Privacy Policy

Your privacy and data security are our top priorities

Last updated: October 2025

Introduction

At Qaf App, we are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, store, and protect your data when you use our educational platform.

This policy applies to all users of Qaf App, including school administrators, teachers, parents, and students. By using our Services, you consent to the practices described in this Privacy Policy.

Information We Collect

We collect information necessary to provide and improve our educational services:

Account Information

  • Name and email address
  • Role (administrator, teacher, parent, or student)
  • School affiliation

Educational Data

  • Student academic progress and grades
  • Attendance records
  • Class enrollment information
  • Homework assignments and submissions

Usage Information

  • Login and authentication activity
  • Device information (browser type, operating system)
  • Error logs and debugging information

How We Use Your Information

We use the collected information solely for educational purposes:

  • To provide and operate our educational platform
  • To authenticate users and manage access controls
  • To enable communication between teachers, parents, and students
  • To track academic progress and attendance
  • To improve our Services and user experience
  • To ensure platform security and prevent fraud

We do not sell your data. Your information is never sold to third parties or used for marketing purposes without your explicit consent.

Data Security

We implement industry-leading security measures to protect your data:

  • Encryption: All data is encrypted in transit using TLS/SSL and at rest using AES-256 encryption
  • Access Controls: Multi-layer security rules and role-based access permissions
  • Data Isolation: Each school's data is completely isolated from other schools
  • Regular Audits: Continuous monitoring and security assessments

Industry Compliance Standards

Our infrastructure providers maintain the highest security certifications:

Database Security (Firebase)

  • SOC 2 Type II Certified
  • ISO/IEC 27001 Compliant
  • GDPR & CCPA Compliant
  • COPPA Compliant
  • ISO/IEC 27017 (Cloud Security)
  • ISO/IEC 27018 (Cloud Privacy)

Hosting Security (Vercel)

  • SOC 2 Type II Certified
  • ISO 27001 Certified
  • GDPR Compliant
  • PCI DSS Level 1
  • HIPAA Eligible
  • DDoS Protection

Data Sharing & Third Parties

We share your information only in limited circumstances:

  • Within Your School: With authorized staff based on role permissions (administrators, teachers with assigned classes)
  • Service Providers: With trusted infrastructure providers (cloud hosting, database services) under strict security agreements for technical operations only
  • Legal Requirements: When required by law, court order, or valid legal process

Important: We never share personal data with advertisers or for marketing purposes. Your educational data stays within the platform for educational use only.

Your Privacy Rights

You have the following rights regarding your personal information:

Access Your Data

Request a copy of your personal information stored in our system.

Correct Inaccuracies

Update or correct any inaccurate personal information.

Delete Your Data

Request deletion of your personal information (subject to legal requirements).

Export Your Data

Obtain your data in a portable format for your records.

To exercise these rights, please contact your school administrator or reach out to us directly at admin@qaf.app.

Children's Privacy (COPPA Compliance)

Qaf App is committed to protecting children's privacy in compliance with the Children's Online Privacy Protection Act (COPPA):

  • We only collect student information necessary for educational purposes
  • Schools must obtain parental consent before creating student accounts
  • Parents can review, update, or request deletion of their child's information
  • Student data is never used for advertising or marketing

Data Retention

We retain your information for as long as your account is active or as needed to provide educational services. When a student graduates or an account is deleted, we retain minimal records as required by law or for legitimate business purposes (e.g., transcripts, academic records). You may request data deletion by contacting your school administrator.

Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. We will notify users of significant changes by posting the updated policy on our website and updating the "Last updated" date. Continued use of our Services after changes constitutes acceptance of the updated policy.

Contact Us About Privacy

If you have questions or concerns about this Privacy Policy or our data practices, please contact us:

Email: admin@qaf.app

Website: qaf.app

We are committed to addressing your privacy concerns promptly and transparently.