Privacy Policy

Online Madrasa Italy ("OMI", "we", "our") operates the OMI Learning Management System accessible at app.online-madrasha-italy.com and via our Android application. This Privacy Policy explains how we collect, use, and protect your personal information when you use our platform.

We collect the following information when you register or use the platform:

• Account information: Full name, email address, and password (stored as a secure hash).
• Student profile: Father's name, mother's name, phone number, and address (optional fields provided during registration).
• Academic data: Course enrolments, lesson progress, and assignment submissions.
• Communications: Messages sent via the in-platform chat system.
• Usage data: Login timestamps and activity logs for platform security and administration.
• Uploaded files: Profile images and any files attached to course content (stored on Cloudinary).

• To create and manage your account and provide access to courses.
• To track and display your academic progress.
• To send in-platform notifications about courses, live classes, and notices.
• To enable communication between students, teachers, and administrators.
• To maintain security, detect fraud, and produce immutable audit logs as required by platform policy.
• To improve the platform based on aggregated usage patterns.

We do not sell, rent, or share your personal information with third parties for marketing purposes. Your data may be shared only in the following limited circumstances:

• Service providers: Cloudinary (file storage) processes uploaded files on our behalf under strict data processing terms.
• Legal obligations: We may disclose information if required by law or to protect the rights and safety of our users.
• Within the platform: Teachers and administrators can view student names, progress, and enrolment information as necessary for teaching and administration.

We retain your personal data for as long as your account is active or as needed to provide services. Activity logs are retained indefinitely as an immutable audit trail. If you request deletion of your account, we will remove your personal data within 30 days, except where retention is required by law.

We implement appropriate technical and organisational measures to protect your data:

• All data is transmitted over HTTPS/TLS 1.2 or higher.
• Passwords are hashed using bcrypt and never stored in plaintext.
• Access is controlled by role-based permissions (Student, Teacher, Admin, Super Admin).
• Database backups are retained for a minimum of 30 days.

Depending on your location, you may have the right to access, correct, or delete your personal data, or to object to certain processing. To exercise these rights, contact us at the address below. We will respond within 30 days.

OMI serves students of all ages in an educational context. Where students are under 18, parental or guardian consent is assumed at the time of registration. We do not knowingly collect data from children under 13 without verified parental consent. If you believe a child's data has been submitted without consent, please contact us immediately.

The platform uses browser local storage to maintain your login session (JWT tokens). We do not use third-party tracking cookies or advertising cookies.

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated date. Continued use of the platform after changes constitutes acceptance of the revised policy.

If you have any questions about this Privacy Policy or how we handle your data, please contact: