Privacy policy

Who we are and how to contact us

Rabt is operated by Muhammad Sayyed Taha Ali, an individual based in Egypt. We provide academy-management services. Contact support@rabtsite.com for support, privacy questions and requests about your information.

Your academy decides which learners, lessons and teaching records it manages and who is authorized to access them. Rabt provides the service and remains responsible for its own handling of information. For an academy record, you may contact the academy or ask us to help route your request.

Information we use

Academies and authorized users provide account and contact details, learner and guardian relationships, schedules, attendance, messages, homework, uploaded materials, learning notes and reports, and administrative and financial records. We use this information to deliver the requested academy workflows, control access, communicate with users and provide support.

We process session and device information, including mobile push tokens, and technical records such as IP addresses, request times and errors to operate and protect the service and investigate problems. Browser session cookies maintain sign-in and request security. Language preferences control how pages are displayed.

We disclose academy records within the academy according to account roles and authorized relationships. Users should share only information needed for the intended purpose and must have authority to provide it. Do not include unnecessary sensitive information in teaching notes or support messages.

Zoom and Google Calendar connections

Only teachers authorize their own Zoom accounts. Rabt receives the connected account and user identifiers, profile name and email, account plan, granted permissions and authorization credentials. We use them to create, read and delete managed lesson meetings and to receive meeting and participant events supporting attendance.

Zoom data includes meeting identifiers, join links, scheduled and actual times, and participant identifiers, names, email addresses where supplied, and join/leave times. Other academy users can receive a lesson schedule or meeting link without authorizing Rabt to access a Zoom account. The Zoom integration currently launches for teachers outside the European Union; this does not determine where every participant lives.

When a teacher connects Google Calendar, Rabt uses the connected identity and authorization credentials to maintain a dedicated academy appointments calendar. Lesson information is sent to Google for that calendar. Rabt checks busy/free availability on the main calendar without reading its event titles or details. Authorized academy staff can schedule for the teacher without receiving the teacher’s provider credentials.

Reports

Authorized staff type or paste complete lesson and monthly reports in Rabt. Reports are stored for review and publication; report text is not sent to an AI provider.

Reports require staff review before publication or use. Ask your academy about its authority to record learner information and share reports.

Service providers and processing locations

Hostinger hosts Rabt’s application and locally stored files in Düsseldorf, Germany, and provides outbound email delivery. Zoom and Google process information needed for their connected meeting and calendar services. AI providers process quiz inputs when an authorized user requests a quiz draft. Firebase Cloud Messaging receives mobile delivery tokens, notification text and routing information to deliver push notifications.

These providers may process information in locations other than the application hosting location under their applicable service arrangements. Hosting in Germany does not mean all processing remains in Germany. We share information needed to provide these services, with authorized academy users, when you direct us to do so, and where disclosure is required by applicable law. Contact us for questions about the recipients and processing of your information.

Children and guardian involvement

Academies may manage learner and linked parent accounts. The academy must establish appropriate authority for enrolling a child, providing records and using lesson services, including guardian involvement and consent where required. Teacher authorization of Zoom does not by itself establish permission to process a child’s information or eligibility under Zoom’s educational-use terms.

A parent or guardian can contact the academy or support@rabtsite.com about a child’s records. We verify the requester’s identity and authority before disclosing or changing records. We do not treat a teacher-only connection process as evidence that all participants are adults.

Disconnecting Zoom and deleting connected data

In Rabt, open Settings → Integrations and choose Disconnect. After successful revocation, Rabt blocks that authorization and removes its credentials, connected profile details, managed Zoom meeting records and links, participant events and mapped webhook payloads. The same cleanup runs when Rabt receives and verifies a Zoom deauthorization notification. If you remove an unpublished or private app in Zoom and Rabt still shows it connected, also disconnect in Rabt or contact support.

Cleanup deletes identified Zoom-source content and reports made from that content, including revisions and dependent monthly reports or learning goals. It covers Rabt connections sharing the same Zoom account/user authorization. It does not select a different Zoom user merely because they share an account.

Independent academy appointments, attendance and financial records, and unrelated manual reports remain. Disconnection does not cancel a meeting stored in Zoom. Reconnecting does not restore deleted content; future lessons may require new meeting setup. Failed cleanup is retried. Contact support about a failed removal, manually copied content, exports or other records that need separate identification.

A keyed authorization marker and removal time remain to prevent delayed events from restoring deleted data or affecting a newer connection. This pseudonymous marker currently has no automatic expiry; the encrypted account/user cleanup context is removed when cleanup finishes. The marker is not anonymous.

Retention and security

Retention depends on the information and its purpose: running the academy service, keeping necessary administration records, resolving support or security issues and meeting applicable obligations. Independent academy records are not automatically erased when Zoom is disconnected or a subscription ends. Contact us to request deletion or information about retention for a specific record; we will explain any information that must remain and why.

Hosting backups are retained for seven days. Deleted information may remain in a backup until it expires. Provider-held copies, downloaded exports and information independently retained by an academy require separate handling. Active-system cleanup is not a claim that every copy disappears immediately.

Rabt uses permission checks, academy access boundaries, encrypted connections and application encryption for authorization credentials and selected private content. These measures do not mean every database field is encrypted or that any service is risk-free.

Your rights and how to exercise them

Depending on the law that applies to you and the processing involved, you may have rights to access and obtain a copy of your information, correct inaccurate information, request deletion, restrict or object to processing, receive portable data and withdraw consent where processing relies on consent. Withdrawal does not change the lawfulness of earlier processing. These rights can have limits and do not automatically require deletion of another person’s records.

Email support@rabtsite.com with your academy, the right you wish to exercise and enough information to locate the relevant records. Do not send passwords, tokens or unnecessary learner information. We will verify identity and authority, coordinate with the academy when needed, and respond within the deadlines applicable to your request. Our support first-response target is 24 hours; it is not a promise that a full privacy request will be completed within 24 hours.

If we cannot carry out all of a request, we will explain the reason and any available next steps. You can raise a privacy complaint with us at the same address and, where applicable, with the data-protection regulator or other competent authority in your jurisdiction. Contact us if you need help identifying the appropriate route.

Changes to this policy

We will publish updates here with a new effective date and provide additional notice where required. Contact support@rabtsite.com with questions about this policy or a material change.