M
مدرستنا | m-iq.app ← Back to Home
GDPR & App Store Compliant

Privacy Policy

Transparency regarding how we collect, process, protect, and handle personal data for students, teachers, parents, and administrators using Madrasatuna.

Effective Date: September 19, 2026
•
Last Updated: September 19, 2026
•
App Identifier: m-iq.app

1. Introduction & Scope

Welcome to Madrasatuna (مدرستنا), accessible via https://m-iq.app and associated mobile applications available on Google Play and the Apple App Store. This Privacy Policy explains our practices concerning the collection, usage, processing, and protection of Personal Data when you interact with our educational management platform.

Madrasatuna operates as a Data Processor when handling institutional educational data on behalf of schools (Data Controllers), and as a Data Controller when managing direct account authentication and technical diagnostics. We are committed to adhering to the European Union General Data Protection Regulation (GDPR - Regulation EU 2016/679) and app distribution privacy requirements.

2. Data Controller & DPO Details

If you have questions about this policy, wish to exercise your GDPR rights, or have privacy concerns, you can contact our designated Data Protection contact:

Platform: Madrasatuna (مدرستنا)
Official Website: m-iq.app
Privacy & DPO Email: privacy@m-iq.app
Support Enquiries: support@m-iq.app

3. Information We Collect

We collect personal data to provide school administration services, connect parents and teachers, and maintain platform security.

A. Information Provided Directly by You or Your School

  • Account & Profile Details: Full name, phone number, email address, role (Administrator, Teacher, Parent, Student).
  • Academic & Administrative Data: Student IDs, class assignments, attendance records, exam grades, homework submissions, and official school announcements.
  • Communication Data: In-app messages exchanged between teachers, school admins, and parents.

B. Information Collected Automatically

  • Device & Identifiers: Device model, operating system, unique push notification tokens (e.g., OneSignal tokens).
  • Technical Diagnostics: IP address, application performance logs, crash reports, and session metadata.

4. Legal Bases for Data Processing (GDPR)

Under GDPR Article 6, we process personal data under the following legal frameworks:

Performance of a Contract To deliver school management tools, display grades, register attendance, and send necessary school notices to registered users.
Legitimate Interests To maintain security, prevent fraudulent logins, resolve app bugs, and optimize platform performance.
Legal Compliance To comply with mandatory statutory, educational, and legal obligations required by governing authorities.
Explicit Consent For push notifications or optional features where explicit user or parental consent is requested.

5. Protection of Children's Data

Given the educational nature of Madrasatuna, student data processing is conducted strictly under the direction and authorization of the affiliated school institution acting as the Data Controller, or with verifiable consent from parents/guardians.

  • We do not serve behavioral advertisements or monetize student data in any form.
  • Student accounts are created exclusively through official school enrolment processes or administrative invitations.
  • Parents can review or request deletion of their child's account data by contacting their school administration or our support team.

6. Third-Party Sub-Processors

To maintain secure backend infrastructure, database synchronization, and real-time push notifications, we partner with reliable infrastructure providers. All sub-processors adhere to GDPR privacy standards:

Provider Purpose Privacy Information
Supabase Database hosting, authentication, and backend infrastructure Supabase Privacy Policy
OneSignal Push notification delivery for school alerts & messages OneSignal Privacy Policy

7. Your Rights Under GDPR

If you reside in the European Economic Area (EEA), you possess the following statutory rights regarding your personal data:

Right to Access: Request copies of your personal data held by us.
Right to Rectification: Request correction of inaccurate information.
Right to Erasure ("Right to be Forgotten"): Request data deletion.
Right to Data Portability: Obtain a structured, machine-readable export of your data.
Right to Restrict Processing: Limit how we process your personal records.
Right to Object: Object to specific processing activities based on legitimate interests.

To exercise any of these rights, please contact us at privacy@m-iq.app. We will respond within 30 days.

8. Account Deletion & Data Retention

In compliance with Google Play and Apple App Store Developer Guidelines, users have the right to delete their accounts and associated personal data at any time.

How to Request Account & Data Deletion:

You can request deletion directly within the Madrasatuna app via Settings > Account > Delete Account, or by submitting an email request to privacy@m-iq.app with your registered account details.

Upon verification, personal identification data will be permanently purged within 30 days, unless longer retention is required by law or institutional schooling regulations.

9. Data Security

We employ robust technical and organizational measures to secure your information, including end-to-end TLS encryption for data in transit, encrypted storage databases, row-level security policies, and strict access controls. However, no internet-based transmission system can guarantee 100% absolute security.

10. Policy Updates

We may update this Privacy Policy periodically to reflect app updates or regulatory changes. Material changes will be communicated via in-app notifications or updated on this page with a revised effective date.