Privacy Policy
What we collect, why we collect it, who it is shared with, and how long we keep it.
1. Who is responsible for your data
For an academy’s own records — its students, their results, its messages — the academy is the data controller and Darsify is its processor. We act on the academy’s instructions.
For account details, billing and how the platform itself is used, Darsify is the controller. Our address is Third Settlement, New Cairo, Cairo, Egypt.
2. What we collect
From academies
- Name, email, phone, workspace name, and login credentials (passwords are hashed).
- Billing details and payment history.
From students and parents
- Name, phone, parent phone, email, school, year group and exam programme.
- Quiz attempts, answers, scores, time taken and progress.
- Attendance, messages sent through the platform, and store orders.
Automatically
- IP address, browser and device type, and pages visited.
- Device identifiers used to keep sessions signed in and to detect account sharing.
3. Why we use it
| Purpose | Basis |
|---|---|
| Running the platform and delivering lessons, quizzes and results | Performance of the contract |
| Sending results and homework reminders to students and parents | Instruction of the academy |
| Billing and keeping financial records | Legal obligation |
| Keeping accounts secure and preventing abuse | Legitimate interest |
| Fixing faults and improving the product | Legitimate interest |
4. What we never do
- We do not sell personal data, to anyone, ever.
- We do not use student work to train AI models.
- We do not show third-party advertising.
- One academy can never see another academy’s students or data.
5. Who we share it with
Only the service providers needed to run the platform, each handling only what their job requires: hosting and databases, file and video storage, email and WhatsApp delivery, payment processing, and AI text generation for reading exercises and explanations. Payment providers receive what they need to take a payment; we never receive full card numbers.
We also disclose data where the law requires it.
6. Where it is stored
On servers in the European Union and other regions our infrastructure providers operate. Where data leaves your country we rely on the safeguards those providers have in place.
7. How long we keep it
- Workspace data: for as long as the academy is active, then 30 days after closure.
- Student records: as long as the student is enrolled, then per the academy’s instruction.
- Financial records: as long as tax law requires.
- Security and audit logs: up to 12 months.
8. Your rights
You may ask for a copy of your data, ask us to correct or delete it, object to certain processing, or ask for it in a portable format. Students and parents should ask their academy first, since the academy controls those records. If you cannot reach them, write to darsifyedu@gmail.com and we will help.
9. Children
The platform is used by school-age students. Accounts are created by an academy or with a parent’s involvement, and academies are responsible for holding the necessary consent. If you believe a child’s data is held without it, contact us and we will remove it.
10. Security
Passwords are hashed, provider credentials are encrypted at rest, traffic is served over HTTPS, and each workspace’s data is isolated. Accounts with elevated access can require a second factor at sign-in. No system is perfectly secure, and we will tell affected users about a breach that puts their data at risk.
11. Cookies
We use cookies to keep you signed in, remember your theme, and keep the site secure. These are necessary for the service to work; we do not use advertising or cross-site tracking cookies.
12. Changes and contact
We will give notice of material changes before they take effect. Questions or requests: darsifyedu@gmail.com.