Halakaty ("the App", "we", "us") is a Qur'an-memorization management application used by
Qur'an centers and study circles (halaqat) to record attendance, memorization and revision
progress, and to keep teachers, supervisors, and parents informed. This policy applies to the
Halakaty apps for Android and iOS (com.hamalawey.halakaty).
Halakaty is operated by Aly Hamalawey, located in Egypt ("the Provider"). The App is provided to educational institutions (Qur'an centers, mosques, and schools). Accounts are created and managed by an institution's administrators — end users do not sign up on their own. For personal data processed in the App, especially data about students, the Institution is the data controller and the Provider acts as a processor on its behalf.
We collect only what is needed to run the App. We do not use advertising networks and do not sell personal data.
Account & profile (entered by an admin/teacher/supervisor): name (Arabic and/or English), username, password (via Firebase Authentication — not stored in readable form by us), role, optional email, and the institution the account belongs to.
Educational records (created by staff): attendance; memorization and revision records (surah/ayah ranges, scores, next assignments); progress summaries; teacher notes and teacher–parent messages; parent–child links. The student's name is stored with each recorded lesson so records stay accurate for the institution even if an account is later removed.
Technical: a push-notification token (Firebase Cloud Messaging) if notifications are enabled; basic auth metadata (e.g., last-login); and a limited local copy of recent sessions on the device for offline use.
We do not collect location, contacts, photos (unless explicitly uploaded where offered), advertising identifiers, or payment-card information.
Halakaty is used within educational institutions, and some students may be children. Student accounts and data are created and managed by the institution and its authorized staff, under their own relationship with the child's parents or guardians. The App does not knowingly let children create accounts or provide information directly to us outside the institution's supervision. Institutions are responsible for obtaining any parental consent required by law before entering a child's information. Parents/guardians with concerns may contact us (Section 14) and we will work with the institution to review or remove the information.
We do not use personal data for advertising or for automated decisions with legal or similarly significant effects.
Performance of a contract / provision of the service; legitimate interests of the institution in running its circles and informing parents; and consent where required (e.g., parental consent obtained by the institution, or consent to receive push notifications).
We use Google Firebase (Google LLC): Firebase Authentication (sign-in), Cloud Firestore (records), Firebase Cloud Messaging (notifications), and Firebase Storage (files where used). Google processes this data on our behalf as a service provider — see firebase.google.com/support/privacy and policies.google.com/privacy.
Otherwise we share data only within the same institution according to each user's role, or when required by law or to protect rights, safety, and security. We do not sell personal data or share it with advertisers.
Data is stored on Google Firebase servers, which may be located in the United States and other countries where Google and its sub-processors operate. Using the App may involve transferring information to countries with different data-protection laws; appropriate safeguards apply. We use reasonable measures including encrypted connections (TLS) and role-based access controls. A limited local cache enables offline use and is removed when app data is cleared or the app is uninstalled. No method of transmission or storage is completely secure.
Educational records are retained for as long as the institution needs them (including keeping a student's recorded lessons for teaching and payroll records). Account information is retained while the account is active. When an account is deleted, its login/access is removed; certain educational records the institution must keep (such as previously recorded lessons) may be retained together with the associated student name.
You may have rights to access, correct, delete, or restrict processing of your personal data. Because institutions manage accounts, the fastest route is to contact your institution's administrator, who can view/correct/delete records in the App. You may also contact us (Section 14) and we will assist or route your request.
Accounts are provisioned and managed by institution administrators; there is no public self-service sign-up. Students, parents, and teachers can request removal by contacting their institution's administrator or emailing ali96nasser@gmail.com; we will coordinate deletion with the institution. Administrators/supervisors can delete accounts they manage from within the App, subject to Section 8.
If enabled, we use Firebase Cloud Messaging and a device token to deliver service-related messages. You can disable notifications any time in your device settings.
Halakaty does not collect or process any payment information in the App. Any billing between an institution and the Provider is handled separately, outside the App.
We may update this policy. Material changes will update the "Last updated" date and, where appropriate, be notified in the App or to institutions. Continued use after an update constitutes acceptance.
Aly Hamalawey
Email: ali96nasser@gmail.com
Location: Egypt
This document is a template and is not legal advice. Because Halakaty may process data about children and may be used across different countries, have this policy reviewed by a qualified legal professional and adapt it to the laws that apply to you (e.g., GDPR and local data-protection / children's-privacy laws) before publishing.