Privacy policy

Last updated :

This policy explains what data Madrasati collects, why, and how it is protected. It covers the Madrasati website and mobile app, and is intended for client schools and their users.

Data we collect

Madrasati processes the data needed to run a school: user identity, classes, attendance, grades, homework, payments and messages.

This data is provided by the school and remains its property. Madrasati acts as a data processor within the meaning of Law 09-08.

Purpose of processing

Data is used only to deliver the service: tracking schooling, communication between roles, and administrative and financial management of the school.

No student data is ever sold, rented or shared for advertising purposes.

Security

Data travels over HTTPS and is protected by strict role-based access control.

Each user can only reach the scope that concerns them: a teacher sees their classes, a parent sees their children.

Your rights

Under Law 09-08, every person has a right of access, correction and objection regarding their data.

These requests are made through the school, or directly to Madrasati at contact@madrasati.cloud.

Retention and deletion

Data is kept for as long as the school's account is active, then deleted or anonymized at the end of the contractual relationship.

Any user may request deletion of their account and data by writing to contact@madrasati.cloud; the request is handled as soon as possible.