Privacy Policy — “Jozour Home” app

1. Who the app is for

Families of Jozour Academy students, adult students (18+), and our teachers and staff. Accounts are only created by invitation from the academy after enrolment. The parent or guardian owns the family account and children use it with them; there are no separate children’s accounts.

2. Data we collect

• Account and contact: username, password (stored only as a secure hash), family name, country, app language, parent email if provided, office notes, and holiday periods.
• Students: the child’s name in Arabic and Latin script, boy/girl, level, subject and learning goals, internal “Jozour Passport” number and stamps, whether you allow photos to be published, and whether the student is an adult (18+).
• Learning records: class schedule, attendance and hours, lesson reports and monthly reports, a monthly progress indicator, your optional monthly feedback (😊 😐 🙁), and supervisor visit notes.
• Homework: photos, voice recordings, videos and PDF files you upload, and the teacher’s feedback.
• Messages and requests: messages with the teacher or the office, and requests to the office (absence, rescheduling, renewal, deletion…). Phone numbers, emails or links typed into a chat are hidden automatically before delivery; the original text is kept for academy management only, for child safety.
• Online lessons (Zoom): participants’ display names, join/leave times and minutes, the lesson summary generated by Zoom AI Companion, the full written transcript of the lesson (what the teacher and student said), and word counts per speaker. We do not record lesson video (recording is switched off in our rooms).
• Automatic lesson analysis: the result of the AI review of each lesson (see section 4).
• Package and payments: hours and remaining balance, renewals, amount, currency, payment status and method. We do not store card or bank account numbers.
• Notifications: if you allow them, your device’s push subscription (a technical address and keys), a short browser description, and the notification text.
• Technical data: an app-open log (device type: mobile/tablet/laptop, installed or in browser, screen size, browser description, time) and technical error reports, from which tokens, emails and phone numbers are removed automatically. Our hosting providers log IP addresses to run and protect the service. Stored only on your device: saved usernames for quick login, drafts, and your language.
• Teachers and staff: name, role and login, schedule, attendance, lateness and lesson start times, reports they write, quality notes, supervisor visits, monthly evaluation cards, warnings and their replies, salary, payments and payslips, and academy documents.
• Prospective families (before enrolment): if you fill in one of our lead forms on Facebook or Instagram, Meta sends us your answers (name, phone, email, and answers such as who the lessons are for and children’s ages) with the ad and campaign identifiers. We store them in our database to contact you about a trial lesson.

The app does not collect your location or contacts, and contains no ads, advertising trackers or third-party analytics. We do not sell your data, and we do not send app or learning data to Meta or any advertising platform.

3. Why we use data, and our legal bases

4. Lesson transcripts and AI analysis

After each online lesson our system retrieves from Zoom the attendance data, the Zoom AI Companion summary and the full written transcript. We then send the transcript and summary, together with participants’ display names and attendance minutes, word counts per speaker, the teacher’s lesson report, and the students’ names and learning profile (gender, level, strongest language), to Claude by Anthropic, which reviews the lesson against the academy’s teaching standards — for example reviewing the previous lesson, checking understanding, encouragement, the share of Arabic spoken, the student’s speaking and recitation time, and tajweed corrections — and flags anything that needs a closer look.

• Who sees the results: academy management and supervisors; teachers see the notes about their own lessons only. Results are never shown to other families. You see a simple monthly progress indicator that combines the teacher’s report, supervisor visits, your feedback and these indicators.
• Always a human decision: we make no decision about a student or a teacher based on the automatic analysis alone. Every note is reviewed by a member of our team, and teachers can respond to it.
• No training: under Anthropic’s commercial terms our data is not used to train AI models, and Zoom states that it does not use lesson content to train its models.
• You can stop the analysis for your family at any time: send a request from “Requests to the office” in the app, on WhatsApp or by email. From the next lesson your family’s lessons are no longer sent to Claude; classes and reports continue as normal. Attendance, the transcript and the Zoom summary are still retrieved for attendance and quality purposes and deleted on the schedule in section 7; if you also object to that, tell us — we will consider your objection and reply within one month.

5. Service providers (processors)

We use these companies to run the service; they process data on our behalf and on our instructions:

Other recipients (independent controllers)

• Meta Platforms Ireland Ltd: if you fill in one of our lead forms on Facebook or Instagram, Meta collects and processes your answers under its own policy, and they are then delivered to our database.
• WhatsApp (Meta): if you choose to contact us on WhatsApp, the conversation is subject to WhatsApp’s terms and privacy policy.

If you pay by card or bank transfer, the payment is handled by your bank or payment provider outside the app; we only record the amount, date and status. We may disclose data to authorities where the law requires it.

6. International transfers

Our academy is a US company, most of our providers are in the USA, and our teachers and office team work remotely from outside the EU (mostly from Egypt), accessing only what they need for their work. Your data is therefore transferred outside the EU. For transfers to our providers we rely on the European Commission’s Standard Contractual Clauses included in their data processing terms and/or, where a provider is certified, the EU-U.S. Data Privacy Framework. Contact us for more information about these safeguards.

7. How long we keep data

8. Your rights

At any time and free of charge you can ask for:

• Access — a copy of your and your children’s data.
• Rectification — correction of inaccurate data.
• Erasure — deletion of the whole account or specific data — account deletion page.
• Restriction — pausing the use of certain data while we look into your request.
• Objection — to processing based on legitimate interests, including stopping the AI lesson analysis for your family (section 4).
• Portability — receiving your data in a common, machine-readable format.
• Withdrawing consent — e.g. turning off notifications or withdrawing photo permission, without affecting earlier processing.

How to ask: use “Requests to the office” in the app, email [email protected], or WhatsApp +44 7570 163115. We check that the request comes from the account holder and reply within one month (extendable by two months for complex requests, in which case we will tell you).

Complaints: you can complain to the data protection authority in your country, for example: Germany — the authority of your federal state (list at bfdi.bund.de), Austria — dsb.gv.at, Belgium — dataprotectionauthority.be, Italy — garanteprivacy.it, France — cnil.fr, Spain — aepd.es, United Kingdom — ico.org.uk. We would be glad if you contacted us first so we can sort it out together.

9. Children

• Children’s data is provided by the parent or guardian, who exercises the child’s rights. Adult students (18+) manage their own account and rights.
• There are no children’s accounts, no ads, no trackers, no public profiles and no contact with other users; messages are only with the teacher and the office, and contact details and links are hidden automatically.
• We never publish a child’s photo, voice or name in public content without the guardian’s explicit written permission.
• Lessons take place only in the academy’s Zoom rooms, and teachers do not contact children outside lessons and official academy channels.
• We collect the minimum children’s data needed for teaching and delete lesson transcripts after 60 days (section 7).

10. Security

Connections to the app are always encrypted (HTTPS), passwords are stored only as secure hashes, and access is limited by role and enforced on the server: a family sees only its own data and a teacher only their own students. Secret keys stay on the server, not in the app; server functions are protected; sensitive details are removed from error reports; our team accesses only what it needs; and we take regular backups. No system is 100% secure; if a breach affects your data we will inform you and the authorities as the law requires.

11. Changes to this policy

We may update this policy when our service or the law changes. We will change the “Last updated” date and tell you in the app or by message about any important change. Last updated: 11 November 2026 — we moved our encrypted backups from Google Drive to Cloudflare R2 inside the European Union and permanently deleted the old copies from Google Drive (sections 5 and 7). On 3 November 2026: we added a full description of lesson transcripts and analysis, our service providers, retention periods and your rights, and we added encrypted backups in Google Drive that are deleted within 90 days at most (sections 5 and 7).

12. Contact

Radiance Islamic Academy LLC (Jozour Academy), 1001 S Main St Ste 700, Kalispell, MT 59901, USA — [email protected] · WhatsApp +44 7570 163115.