This page explains what the site collects about you, why, and what you can do about it. We've written it to be read — if anything here is unclear, ask us and we'll explain it.
The site is run by Mahmoud Sharaf, teaching Programming and AI to Baccalaureate students in Egypt. Where this page says "we", that's who it means.
The short version
- We collect what you type into our forms, what you do inside your courses, and some technical information your browser sends.
- We don't sell your information, and nothing goes to advertisers unless you accept optional cookies.
- We message you through Telegram, so Telegram carries those messages.
- The video player watches for signs that lessons are being copied. That's monitoring, and we spell out exactly what it looks at below.
- You can download a copy of your data, or delete your account, from your profile.
What you tell us
When you register, we ask for your name, your mobile number (this is also what you sign in with), a parent's or guardian's mobile number, your school year, your education system (Arabic or Languages), your governorate and city, and a password.
Your password is stored hashed — scrambled in a way that can't be reversed — so nobody here can read it, including us.
Registering also means connecting a Telegram account. That's required, because Telegram is how we send you everything. When you connect, we store your Telegram account ID and the date you connected it.
We deliberately don't ask for your email address, your national ID number, your date of birth, your gender, or your street address — the closest we get to where you live is your city. We never ask students to upload a photo or any documents.
Other forms collect a little more:
- The registration-interest form asks for your name, a parent's name, both mobile numbers, your school year, your governorate and city, and which teaching center you'd prefer.
- The contact form asks for your name, email, an optional phone number, where you are, and your message.
- Applying for a course asks for your name, email, phone, a parent's phone, and an optional message.
What we record while you learn
- Which courses you're enrolled in, and how you got access to them
- Which lessons you've finished, and when you last opened one
- The exact second you stopped at in a video, so the player can offer to resume
- Your quiz scores, whether you passed, and which answer you picked for each question
What's collected automatically
- Your IP address and what your browser reports about itself
- A log of sign-ins, failed sign-in attempts, lockouts and password resets — each with the time and IP address
- A scrambled fingerprint of the last five devices you signed in from, so we can notice a stranger on your account
Protecting the lessons
The video lessons are the work these courses are built on, and copying them is a real problem. So the player does more than play.
While a lesson is running, it reports back roughly every 15 seconds on how it's being used: how long since you last paused, how often you skipped, whether you changed the speed, whether the tab is in the foreground, and the size of your window. Those signals feed a score meant to tell a person watching apart from a script downloading. A low score can slow down how fast the video loads for you.
Your player also carries a faint moving watermark showing the site name and the last six digits of your account number. You can watch from two places at once; opening a third ends the oldest.
If the signals look like copying, we save a record: the time, your IP address, your browser, the page you were on, the page you came from, and which lesson was playing.
We'd rather say this plainly than bury it: while you watch, the player is measuring how you watch. Today we only record these — nobody is blocked automatically, and a person reviews anything flagged. If we ever switch automatic blocking on, video access could be paused for a while when the signals cross the line, and we'll update this page before that happens.
If you pay for a course
Card details never reach our servers. Payment happens on the payment provider's own page, and they send back only the result: whether it worked, the amount, and a masked card number. We store that, plus a token the provider gives us to recognise the card for renewals, which we keep encrypted. We never see or store your full card number, its expiry date, or the CVV.
To take a payment, the provider needs your name and email, and for wallet payments your phone number. We send them no address.
Cookies
You'll see a banner on your first visit. Nothing optional loads until you choose.
Always on — the site can't work without these: a session cookie that keeps you signed in; a security cookie that stops other sites submitting forms as you; a cookie remembering whether you chose Arabic or English; a cookie remembering your answer to the banner; and, if you tick "remember me", one that keeps you signed in longer.
Only if you accept — a measurement pixel from the advertising platform we use, which tells us how many people arrived from our social media ads. It loads only after you press Accept, and it only reports that a page was viewed. Press Reject and its code is never loaded at all.
You can change your mind by clearing this site's cookies in your browser; the banner will ask again.
Two things we want to be straight about, because the banner doesn't cover them. Our site sits behind a hosting and content-delivery company, which protects it and serves the video — so that company sees your IP address and sets its own cookies on every visit, including while you watch a lesson. And some free lessons sit on an outside video platform; those load that platform's player, which reaches its servers whatever you chose in the banner. We use the version of that player that doesn't set advertising cookies, but your IP address still reaches them. Paid lessons aren't on it.
Who else gets your information
Your information reaches a small number of outside companies, and only for these reasons:
- The messaging app you connect when you register — every message we send you passes through it, including sign-in links.
- Our hosting and content-delivery company — runs the site and stores the lessons; sees your IP address.
- Our advertising measurement provider — only if you accept cookies, and only to count that a page was viewed.
- The video platform behind some free lessons — as described above.
- Our payment provider — only if you pay for something, and only what's needed to take the payment.
That's the whole list. We don't sell your data and we don't hand it to anyone else, unless the law obliges us to. Our own staff can see your account and your progress, because that's how they teach and support you.
We've described these by what they do rather than by name. If you want to know exactly which company any of them is, ask us and we'll tell you.
Students under 18
Most of our students are 15 to 18, so most of what's described on this page belongs to someone under 18. We take that seriously.
We ask for a parent's or guardian's number when you register, and that's the number we'd use if we ever needed to reach an adult about your account. We don't verify anyone's age and we don't ask for proof. So if you're a parent and you'd rather your child weren't registered, or you want to see or delete what we hold about them, write to us and we'll handle it — we'll ask a couple of questions first to check you really are their parent.
And if you're a student: the number you give us for your parent belongs to a real person, so please ask them before you type it in.
What you can do
Signed in, from your profile:
- Download your data. We build a ZIP of what we hold about your account and send you a private download link over Telegram. The link works for 24 hours, and you can ask for one once an hour.
- Delete your account. You'll need your password, plus your two-factor code if you use one. The account switches off immediately and is erased for good 30 days later. Sign back in during those 30 days and the deletion is cancelled. After that it's gone, and we can't bring it back.
A little survives deletion, stripped down: we keep the security log of sign-ins to protect the platform, but your name, IP address and browser are wiped from it, so those rows can no longer be traced to you.
To correct something — a misspelled name, an old number — just write to us.
How long we keep things
While your account is open we keep your details, progress and quiz results, because that's what the courses run on. Delete your account and they go 30 days later.
Payment records outlive the account, because we have to keep proof of what was paid.
Messages sent through the contact form, and details submitted through the interest form, stay until we've dealt with them and for a reasonable period after. They aren't linked to your account, so deleting your account doesn't remove them — ask us and we'll delete them.
Keeping it safe
The site runs over an encrypted connection. Passwords are hashed. Two-factor secrets and payment tokens are encrypted. Video files are private and reachable only through short-lived signed links. You can turn on two-factor authentication in your profile, and we'd recommend it.
No system is perfectly safe. If something goes wrong with your data, we'll tell you.
Changes to this page
If we change how any of this works, we'll update this page and the date at the top. If the change matters to you, we'll say so over Telegram.
Talk to us
Questions about any of this, or a request about your data:
- Email: [email protected]
- Phone or WhatsApp: +20 155 829 8481
- Or use the contact form
We aim to reply within a few days.