Privacy Policy

1 Overview

AlMiqyas Education Technology LLC ("AlMiqyas", "we", "us", or "our") is committed to protecting the privacy and security of all personal data processed through our Arabic language assessment platform. This Privacy Policy applies to all users of the AlMiqyas platform, including school administrators, teachers, and students.

By accessing or using the AlMiqyas platform, you acknowledge that you have read, understood, and agree to the practices described in this Privacy Policy. If you do not agree, please discontinue use of the platform immediately.

2 Data We Collect

We collect the following categories of personal data depending on the user type:

User Type	Data Collected	Purpose
School Admin	Name, email, phone, school name, country, role	Account management, billing, communication
Teachers	Name, email, assigned classes, assessment activity	Platform access, reporting, analytics
Students	Name, student ID, year group, Years of Study level, assessment scores, progress data	Assessment delivery, results, benchmarking
All Users	IP address, browser type, device info, session logs	Security, fraud prevention, platform improvement

We do not collect sensitive personal data such as biometric data, health information, or financial data beyond what is necessary for billing purposes.

3 How We Use Data

We use collected data for the following purposes:

• Delivering and operating the AlMiqyas assessment platform
• Generating assessment results, reports, and analytics for schools
• Benchmarking student performance against the Years of Study (YOS) framework
• Communicating with school administrators regarding their account and platform updates
• Improving platform features, performance, and user experience
• Complying with legal obligations and responding to lawful requests
• Preventing fraud, abuse, and unauthorised access

4 Data Sharing

AlMiqyas does not sell, rent, or trade personal data to third parties. We may share data only in the following limited circumstances:

• With your school: Assessment results and analytics are shared with the school that enrolled the student.
• Service providers: We engage trusted third-party providers (e.g. cloud hosting, email delivery) who process data solely on our behalf under strict data processing agreements.
• Legal compliance: We may disclose data when required by UAE law, court order, or regulatory authority.
• Business transfers: In the event of a merger or acquisition, data may be transferred to the successor entity under equivalent privacy protections.

All third-party service providers are contractually bound to process data only as instructed by AlMiqyas and to maintain appropriate security measures.

5 Storage & Security

All data is stored on secure, encrypted servers. We implement the following technical and organisational security measures:

• AES-256 encryption for data at rest
• TLS 1.2+ encryption for all data in transit
• Role-based access controls (RBAC) limiting data access to authorised personnel only
• Regular security audits and penetration testing
• Multi-factor authentication for administrative access
• Automated intrusion detection and monitoring systems

6 Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected:

Data Type	Retention Period
Student assessment data	Duration of school subscription + 2 years
School admin account data	Duration of subscription + 1 year
System logs & access records	12 months
Demo request / contact form data	24 months
Billing records	7 years (UAE commercial law requirement)

Upon expiry of the retention period, data is securely deleted or anonymised.

7 Your Rights

Under applicable data protection law, you have the following rights regarding your personal data:

• Right of Access: Request a copy of the personal data we hold about you.
• Right to Rectification: Request correction of inaccurate or incomplete data.
• Right to Erasure: Request deletion of your data where there is no legitimate reason for continued processing.
• Right to Restriction: Request that we restrict processing of your data in certain circumstances.
• Right to Data Portability: Receive your data in a structured, machine-readable format.
• Right to Object: Object to processing based on legitimate interests.
• Right to Withdraw Consent: Where processing is based on consent, withdraw it at any time.

To exercise any of these rights, contact our Data Protection Officer at dpo@almiqyas.com. We will respond within 30 days.

8 Cookies

AlMiqyas uses cookies and similar tracking technologies to operate and improve the platform. The types of cookies we use:

Cookie Type	Purpose	Duration
Essential	Session management, authentication, CSRF protection	Session
Functional	User preferences, language settings	1 year
Analytics	Platform usage statistics (anonymised)	2 years

You can control cookies through your browser settings. Disabling essential cookies may affect platform functionality.

9 Children's Privacy

AlMiqyas is an educational platform that processes data of students, including minors. Student data is collected and processed solely under the authority of the school (as data controller) and is used exclusively for educational assessment purposes.

We never use student data for advertising, commercial profiling, or any purpose beyond delivering the assessment services contracted by the school.

10 Policy Changes

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we make material changes, we will:

• Update the "Effective Date" at the top of this page
• Notify school administrators via email at least 14 days before changes take effect
• Display a prominent notice on the platform

Continued use of the platform after the effective date constitutes acceptance of the updated policy.

11 Contact & Data Protection Officer

For any questions, concerns, or requests relating to this Privacy Policy or your personal data, please contact: