Privacy Policy
Creating an account asks for no name, no email and no phone number. An account here is a number the app generates and a four-digit PIN, and nothing else. A student may add their name and photograph so those appear on their certificate; both are optional, both can be removed at any time, and the app works fully without either.
Bab El Elm («باب العلم») is an Arabic educational app. The data controller is the app's owner, reachable at support@babelelm-eg.com.
Servers and the database are hosted with Hostinger, and the site is served over HTTPS.
This list is complete. Anything not named here is not collected — we do not collect location, contacts, an advertising identifier, or any manufacturer-issued device identifier.
| Data | Why | Required? |
|---|---|---|
A random installation id (device_uuid) |
Ties this device to an account. Generated by the app on first launch; not derived from hardware. | Yes |
| Operating system and app version | So support knows what you are running. | Yes |
| A digest of your PIN | To verify it is you. Stored as a keyed digest the PIN cannot be recovered from. | Yes |
| A digest of your primary code | To restore your account on a new device. Also a digest; the code itself is shown once and never stored. | Yes |
| Your name | To print on your certificates. Used for nothing else and never shown to another student. | No |
| Your photograph | To appear on your certificates. Embedded metadata (EXIF) — including the coordinates a photo was taken at — is stripped on upload. | No |
| Exam results, certificates, achievements | To show your progress and issue your certificate. | Yes |
| Purchases and material access | To know what you bought and when it expires. | Yes |
| Support messages you send | To answer you. | No |
| IP address, in the security audit log | For security review where misuse is suspected. Not used to track you and not used for advertising. | Yes |
The app is for students, many of them under eighteen. That is why an account holds no personal data by default. We do not recommend adding a child's real name or photograph, and every feature works without them. A parent or guardian who wants a child's data deleted can write to us and we will delete it.
Payments are handled by Paymob. Your card or wallet details never reach our servers; we never see them and never store them — they are entered on Paymob's own page. What we keep is the amount, the currency, the status, and a reference number Paymob issues.
Data held by Paymob is governed by their own privacy policy.
Account data is kept while the account exists. Purchase and payment records are kept as a financial record even after the rest is deleted. The security audit log is retained for security review.
Note that deleting an account forfeits the material access you bought and the certificates you earned, and cannot be undone.
If what we collect changes, this page is updated and the date above changes with it. Material changes will be announced in the app.
For any privacy question or request: support@babelelm-eg.com