Effective date: September 18, 2026

This policy applies to the Madaris Teachers mobile application (Arabic title: مدارس للمعلم; the "App"), identified on Android by package ID com.azsoft.madaarissadmin. The App is published on Google Play by Fruits Software and developed and operated by AZ Software ("we", "us", or "our"). It is provided to participating schools and their authorized teachers, administrators, and pickup personnel. This policy explains how information is processed when authorized school personnel use the App.

1. Authorized school use

The participating school controls its school, staff, family, and student records and determines which personnel may use the App and which permissions each profile receives. AZ Software operates the App and its technical services on the school's behalf. The App is not intended for public or student access. Where messaging is enabled by the school and supported by the installed version, authorized personnel can select a grade or class and one or more students, or all students in that group, to send a photo or link to their linked parent accounts.

2. Information we process

• Account and authentication data: school username, protected password credentials, account and profile identifiers, session tokens, preferred language, and login/session timestamps.
• School and role data: school identity, authorized administrator or teacher profile, assigned roles, permissions, grades, gates, and operational scope.
• Student pickup data: student and family names and identifiers, grade and gate, pickup-call status, number of calls, timestamps, and the authorized user's status updates.
• School-message content: photos you choose to capture and send, optional captions, and links you type or paste. Photos may show students, schoolwork, or school activities.
• Message delivery data: the sending school and profile, selected grades and students, linked recipient parent-account identifiers, send and delivery status, timestamps, and records used to prevent duplicate sends and confirm photo receipt.
• Technical and security data: application version, device or platform information used by the operating system, request timestamps, security and audit events, and limited diagnostic information such as error or correlation identifiers.

3. How we use information

• Authenticate authorized school personnel and maintain secure sessions.
• Apply the school's role and grade permissions.
• Display active student pickup calls for the authorized user's school and scope.
• Record when authorized personnel call or release a student.
• Compress and upload photos you choose to send, deliver photos and links to the selected students' linked parent accounts, notify recipients, and manage delivery confirmations, retries, expiry, and file cleanup.
• Maintain operational history, accountability, security, and support records.
• Prevent misuse, troubleshoot errors, and maintain service reliability.
• Comply with applicable legal obligations and valid requests from authorized schools or authorities.

4. Sharing and service providers

Information is available to the relevant school and its authorized personnel, linked parent accounts as required for pickup and school communication, authorized AZ Software personnel who require access for support or operations, and contracted infrastructure providers that process data to operate the service.

School-message photos and links are shared with the linked parent accounts selected through the student audience. For each photo message, delivery is handled once per parent account, even if that account is linked to more than one selected student. Different parent accounts linked to the same student receive separate deliveries. Access to school records and photo downloads is checked against the signed-in account and its authorized school or family relationships.

The service uses Firebase Cloud Messaging and the relevant Apple or Google notification services to notify parent devices. Notification text and routing information may be processed by those providers. Photos are stored for delivery by the Madaris service and downloaded through authenticated requests; they are not published as public school-logo files. Platform providers process data under their own privacy policies.

We may disclose information when required by law, to protect students, users, or the service, or as part of a business transfer subject to appropriate confidentiality and legal safeguards.

5. Advertising, tracking, and device permissions

The App uses internet access to connect to the Madaris service. When you choose the photo-message feature, it may request the following permissions, depending on your device and operating-system version:

• Camera: to take the photo you choose to send to parents. Camera capture starts through your action in the App.
• Photo-library or storage access: where required by the operating system or camera component, to handle the captured photo and prepare a compressed copy for sending. The App does not scan your photo library or upload unrelated photos or files, and it does not automatically add the message photo to your gallery.

You can decline or revoke these permissions in device settings. Photo capture may then be unavailable; pickup operations and link messages do not require camera access. The App does not use the microphone, contacts, or precise location for these functions.

The App contains no third-party advertising and does not track users across apps or websites owned by other companies. We do not sell or rent personal information.

6. Retention, correction, and deletion

On the teacher's device: the App creates a temporary capture and a compressed photo for the message. It removes its temporary full-size capture after the compression attempt. The compressed photo and draft or retry information may remain until the send is confirmed as published or the draft is discarded. Once publication is confirmed, the App removes its local message-photo files. This cleanup concerns files created by the App, not unrelated personal photos.

On the server: the service prepares a separate delivery copy for each recipient parent account. The uploaded source is removed after delivery copies have been prepared and the message has been published. After a parent app confirms that it has successfully downloaded and saved its photo, the service marks that account's delivery as received and attempts to delete that account's server copy. Reading the notification alone does not confirm photo receipt. Interrupted transfers or confirmations can be retried; file deletions that fail temporarily are retried by cleanup processing.

Undownloaded delivery copies expire after the school's configured photo-retention period, which defaults to 30 days from publication, and are then removed by cleanup processing. Deletion from active delivery storage does not erase a parent's downloaded copy, screenshots, or any separately held backups. Message text, links, recipient records, and delivery or security logs may remain under the school's record-retention requirements.

School, staff, student, authentication, audit, and pickup records are retained according to the participating school's operational, safeguarding, contractual, and legal requirements. Some security and audit information may be retained after access is deactivated where required for accountability or law.

Contact your school to correct records, deactivate access, or request access, restriction, or deletion of your account and associated data. You may also contact AZ Software at the address below. We may need to coordinate the request with the school and verify your identity and authority. Deactivating access is not the same as deleting retained school records.

7. Security

We use reasonable administrative and technical safeguards, including encrypted network connections, protected password storage, access controls, permission-scoped school profiles, protected authentication tokens, and server-side security monitoring. Users must keep their credentials confidential. No system can guarantee absolute security.

8. Student and children's privacy

The App is designed for authorized adult school personnel. It displays only the student information needed for permitted school and pickup operations. Schools are responsible for granting appropriate staff access and for satisfying applicable notice, consent, education, and child-protection requirements. Before sending photos, authorized personnel must follow the school's permissions for photographing students and sharing their images with the chosen recipients, including when a class photo includes several children.

9. International processing

Infrastructure providers may process information in countries other than your own. Where required, we and participating schools use appropriate contractual and legal safeguards for such processing.

10. Changes to this policy

We may update this policy to reflect changes to the App, legal requirements, or service providers. The revised policy becomes effective when posted with a new effective date.

11. Contact us

For questions about your school account or student records, contact your school. For technical privacy questions about the App, contact AZ Software at tariq@azayed.me.