Privacy policy

Noorani LMS (“Noorani”) is a learning platform that schools use to run their classes, enrollment and records. Each school (for example ISRA Foundation at israfoundation.noorani.app) decides who has an account and what is recorded about its students. This policy explains what Noorani stores and how it is used.

What we collect

• Account details: name, email address and a hashed password, or your Google account email if you sign in with Google.
• School records the school or family enters: students' names, classes, attendance, grades, assignments, Qur'an and Qaidah progress, announcements and invoices.
• Payment records: what was paid, when and for whom. Card details are entered on Stripe's secure form and are never sent to or stored by Noorani.
• Basic technical data needed to keep you signed in (a session cookie) and to keep the service secure.

Google user data

If you choose to use Google with Noorani:

• Sign in with Google gives Noorani your Google account email and name, used only to identify you and sign you in (including claiming a teacher invitation).
• Google Drive (teachers, optional) uses read-only access so you can browse your files and attach links to assignments. Noorani reads file names, types and links only when you browse or attach; it stores just the name, link and icon of files you attach. It never changes, deletes, shares or downloads your files' contents. Access tokens are stored encrypted, and you can disconnect at any time, which also revokes Noorani's access at Google.

Noorani's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Google user data is not sold, not used for advertising, and not shared with anyone except as needed to provide these features.

How we use information

Only to provide the service to your school: showing each person the records they are allowed to see (teachers their classes, parents their children, students themselves), processing enrollment and payments, and sending the communications the school chooses. We do not sell personal information or use it for advertising.

Who we share it with

• Your school's staff, according to their role.
• Service providers that run the platform: our hosting provider (Hetzner, Germany/Finland), Stripe for payments, and Google for sign-in and Drive, each only for its part.
• Authorities, if the law requires it.

Children

Student records are created by schools and parents. Children's accounts are set up by their school or parent, and parents can ask the school to see, correct or delete their child's information.

Keeping and deleting data

Records are kept while the school uses Noorani. Database backups are kept for 14 days. To see, correct or delete your information, contact your school or email us; we'll act on verified requests promptly.

Contact

Questions about this policy: aayansalmanshaikh@gmail.com.