These Partner Terms apply to every school, masjid, academy and organization that runs its own programs on Nibras. They explain what each side is responsible for and, above all, how we look after the information you and your families keep on the platform.
Families and students who use your programs agree to our Terms & Conditions and Privacy Policy. Where you have signed a Partner Organization Agreement with us, that agreement takes precedence over these terms wherever the two differ.
1. Who you are agreeing with
Nibras is operated by Kunh Innovations Inc., a company based in Calgary, AB, Canada. In these terms, "Nibras", "we" and "us" mean Kunh Innovations Inc., and "you" means the organization that runs programs on Nibras, acting through the administrators it appoints.
2. What we provide
Nibras gives your organization a platform to run Quran and Arabic programs: enrollment, halaqas and schedules, attendance, homework and progress records, assessments, messages to families, reports, and, where you turn it on, online payment of your fees. We host it, keep it secure, back it up, and keep it up to date.
Your programs remain yours. You decide who teaches, what is taught, what you charge, and who may enroll. We do not run your classes, and we do not employ or supervise your staff.
3. Your administrators and staff
- You choose who administers your organization on Nibras and who is added as a teacher or staff member. Each person sees only the programs and students their role covers.
- You are responsible for removing access promptly when someone leaves your organization or no longer needs it.
- We strongly recommend that every administrator turns on two-step sign-in. Accounts must not be shared.
- You recruit, screen and supervise your own teachers, including any police information check or vulnerable sector search that the law or your own policy requires for people who work with children.
4. Fees and payments
Your organization is on one of two plans, named in the quote or invoice we issue to you, which also sets out the fees and how they are billed.
- License plan. Your organization pays us a licence fee and collects tuition from families itself, outside Nibras — for example in cash or by e-transfer. No payment gateway is connected and no online payment is processed for your programs. Nibras keeps only the payment status and amounts your administrators choose to record.
- Plus Payments plan. Families pay your tuition online. Payments are processed by Stripe and paid directly into your organization's own Stripe account; the money never passes through ours. Card and bank details are entered into Stripe's own secure form and never reach our servers. We keep only payment references, amounts, dates and status.
Under either plan, you set your own tuition and refund policy and tell your families what they are.
5. Your responsibilities
- Tell your families that your organization uses Nibras to manage its programs, in your own privacy notice or enrollment information.
- Collect only the information your programs need, and keep it accurate.
- Use Nibras only for your programs and within the law, and do not upload content you have no right to share.
- If a law prevents your organization from storing personal information outside your country or province, tell us before you add it, so we can confirm what applies.
- Follow safe practice for children in your programs, and tell us promptly about any safety concern that involves the platform.
6. Your data, and who controls it
Your organization controls the records of its programs: who is enrolled, their contact details and guardians, halaqa placement, attendance, homework, progress logs, assessments and tests, enrollment-form answers, any allergy or medical notes a family chooses to give, and messages within your programs. We handle these records only on your behalf, to provide the platform, and as your administrators direct through it.
We are responsible for a small set of information we need to run Nibras itself: each person's Nibras account and sign-in details (one person may belong to several organizations), the record that they accepted our terms, security and error logs, billing records, and support requests. Our Privacy Policy covers these.
7. What we will never do with your data
- Sell it, or share it with anyone for their own purposes.
- Use it for advertising or build marketing profiles from it.
- Show it to another organization. Each organization on Nibras is kept separate, and nothing about a student is published on the public website.
8. How we protect it
We keep administrative, technical and physical safeguards suited to information about children and families, including:
- Encryption in transit for every connection to the website and the mobile app.
- Passwords stored only in a protected form that no one, including us, can read, two-step sign-in required for our own staff, and offered to every one of your administrators.
- Access controls that limit each person to the programs and students their role covers.
- Network protections that filter malicious traffic and automated abuse, and administrative access to our systems limited to authorized personnel over secured connections.
- A permanent record of important changes and of every data export, so that what happened can always be traced.
- Support access only in a recorded, read-only mode, in which our staff cannot change anything, send messages or move money.
- Nightly backups, kept in Canada and protected like the live system.
- Regular security updates, automated tests of the access rules, and periodic security reviews.
On request, we provide a written summary of our security measures, and once a year we answer a reasonable security and privacy questionnaire from your organization. Write to [email protected].
9. Where your data is stored
Your organization's records, and their backups, are stored on servers in Canada. A small number of service providers help us run the platform — to send email and app notifications, process payments, run online classes, and monitor errors. Some of them are based in the United States and receive only the information their task needs.
Every provider that handles your organization's data is bound by a written agreement that protects it at least as well as these terms. We give you the current list on request, and we tell you in advance before we add a provider that will handle your organization's data.
10. If something goes wrong
If we become aware that your organization's data has been lost, accessed or disclosed without authorization, we notify you without undue delay, and in any case within 72 hours of becoming aware of it. We tell you what happened, what information and how many people are affected, whether children are involved, what we have done about it, and who to contact. We then help you meet any duty you have to notify a regulator or the families affected.
11. Requests from families
If a family asks us to see, correct or delete a record your organization controls, we pass the request to you and help you answer it. Many requests can be met directly on Nibras: your administrators can view and correct records, and families can download their own data and delete their own accounts. When an account is deleted, the class records stay with your program with the person's name removed.
12. When you leave Nibras
You may stop using Nibras at the end of your licence term. On request, we give you an export of your organization's records. We then delete them, or remove everything that identifies a person, within 90 days of the end of your licence; backup copies are overwritten within a further 14 days.
We keep only what the law requires — payment and invoice records for six years, consent records, and the change history — and only for that purpose. People who also belong to another organization keep their Nibras account, without your program's records.
13. Confidentiality
Each side keeps the other's non-public information — such as pricing, the terms agreed, security information and business plans — confidential, and uses it only for working together. Our staff who can see your organization's data are bound by confidentiality and see only what their work requires.
14. Liability
Where the law allows, our total responsibility for any claim relating to the platform is limited to the licence fees your organization paid us in the twelve months before the claim. Nothing here limits liability that cannot be limited by law.
15. Changes and governing law
We may update these terms. Each version carries the version marker shown at the top of this page, and we email your administrators before a change that materially affects your organization takes effect. These terms are governed by the laws of the Province of Alberta and the laws of Canada that apply there.
Contact
Privacy and data protection: our Privacy Officer at [email protected].
Everything else, including your licence and the platform: [email protected].