Privacy Policy

The Tafaal platform (tafaal-edu.com) is owned and operated by Tafaal Edu for Modern Education — an Egyptian limited liability company subject to Investment Law No. 72 of 2017.

• Head office: 7 Mo’assasat El-Zakah Street, next to Abu Omeira Mosque, El-Marg El-Bahareya, El-Marg District, Cairo Governorate, Arab Republic of Egypt
• Commercial Register: Cairo Investment Commercial Register No. 309371
• Tax Registration No.: 774254858 — El-Marg Tax Office, Cairo First
• Incorporation Certificate: No. 26-33679-1-01 dated 31/08/2026

For any matter concerning your personal data: email support@tafaal-edu.com — WhatsApp: 01036564062

There is no independent registration for students or parents. Every student must be registered under a teacher or an educational institution subscribed with us. Accounts are therefore of three kinds:

• Student account: created and managed by the parent or legal guardian, who is the account holder in law
• Teacher account: created by an adult teacher
• Educational institution account (school, academy or learning centre): created by the institution through an authorised representative, referred to in this document as the "Educational Institution"

a. Student account registration data

• Parent/guardian data: name and phone number
• Student data: name (a nickname may be entered), gender, and school grade
• An email address for contact and account activation — this may be the student’s or the parent’s
• A contact phone number — this may be the student’s or the parent’s
• Governorate and district
• The teacher or educational institution code
• Most used device, and how you heard about us
• Telegram account identifier (if you choose to receive reports through it)

b. Teacher account registration data

• Full name, mobile number, email address, and gender
• Governorate and district
• Grades taught, specialisation, years of experience, and qualifications
• A short profile description
• Educational institution code (optional, when joining an existing institution)

c. Educational institution registration data

• Institution name, principal name, institution type, grade levels offered, and number of students
• Governorate, district, and address
• Contact phone number and email address
• Website, institution logo, and description (optional)
• How you heard about us

d. Financial data of teachers and institutions

We collect the e-wallet number linked to the account for one purpose only: paying out Cash Back entitlements. We also keep a record of the wallet balance, withdrawal requests, and completed transfers, as required for accounting review and for meeting our legal and tax obligations.

Data shown to students: when a student enters a teacher or institution code, certain identifying details are displayed so the student can confirm the party they are joining — name, specialisation, grades taught, profile description, and the institution’s logo, description and website. These details are not displayed publicly on the website or to any unregistered visitor; they appear only to someone who has entered the correct code. Financial data, phone numbers and email addresses are never displayed in any case.

e. Educational usage data

Test scores, completed activities and exercises and their results, the number of tests taken, and indicators of engagement with lessons.

f. Technical data

IP address, device and browser type, and login records (to secure the account and enforce the device limit).

What we do not collect: we do not ask for the student’s date of birth, photograph, national ID number, or detailed home address.

Processing is carried out on the basis of your explicit consent at registration and of what is necessary to perform our contract with you. For persons under 18, consent is given exclusively by the parent or legal guardian, in accordance with Personal Data Protection Law No. 151 of 2020 and its executive regulations.

We keep an electronic record of every consent, including its date and time and the version number of the document consented to.

The platform is aimed at pre-university students, and we treat their data with the utmost care:

• Account creation is limited to adults (18 or older) acting as parents or guardians
• A student may not create an account on their own consent
• Student data is provided by the parent, who confirms its accuracy and bears responsibility for it, and is limited to what is necessary to deliver the service and communicate
• We do not run any tracking or advertising measurement tools inside the platform after login — no educational behaviour of a student is transmitted to any advertising party
• We do not send marketing messages to users at present, and none are directed to students in any case
• If we discover that an account was created for a minor without parental consent, we may suspend it and delete its data
• A parent may request deletion of their child’s data at any time through our support email

We send the parent a weekly and a monthly report on their child’s performance and progress, by Telegram or email. These are service messages forming an integral part of the contracted service, and are not marketing messages.

We send you service messages relating to your account and subscription — such as student progress reports, subscription expiry and renewal notices, maintenance and outage alerts, payment confirmations, and the notices provided for in these documents. These messages are an integral part of the contracted service.

We do not send marketing or promotional messages at present. Should we decide to do so in future, it will only be after obtaining your explicit and separate consent, with the ability to unsubscribe at any time and without affecting your subscription or your access to service messages.

We do not sell your data to anyone, and we do not share it for advertising purposes. We rely on the following service providers only to the extent necessary to operate the platform:

• Hostinger — website, database and email hosting
• Cloudflare — domain (DNS) services and website protection
• Telegram — delivering periodic reports to those who chose this option
• Payment service providers — processing payments and refunds

We may also disclose data where required to do so by a judicial body or competent authority in accordance with Egyptian law.

We use cookies that are necessary to operate the website, enable login, and maintain session security.

We also use third-party analytics and performance measurement tools (such as Google Analytics and advertising platforms including Meta and TikTok) on our public marketing pages only. The tools actually active at any given time are listed in the cookie settings on the website.

These tools are completely disabled inside the platform after login, and do not operate until you consent through the cookie banner.

Some of the service providers listed above operate servers outside the Arab Republic of Egypt, and your data may be transferred or stored outside it. By using the platform and accepting this policy, you expressly consent to such transfer, and we undertake to apply appropriate safeguards to protect it.

We retain your data throughout the period the account is active. The retention period differs by account type:

Student accounts: we retain the student’s data for as long as the educational relationship continues, including periods where the subscription lapses and is later renewed, so that the student may continue learning on the platform across their different school stages, benefit from our future services and programmes, and keep their record and progress history. Data is reviewed periodically and is deleted or anonymised once the purpose of retaining it no longer applies.

Teacher and educational institution accounts: we retain contractual data and financial records — including wallet data, withdrawal requests and completed transfers — for the period required by Egyptian commercial and tax law, and in any event for no less than five years.

Any user or parent may request deletion of their data at any time through our support email. The request is carried out within the period prescribed by law, except for records the law requires us to keep for longer.

We apply technical and organisational measures to protect your data, including encryption of communications, restriction of access privileges, and separation of each teacher’s and institution’s data from others. In the event of any data breach, we undertake to notify the competent authorities and the affected persons within three working days in accordance with the law.

Even so, absolute security cannot be guaranteed for any electronic system.

You may at any time request to: access your data, correct it, delete it, object to its processing, withdraw your consent, or obtain a copy of it. Requests are sent to support@tafaal-edu.com and we respond within the period prescribed by law.

We may update this policy, and will notify you of any material amendment through the email address registered on your account. Your continued use after the amendment constitutes acceptance of it.