Privacy Policy

Last updated: June 2026

This Privacy Policy explains how MaktabPro (“we”, “us”) collects, uses, and protects information when a madrasa or Islamic school uses our software. We take the protection of student data — including data about children — seriously.

Who controls the data

Each madrasa that uses MaktabPro is the data controller for the student, parent, and staff records it enters. MaktabPro acts as a data processor, storing and processing that information on the madrasa’s behalf to provide the service.

What we collect

  • Account data: name, email, and role of the staff who sign in.
  • Student records (may relate to minors): name, age, gender, guardian name and phone, class, attendance, Hifz progress, exam marks, and fee records — as entered by the madrasa.
  • Usage data: basic, privacy-friendly analytics (page views, performance) to keep the product reliable.
  • Cookies: a secure, HttpOnly session cookie for authentication and a language-preference cookie. We do not use advertising cookies.

How we use it

Solely to provide and improve the service: authenticating users, displaying records to authorised madrasa members, sending parent updates the madrasa chooses to send, and keeping the platform secure. We do not sell personal data or use student data for advertising.

Sub-processors

We rely on trusted infrastructure providers to run MaktabPro:

  • Google Firebase (Authentication, Firestore database) — data hosting and authentication.
  • Vercel — application hosting and content delivery.

Children’s data

MaktabPro is used by institutions to manage records that may include children. We process this data only on the instruction of the madrasa (the controller). Parents or guardians who wish to review, correct, or delete their child’s information should contact their madrasa, which can action the request within the platform or ask us for help.

Data retention & deletion

We retain madrasa data for as long as the account is active. A madrasa can request export or deletion of its data at any time by emailing us; we will action verified requests within 30 days, subject to any legal retention obligations.

Security

Data is encrypted in transit (HTTPS/HSTS). Access is gated by authentication, role-based permissions, and multi-tenant isolation so each madrasa can only see its own data.

Your rights

Depending on your jurisdiction, you may have rights to access, correct, delete, or port your personal data, and to object to certain processing. Contact us or your madrasa to exercise these rights.

Contact

Questions about this policy or your data? Email support@maktabpro.com.