Privacy Policy

Effective date: 31 October 2026 · Version 1.1

Sabora is a platform that connects schools with their parents and students. This Privacy Policy explains what personal information is processed when you use Sabora, why it is processed, who can access it, how long it is kept, how it is protected, and the choices and rights available to you. It applies to Sabora's website and app and to every school that uses them.

At a glance

• Your school decides what information is held about its students, families and staff. Sabora provides the service on the school's behalf.
• Information is used only to run the service for your school. We never sell it, never show advertising, and never use it to build profiles.
• Each person sees only what their role allows. A parent sees their own children; a teacher, the classes they teach.
• Information is protected by strict access controls, encryption, and regular security testing.
• To see, correct or delete information, contact your school. For questions about this Policy, contact us.

1. Who we are and our role

Sabora ("Sabora", "we", "us") provides a platform that schools use to manage attendance, homework, lessons, grades, report cards, announcements and communication with families.

Each school that uses Sabora is responsible for the personal information of its students, families and staff. The school decides who receives an account and what information is entered, and it remains responsible for that information. Sabora processes this information on the school's behalf and in accordance with its agreement with the school, and only to provide the service. Requests about a particular student's records should therefore be made to the school first.

2. Information we process

We process the following categories of information:

• Account information: name, mobile number and/or email address, role at the school, preferred language, and a password, which is stored only in a protected form that cannot be read back.
• Student records: name, school, branch, grade and class, student number, attendance, homework and submissions, quiz results, marks and their history, report cards, and notes recorded by staff.
• Family relationships: which children each parent is linked to.
• Communications and content: messages between families and the school, between families and teachers, and between students and their teachers; posts in class discussions; announcements, lessons, homework and calendar entries; and the photos, documents, voice notes and videos attached to them.
• Service and security information: sign-in and security records, notification preferences, and the technical information needed to deliver the service reliably and safely.

We do not collect your location, your contacts, or information about your use of other apps or websites.

If you only browse the public list of schools and ask a school to join Sabora, we record the request together with an anonymous identifier for your device, so that each device counts once. We do not record your name or number.

3. How we use information

We use personal information only to:

1. Provide the service to your school, showing each person the information their role allows.
2. Deliver messages, announcements and the notifications you have chosen to receive.
3. Calculate marks and prepare report cards on the school's instructions.
4. Keep the service secure, prevent misuse, and investigate problems.
5. Provide support when the school asks for help.
6. Comply with legal obligations.

We do not sell personal information. We do not show advertising, track you across other websites, or build profiles of children or families. We do not share one school's information with another school, and we do not use personal information to train artificial intelligence.

4. Who can access information

Access is determined by each person's role at the school:

• Parents see their own children's attendance, upcoming homework, marks, published report cards, the notes the school shares with them, and the school's announcements. They can write to the school's administration and to their children's teachers.
• Students, where the school provides them with an account, see their own information, their classes' lessons, homework and announcements, and the discussions of their own classes.
• Teachers see the classes and subjects they teach, and can communicate with their students and those students' parents.
• School administrators see their school, or the branches assigned to them. To keep communication respectful and safe, the school's administration can read conversations and class discussions that involve teachers, without taking part in them. Participants are informed of this.

Contact details are visible only to the school's administration; other users see names only. Words on the school's list of inappropriate language are hidden automatically, and the original text is available only to the school's administration.

No one at one school can access another school's information.

Sabora personnel access school information only when it is necessary to provide support requested by the school, to maintain or secure the service, or to comply with the law. Support may include, at the school's request, giving one of its administrators a temporary password; each such action is recorded in the school's own log. Such access is limited to what the task requires and is subject to strict confidentiality.

5. Service providers and disclosure

We use carefully selected service providers for hosting, secure storage, notification delivery and email delivery. They process information only on our instructions and only to provide these services, and they are bound by obligations of confidentiality and security.

We may also disclose information where required by law or by a valid request from a competent authority, or where necessary to protect the safety of a person. Should Sabora be reorganised or transferred, the information will remain protected by this Policy.

6. Where information is stored

Information is stored in secure data centres in the European Union, which may be outside the country where your school is located. We apply the same protections wherever information is processed. Where the law of a school's country requires information to be stored in a particular place, this is addressed in our agreement with that school.

7. How we protect information

We protect personal information with technical and organisational measures appropriate to its sensitivity, including:

• encryption of information in transit and at rest;
• access controls that allow each person to see only what their role permits, enforced at every level of the service and tested regularly;
• private files, available only through secure links that expire after a short time;
• protection against repeated sign-in attempts, which temporarily locks an account after several incorrect passwords;
• confirmation of the user's own password before information is deleted.

We develop and test Sabora with invented information only; real personal information is never used for development or testing. We also regularly run automated tests that try to break the access rules between schools and between users, and we test the service with large volumes of invented information to make sure it stays fast and dependable as more schools join.

We are also putting the following measures in place, and will update this Policy as each one takes effect:

• a production environment kept entirely separate from the systems used for development and testing;
• daily backups, with regular checks that they can be restored;
• a record of each occasion on which Sabora personnel open a school's information;
• an optional second sign-in step for school administrators, using a code from a phone app;
• an independent security assessment as the number of schools grows.

No system can be guaranteed to be completely secure. If we become aware of a security incident affecting personal information, we will inform the affected schools without undue delay so that they can inform families where appropriate.

8. How long information is kept

Backup copies are kept for a limited period and are then overwritten.

9. Children's privacy

Many of the people whose information is processed through Sabora are children. Their information is entered by their school, which decides whether students receive their own accounts. Sabora has no public profiles and no advertising, and offers no way for people outside the school to contact a student. Students can communicate only with their own teachers and, in class discussions, with their own classmates and teachers, under the supervision of the school's administration. Parents can always see what the school shares about their children.

10. Notifications and messages sent by your school

If you turn notifications on, Sabora sends them to your device, and they may appear on its screen. You can turn notifications off at any time in Sabora's settings or in your device's settings.

Your school may send you your sign-in details by WhatsApp from the school's own phone, or by email from the school's own address. You will be asked to choose your own password the first time you sign in.

11. Information stored on your device

To work reliably on slow or interrupted connections, Sabora keeps a limited amount of information on your device, such as recently opened pages and items waiting to be sent. Signing out removes this information from the device. If you share a device, please sign out after using Sabora.

Sabora uses only the cookies that are necessary for it to work: to keep you signed in, to remember your school, your language and display preferences, and the child or branch you last selected, and to count each device once when a school is asked to join. Sabora does not use cookies for advertising or tracking.

12. Content from other platforms

A teacher may share a lesson video hosted on another platform. Sabora does not send that platform any information about you. If you choose to play the video, it is provided by that platform under its own privacy policy.

13. Your rights and choices

Depending on the law that applies to you, you may have the right to access your information, to have it corrected or deleted, and to object to or restrict certain uses of it. Because your school is responsible for your information, please send these requests to your school, which can act on most of them directly in Sabora. We will assist the school in responding.

You can also turn notifications off, choose Arabic or English, and change your password at any time.

If you are not satisfied with how a request has been handled, you may contact us, and you may have the right to complain to the data protection authority in your country.

14. Changes to this Policy

We may update this Policy to reflect changes to the service or to the law. When a change is significant, we will inform schools in advance and display a notice in the app. The effective date at the top of this page shows the current version.

15. Contact us

For questions about this Policy or about how Sabora handles personal information, please contact us using the "Contact us" option on Sabora's home page. For questions about a student's records, please contact your school.