Last updated: August 2, 2026

MS Academy provides educational services through our mobile application for students and parents/guardians. This policy explains what data we collect, why we collect it, and how we protect it.

1. Data We Collect

• Account identifiers: student serial number, Firebase Auth user ID, and related session credentials.
• Profile & academic data: name, group/class, and attendance records shown in the app.
• Parent contact for verification: parent phone number used for OTP verification and Telegram binding (processed on our backend; stored/hashed as needed for authentication).
• Telegram binding: chat identifiers needed to deliver OTP / credential messages via our official Telegram bot (not for advertising).
• Push notifications: device FCM tokens to send service notifications (attendance and important academy messages).
• Diagnostics & security: crash reports and app diagnostics (Firebase Crashlytics), App Check / device integrity signals, and anti-tamper security signals (freeRASP) to protect accounts.
• Local device storage: secure session data cached on the device to keep you signed in.

We do not require an advertising ID for core product features, and we do not use the app for third-party advertising.

2. How We Use Data

• Authenticate students and parents and maintain secure sessions.
• Provide core features: home overview, attendance history, profile, and related educational information.
• Send service notifications and OTP / credential messages when needed.
• Improve reliability, security, and prevent abuse or unauthorized access.
• Comply with applicable legal obligations.

3. Data Storage & Security

• Cloud processing via Google Firebase (Authentication, Firestore, Cloud Functions, Cloud Messaging, Crashlytics, App Check).
• Telegram is used only as a delivery channel for bot-based verification.
• Data in transit is protected with HTTPS / TLS.
• Access is limited to academy operations and least-privilege server roles.

4. Data Sharing

• We do not sell personal data.
• Data is shared only with service providers needed to operate the app (notably Google Firebase and Telegram for bot delivery), under their respective terms.
• We may disclose data when required by law or to protect users and the academy.

5. Children's Privacy

The app is an education product and may be used by minors under parent/guardian oversight. Parent contact details may be collected so guardians can verify identity and follow student progress. We encourage parents to supervise their children’s use of the app.

6. Data Retention

• Account and academic records are retained while the student/parent account is active and as needed for academy operations or legal requirements.
• Sessions, FCM tokens, and diagnostic logs are kept only as long as needed for security and reliability.
• When you use in-app account deletion (Delete account), we delete the account and remove app access for that user.

7. Your Rights

• Request access, correction, or deletion of your personal data.
• Opt out of push notifications in your device settings.
• Contact us at morsi5038@gmail.com.

8. International Transfers

Data may be processed on servers outside your country (including Firebase infrastructure) with appropriate safeguards provided by those services.

9. Changes

We may update this policy from time to time. The “Last updated” date at the top will change when we do.

10. Contact

MS Academy — Privacy requests: morsi5038@gmail.com