This policy explains what the “Mostafa Solaiman” student app (the “App”) and the website mostafa-solaiman.online collect, why, and the choices you have. They are operated for the students of Mr. Mostafa Solaiman’s classes (“we”, “us”). Purchases and course content are also covered by our Terms of Service.

What we collect

• Account details: name, email address and phone number, to create your account and sign you in. If you use “Continue with Google” or “Continue with Apple”, the provider tells us your verified email and name (and Google your profile picture link).
• Password: stored only as a one-way hash on our server.
• Profile: stage, grade, division, study mode (center / online / Zoom), Zoom group, school, gender and age, to place you in the right classes and centers.
• Parent / guardian phone number: so your teacher can contact your parent about attendance and progress.
• Student number: generated by us, to identify you in class and in attendance.
• Attendance records: class, date, center, present/absent, time recorded and who recorded it, plus an audit log of check-ins (method, Bluetooth signal strength, whether the code was valid) to prevent fake check-ins.
• Parent accounts: a parent signs in to the app with the phone number they gave when their child registered. We keep the parent's name and phone number, the link to their children, and the notifications we send them (for example when a child's attendance is recorded). A parent sees only their own children's attendance and course progress.
• Notifications we send you, and your push notification token and phone type (Android / iOS) so they can be delivered.

We do not collect your location, contacts, photos, microphone or camera data in the App, and the App contains no advertising or third-party analytics.

What stays on your phone

Your session, student ID and a secret key used to compute your changing QR code are kept in your phone’s secure storage so the App works offline. They are removed when you log out.

Bluetooth

If you tap Broadcast, your phone sends a short Bluetooth signal for 60 seconds containing your student number and a code that changes every 30 seconds, so your assistant’s phone can detect you in class. It is not used to track your location, and the App does not read other people’s data. Android may ask for the “Nearby devices” permission for this.

Who we share data with

• Your teacher and the assistants of your center see your name, student number, grade and attendance.
• Google (Firebase Cloud Messaging) delivers push notifications and receives your push token.
• Google and Apple verify your identity when you choose to sign in with them.
• Our hosting provider stores the data on our behalf.

We do not sell your data and we do not use it to track you across other apps or websites.

Children

Students can be minors. An account is created by the student with a parent’s phone number for contact. Parents can contact us to see, correct or ask us to disable their child’s account.

Security

Data is sent over HTTPS, passwords are stored hashed, and access is limited to your teacher and authorised assistants.

Deleting your account

You can delete your account inside the App (Settings → Delete account) or on the web at https://mostafa-solaiman.online/delete-account. Your account is disabled immediately: you can no longer sign in, your sign-in sessions end and push notifications stop. We keep your attendance and course records for the teacher’s records so the account can be restored if you ask. At any time you can email support@mostafa-solaiman.online to restore the account or to ask us to permanently erase your personal details; we respond within 30 days. We may keep limited information if the law requires it or to prevent fraud.

Changes and contact

We will post any change to this policy on this page. Questions: support@mostafa-solaiman.online · Support.