Privacy policy
Last updated:
Your trust matters more to us than anything else - especially because Etases holds information about students, many of them children. This policy explains what personal data we collect, why we collect it, who can see it and how you control it. It applies to our website, web app, the Etases mobile apps for iPhone, iPad and Android, and related services, operated by Vlancy LTD.
Who is responsible
Vlancy LTD, a company registered in England and Wales under company number 13988779, with its registered office at Office 2851, 182-184 High Street North, East Ham, London E6 2JA, United Kingdom, email [email protected], is responsible for personal data processed through the Etases website and for account data of teachers, centers and academies.
Student and parent records that a teacher, center or academy enters are managed on their behalf: they decide what to record, and we process it only to provide the service to them.
As a UK company, we handle personal data in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. Because most of our users are in Egypt, we also follow the Egyptian Personal Data Protection Law No. 151 of 2020, and any other data protection law that applies where our users live.
What we collect
- Contact form on our website: your name, mobile number, what you teach or your organisation’s name, approximate number of students and teachers, and city.
- Account data: name, mobile number, email (optional), role and the settings you choose.
- Teaching records entered by teachers, centers and academies: student names and codes, groups, schedules, attendance, grades, homework, exam answers and fee records.
- Parent and guardian data: name, mobile number and the link to their child.
- Online purchases: order details and payment status. Card details are handled by our payment providers; we do not store full card numbers.
- Technical data: device and browser type, pages used and security logs, to keep the service reliable and safe.
- Website visit statistics: anonymous, cookieless page views measured with Matomo on our own server, as described in the Cookie Policy.
- Analytics and advertising data, only if you accept cookies: Google Analytics, Meta, TikTok and X receive technical data about your visit (such as IP address, device and pages viewed) to measure visits and our ads, as described in the Cookie Policy. They never receive what you type in the contact form.
In the mobile app
- Camera: used only when you scan a QR code or a student ID card, or take a photo you choose to upload, such as your profile photo.
- Photos and files: the app receives only the photos or files you pick yourself (homework, payment proof, a profile or student photo). It does not browse your photo library.
- Face ID, fingerprint and face unlock: checked by your phone’s operating system. Your biometric data never leaves your device and is never sent to us; the app only learns whether the check passed.
- Notifications: if you allow them, we store a notification token for your device so we can send class, attendance, grade and fee alerts. They are delivered through Google Firebase Cloud Messaging and the Apple Push Notification service. You can turn them off in the app or in your phone’s settings. We do not send advertising notifications.
- Device identifier: the app creates a random identifier when it is installed, so each phone keeps one signed-in session and can use fingerprint or face sign-in. It is not an advertising identifier and is not shared with anyone.
- No ads and no tracking: the mobile apps show no ads, use no advertising identifier and contain no third-party analytics or tracking tools. The cookie-based tools described in the Cookie Policy are used on our website only.
Why we use it
- To contact you after you fill in the form on our website and set up your account.
- To provide the service: schedules, attendance, grades, notifications, reports and online courses.
- To process payments and pay teachers their earnings.
- To give support and keep the service secure, including preventing fraud and misuse.
- To improve Etases using aggregated information that does not identify individuals.
- To meet legal and accounting obligations.
We do not sell personal data and we do not use students’ data for advertising.
Our legal basis
We process personal data to perform our contract with you, with your consent (for example when you send us the contact form), to meet legal obligations, and for our legitimate interest in keeping the service secure and improving it. You can withdraw consent at any time without affecting processing that already took place.
Children and guardians
Students under 18 use Etases under the supervision of their parent or guardian. Teachers, centers and academies must add minors only with the knowledge of their parent or guardian. A verified parent or guardian can see their child’s records and receive alerts, and a student under 18 cannot hide those records from them.
If you believe a child’s data was added without appropriate permission, contact us at [email protected] and we will act promptly.
Who can see what
- A teacher sees only their own students and groups - never a student’s activity with other teachers.
- A center or academy sees the data of its own groups and the teachers who work with it.
- A student sees their own schedule, grades and courses.
- A parent or guardian sees only their own child’s records.
- Assistants see only what the account owner allows.
- Our support team accesses account data only when needed to help you, and that access is logged.
International transfers
We are based in the UK, our users are mainly in Egypt, and some providers may store or process data in other countries. When data moves between countries, we transfer it only in the ways permitted by UK and Egyptian data protection law, with safeguards (such as approved contract terms) that protect it to the same standard.
How long we keep data
We keep account and teaching records while your account is active. After an account is closed, we delete or anonymise its data within 90 days, except records we must keep longer by law (such as invoices and payment records). Contact-form details from people who do not become customers are deleted within 12 months.
Deleting your account
You can delete your account at any time in the app: go to Settings, then Profile, and tap “Close my account”. You can also ask by email. The steps, what we delete and what we must keep are on our account deletion page: https://etases.com/en/legal/delete-account.
How we protect data
We use encryption in transit, access controls based on roles, activity logs for sensitive changes, and regular backups. No system is perfectly secure; if a breach affects your personal data, we will inform you and the competent authority as the law requires.
Your rights
You have the right to:
- Know what personal data we hold about you and get a copy.
- Correct inaccurate data.
- Ask us to delete your data.
- Object to or restrict certain processing.
- Receive your data in a format you can take elsewhere.
- Withdraw your consent at any time.
Send your request to [email protected]. We may ask you to confirm your identity and will reply within 30 days. Students and parents can also ask the teacher, center or academy that manages their records.
If you are unhappy with how we handle your data, you can complain to the UK Information Commissioner’s Office (ico.org.uk) or to the data protection authority where you live, such as Egypt’s Personal Data Protection Center. We would appreciate the chance to resolve it with you first.
Changes to this policy
We will post any update on this page with a new date, and notify you in advance of important changes.
Contact
For any privacy question or request, write to [email protected].
Questions about this policy? Write to us at [email protected]