meetings, or administrative sessions. Zoom-related information may include participant name, email address, meeting attendance, meeting links, schedules, chat or class interaction data where enabled, and recordings only where clearly disclosed or consented to when required.

WhatsApp

Araby Academy may use WhatsApp for educational and administrative communication, including parent coordination, class reminders, schedule updates, and support. WhatsApp communications may include phone numbers, message content, delivery status, and parent, student, teacher, or support-related communication. Users should avoid sending highly sensitive information through WhatsApp unless necessary.

Educational relationships

Teachers may see student names, class schedules, attendance, assignments, progress, and relevant parent communication. Parents or guardians may see information about their child's enrollment, progress, schedule, attendance, and teacher feedback. Administrators may access account, class, and communication information needed to operate the service.

Legal and safety disclosures

We may disclose information when reasonably necessary to comply with law, protect the safety of users, investigate fraud or abuse, enforce terms, or protect Araby Academy's rights, property, and operations.

7. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law.

• Account information is generally retained while the account remains active.
• Educational records may be retained to support learning history, parent access, academic reporting, and administrative records.
• Communications may be retained for customer service, safeguarding, dispute resolution, and educational continuity.
• Technical logs are generally retained for a limited period for security, debugging, and reliability.
• Billing records may be retained as required for accounting, tax, fraud prevention, or legal compliance.
• Google OAuth tokens are retained only while the integration remains active or as needed to provide the connected feature.

When information is no longer needed, we delete it, anonymize it, or restrict access according to our retention practices.

8. Security Measures

We use reasonable technical, organizational, and administrative measures to protect personal information against unauthorized access, loss, misuse, alteration, or disclosure.

• HTTPS encryption for data transmission and secure cloud infrastructure.
• Access controls based on user role and business need.
• Authentication and session controls.
• Encryption or secure storage practices for sensitive credentials and OAuth tokens.
• Monitoring and logging for security events.
• Regular review of access permissions.
• Administrative safeguards for staff and teacher access.
• Secure database practices and backup procedures where appropriate.

No online platform can guarantee absolute security. Users should protect their account credentials, use secure devices, avoid sharing login access, and notify us promptly if they suspect unauthorized activity.

9. Children's Privacy

Araby Academy provides educational services that may be used by children, students, and families. We recognize the importance of protecting children's privacy and handling student information responsibly.

Students may use Araby Academy through accounts created or approved by a parent, guardian, school, teacher, or administrator, depending on the service arrangement.

We collect student information only as needed to provide educational services, such as enrollment, scheduling, instruction, progress tracking, communication, and support.

Parents or guardians may contact us to request access to, correction of, or deletion of their child's personal information, subject to identity verification, educational record requirements, legal obligations, and legitimate operational needs.

We do not knowingly use student personal information for behavioral advertising. We do not sell student personal information.

10. International Users

Araby Academy may serve users in multiple countries. If you access our services from outside the country where our servers, service providers, or business operations are located, your information may be transferred to, stored in, or processed in other jurisdictions.

Privacy laws may differ from one country to another. Where required, we take reasonable steps to ensure that international transfers of personal information are handled with appropriate safeguards.

11. Cookies and Tracking Technologies

Araby Academy may use cookies, session storage, local storage, pixels, and similar technologies to operate and improve the platform.

• Essential cookies: required for login, security, account access, and platform functionality.
• Preference cookies: used to remember settings such as language or time zone.
• Analytics cookies: used to understand platform usage and improve performance.
• Communication or integration cookies: used where third-party tools are embedded or connected.

Users can control cookies through their browser settings. Disabling certain cookies may affect login, class access, or platform functionality.

12. User Rights and Data Requests

Depending on where you live, you may have rights regarding your personal information. These rights may include requesting access, correction, deletion, restriction, portability, withdrawal of consent, or revocation of third-party integrations.

To make a privacy request, contact us at [privacy@arabyacademy.com] or [support@arabyacademy.com]. We may need to verify your identity before fulfilling a request. For student information, we may also need to verify the requester's authority as a parent, guardian, school representative, or authorized account holder.

Some information may not be deleted immediately if we need to retain it for legal, security, billing, dispute resolution, educational record, or legitimate operational reasons.

13. Account Deletion and Revoking Google Access

Users may request deletion of their Araby Academy account by contacting [support@arabyacademy.com] or [privacy@arabyacademy.com]. Please include enough information for us to identify the account, such as the account email address and user role.

After receiving a valid deletion request, we will take reasonable steps to delete or anonymize personal information associated with the account, subject to legal, educational, security, billing, and operational retention requirements.

Revoking Google access

If you connected your Google account to Araby Academy, you can revoke Araby Academy's access at any time through your Google Account permissions page: https://myaccount.google.com/permissions

• Araby Academy will no longer be able to access the revoked Google services.
• Connected features may stop working, such as Calendar scheduling, Gmail sending, Classroom syncing, or Drive file access.
• We may retain limited records of previous activity where required for educational, security, support, legal, or operational purposes.
• Revoking Google access does not automatically delete your Araby Academy account.

You can also use our public data deletion instructions for account and data deletion requests.

14. Google API Limited Use Disclosure

Araby Academy's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

• We use Google user data only to provide or improve user-facing features that users have requested or authorized.
• We do not sell Google user data.
• We do not use Google user data for advertising.
• We do not use Google user data to build unrelated user profiles.
• We do not transfer Google user data except as necessary to provide the service, comply with law, protect security, or as otherwise permitted by Google's policies.
• We request only the minimum Google OAuth scopes needed for the relevant feature.
• We limit access to Google user data to authorized systems and personnel with a legitimate need.
• We protect Google user data using reasonable security safeguards.
• We do not allow humans to read Gmail content except where necessary for support, security, abuse investigation, legal compliance, or when the user has explicitly authorized such access.

Gmail API scope usage

If Araby Academy requests Gmail permissions, such as gmail.send or other Gmail scopes, the purpose is limited to educational and account-related communication features.

• Send class confirmations, lesson reminders, educational notifications, and account notices.
• Send teacher, parent, or student communications initiated through Araby Academy.
• Send support or administrative messages related to the user's Araby Academy account or classes.

Araby Academy does not use Gmail permissions to send spam, unrelated promotional messages, or third-party advertising. If a Gmail scope allows access beyond sending, we will use that access only for the specific user-facing purpose disclosed during authorization.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our services, integrations, legal requirements, security practices, or business operations.

When we update the policy, we will revise the "Last Updated" date at the top of this page. If changes are material, we may provide additional notice, such as through email, platform notification, or another appropriate method.

16. Contact Information

If you have questions, requests, or concerns about this Privacy Policy or how Araby Academy handles personal information, please contact us:

For privacy or data protection requests, please include your name, account email address, user role, and a clear description of your request. For student-related requests, please also describe your relationship to the student so we can verify authorization.