Privacy Policy

Last updated: April 15, 2026

Nibras ("we", "us", "our") operates the Nibras website at nibras.cc and the Nibras mobile application (collectively, the "Service"). This Privacy Policy explains what information we collect, how we use it, with whom we share it, and the rights you have over your information.

1. Who this policy covers

This policy applies to:

  • Adult students who register for our programs
  • Parents and legal guardians who register their children
  • Children under 18 enrolled in our programs (their data is provided and managed by their parent or guardian)
  • Teachers, administrators, and program staff who use the platform
  • Visitors to our website

2. Information we collect

2.1 Account information

  • First and last name
  • Email address
  • Phone number (optional for some account types)
  • Address (optional)
  • Date of birth
  • Gender (optional)
  • Role on the platform (parent, student, teacher, administrator)
  • Username and a securely hashed password

2.2 Educational data

  • Halaqa (class) enrollment
  • Attendance records
  • Daily homework and progress logs
  • Teacher assessments and grades
  • Parent acknowledgments of homework
  • Quran memorization and recitation progress
  • Reading lesson progress
  • Notes between teachers, parents, and students

2.3 Communication data

  • Messages sent through the in-app messaging system
  • Email correspondence with our team
  • Contact form submissions on our website

2.4 Device and technical information (mobile app)

  • A push notification token used to deliver notifications to your device. The token is registered with Firebase Cloud Messaging (FCM) and Apple Push Notification service (APNs) and stored on our servers so we can deliver push notifications.
  • Device platform (Android or iOS) and app version, used to detect when an update is needed.

The mobile app does not use the Android Advertising ID and does not collect IDFA on iOS. We do not include third-party advertising or tracking SDKs in the app.

2.5 Website log data

Our web server logs basic technical information for security and debugging — IP address, browser type, pages requested, and timestamps. These logs are kept for a limited time and are not linked to your account beyond what is necessary for security investigations.

3. How we use your information

  • To create and maintain your account
  • To deliver our educational programs (homework logs, assessments, attendance, progress reports)
  • To enable communication between teachers, parents, students, and administrators
  • To send you transactional notifications (homework reminders, class updates, password resets)
  • To send push notifications when relevant activity occurs in your account (you can disable these at the OS level)
  • To verify your identity and protect against unauthorized access
  • To comply with our legal obligations
  • To improve our Service through aggregated, non-identifying analytics

We do not use your information for advertising, profiling for marketing purposes, or to train AI models. We do not sell your information.

4. Children's privacy

Nibras serves children as part of our educational mission. A parent or legal guardian must create the child's account and manage it on the child's behalf. Children's accounts can be accessed only through their parent's account or by authorized teachers and program administrators within their assigned program.

We collect only the information necessary to provide the educational service: name, date of birth (to determine age and program placement), gender (optional), the child's enrolment information, and the child's homework and progress data created by their teachers.

Parents may review, correct, or request deletion of their child's information at any time by contacting us at the email below. Children's data is not shared with third parties for commercial purposes.

5. How we share information

We share information only when one of the following applies:

  • Within your program. Teachers, program administrators, and parents see the data of the students they are responsible for. A teacher sees their halaqa's students; a parent sees their own children; a program administrator sees their program's enrolment.
  • Service providers we rely on:
    • Firebase Cloud Messaging (Google) and Apple Push Notification service (Apple) — to deliver push notifications. Only the push token and the notification payload are shared.
    • Resend — to send transactional and password-reset emails.
    • Our hosting provider — to operate the servers that store your data.
    These providers process data on our behalf under their own privacy policies and may not use it for their own purposes.
  • Legal compliance. If we are required by law, court order, or to protect the safety of users, we may disclose the minimum necessary information.

We do not sell, rent, or trade your personal information.

6. Where your data is stored

Your account and educational data are stored on servers operated by our hosting provider. Push notification infrastructure (FCM and APNs) is operated globally by Google and Apple respectively. Email delivery infrastructure is operated by Resend.

7. How long we keep your data

We retain account and educational data for as long as your account is active and for a reasonable period after deactivation to allow you to reactivate. If you request deletion, we delete your personal data within 30 days unless we are required to retain certain records for legal or financial reasons.

8. Your rights

You have the right to:

  • Access the personal information we hold about you (or your child)
  • Request correction of inaccurate information
  • Request deletion of your account and associated data
  • Withdraw consent for non-essential processing (you can disable push notifications in your device settings; you can opt out of optional communications)
  • Lodge a complaint with your local data protection authority

To exercise any of these rights, contact us at the email below. We will respond within a reasonable time, typically within 30 days.

Account and data deletion request

To request deletion of your Nibras account and associated personal data, send an email to [email protected] from the email address on your account, with the subject line "Account deletion request". Parents may request deletion of a child's account on the child's behalf.

9. Security

We protect your information using HTTPS in transit, password hashing at rest, role-based access controls (so users see only the data they need), and regular security updates to our software and infrastructure. No system is perfectly secure, but we work to limit the impact of any incident and will notify affected users if a breach occurs that meets the threshold for notification under applicable law.

10. Permissions the mobile app requests

  • Notifications — to deliver homework, message, and class notifications. You may decline this permission and still use the app; you simply will not receive push notifications.
  • Internet access — to communicate with Nibras servers.

The app does not access your contacts, photos, microphone, camera, location, or other personal device data.

11. Changes to this policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date at the top of this page and, if appropriate, notify you by email or through the Service.

12. Contact us

If you have any questions about this Privacy Policy or our handling of your information, please contact us at:

Nibras
Email: [email protected]
Website: https://nibras.cc