Privacy policy

The center’s data belongs to the center. We store and process it on the center’s behalf, only to provide the service. We do not sell data and do not use it for advertising.

Service provider: “Nawah by Dar Nabt”, Amman, Jordan [legal entity, registration number and address: not decided yet].

What the center puts in: students’ names, ages, sections and attendance; guardians and their phone numbers; fees, payments and expenses; staff and their pay; messages and files.

About users: email and sign-in details, and technical logs needed for security and fixing problems.

The center owns the data and is responsible for it. We process it on its instructions, only to provide the service. Guardians who want to see or correct their data contact the center first, and we help the center do it.

Most students are children, so we treat their data with extra care: only center staff the center has given access can see it, it is used for nothing but the center’s service, it is never public, and it is never shared with anyone for marketing.

The database and files are held by Supabase in the European Union (Frankfurt, Germany). The app runs on Railway servers. Some files may be kept in private Cloudflare R2 storage behind short-lived links.

These providers process the data for us only, to run the service.

Messages are sent and received through the center’s own WhatsApp number, which the center connects itself. Messages are kept in Nawah so center staff can see them. Inside WhatsApp, messages are covered by WhatsApp’s own privacy policy.

We take backups to protect data from loss, keep them for 12 months, and then they are deleted.

The center can export its data, and ask for one person or all of its data to be deleted. We carry out deletion on request; the data leaves backups when they expire.

Connections are encrypted, each center’s data is kept apart from every other center’s, files are private and open only through short-lived links, and access follows the roles the center sets. No system is perfectly safe; if an incident affects a center’s data, we tell the center without delay.

We do not sell any data, do not share it with advertisers, and do not use it to train systems for anyone else.

The app uses cookies only to keep you signed in and remember your language. No tracking or advertising cookies. The Nawah website sets no cookies, and may count visits with anonymous Cloudflare Web Analytics.

If we change this policy we update the date above, and tell centers about any important change in advance.

For any privacy question, or an export or deletion request: team@darnabt.com