سياسة الخصوصية — Drone Academy

Data we collect

We collect only what is needed to operate your student account and provide the service, including:

• Student account data: name, phone number, guardian phone number, grade and track, and governorate.
• Login credentials: your password is stored hashed and cannot be read by us in plain text.
• Usage data: lectures watched, exam results, and question-bank progress, to track your learning progress.
• Payment reference data: for wallet top-ups we keep reference data such as the transfer reference number to verify the transaction only. We do NOT store card numbers.
• Device / technical data: browser type and approximate device information, for security and account protection.

How we use data

We use your data to operate and provide the educational service, track your progress across lectures and exams, provide support, and send service-related notifications. We use the guardian's phone number for academic follow-up communication. We never sell your data or use it for third-party marketing.

Cookies & local storage

We use cookies and browser local storage to keep your login session (session token) and your preferences such as theme (light/dark) and sidebar state, so the platform works correctly. We may also use analytics tools such as Meta Pixel and Google Tag Manager to understand how the platform is used, improve it, and measure campaign performance.

Notifications

We may send push notifications via your browser to alert you about new lectures and exams. These notifications are opt-in, enabled only with your consent, and you can turn them off at any time from your browser or the platform settings.

YouTube user data (teachers)

When a teacher connects their YouTube channel via Google sign-in, we receive, with their explicit consent, permission to upload videos to their channel (youtube.upload) and read basic channel info (youtube.readonly). We use this access exclusively to upload the teacher's own recorded lectures from our platform to their own channel, as Private videos. We do not read, modify, or delete any other content. Refresh tokens are stored encrypted. Access can be revoked at any time at myaccount.google.com/permissions or by contacting us.

Drone Academy's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Data sharing

We never sell your personal data. We share data only with the service providers needed to run the platform (such as hosting and messaging) within the limits required to deliver the service and under confidentiality obligations, or when required by law.

Data retention

We keep your data while your account is active and you continue to use the service. When you request deletion of your data or account, we delete it, subject to any data the law requires us to retain.

Your rights

You have the right to access, correct, and request deletion of your data. Students have dedicated account-deletion pages such as /delete-student-account. To exercise any of these rights, contact us via the site's contact details and we will help you.

Minors & guardians

The platform serves school students, so we collect guardian contact data (phone number) for the student's academic follow-up. Guardians may contact us at any time to inquire about their child's data or request its correction or deletion.

Security

Data is transmitted over HTTPS across the platform, passwords are stored hashed, access tokens are stored encrypted, and we apply access controls, to keep your account secure.

Changes to this policy

We may update this policy from time to time as the service evolves or legal requirements change. The "Last updated" date shown at the top of this page reflects the latest version of the policy.

Contact

For any question about this policy or your data, or to request its deletion, contact us via the contact details shown on the site and we will respond as soon as possible.