Privacy Policy

Last updated: 2026-10-08

Who we are

Cintrue is an education platform that helps teachers and learning centres manage students, classes, and exams. This policy explains what data we collect, why we collect it, who we share it with, and what rights you have over it.

For any privacy-related request, contact us at info@cintrue.com.

Data we collect

• Student data: name (Arabic and English), gender, date of birth, phone and mobile number, email address, profile photo, school, address, academic stage, and student code.
• Parent data: parent mobile number (and a second number where provided), and occupation.
• Academic data: attendance records, exam results and scores, and recorded-lesson viewing history.
• Financial data: payments, wallet balance, and transaction history.
• Technical data: cookies required to operate accounts and sessions.

How we use it

• Creating and managing the student's account.
• Recording attendance, tracking academic progress, and issuing results.
• Sending WhatsApp notifications to the student and/or their parent, including: account creation confirmation, attendance or absence records, group enrolment, exam reminders, exam results, and wallet top-ups.
• Processing payments and managing wallet balances.

Sharing with third parties

We do not sell your personal data, and we do not use it for advertising.

To deliver notifications, we transmit the recipient's phone number and the message content to Meta Platforms Ireland Limited through the WhatsApp Business Cloud API, acting as a data processor on our behalf, for the sole purpose of delivering that message to you. This processing is governed by the WhatsApp Privacy Policy at whatsapp.com/legal/privacy-policy.

Zoom integration

An academy owner may connect the academy's own Zoom account to Cintrue so the platform can create meetings for live lessons. Only academy staff connect and use Zoom; students never authorize the app and we collect no Zoom data about them.

• Data we read from Zoom: the Zoom user id, account id, email address and plan type, to show which account is connected and to warn about free-plan limits; and the OAuth access and refresh tokens needed to manage meetings.
• Data we send to Zoom: the session title and description, start time, timezone, duration and the meeting settings chosen by staff.
• Data we keep for each meeting: its id, join link and passcode, visible to staff only; enrolled students are redirected to the meeting server-side after an access check. We never store the host start link.
• Protection: tokens are stored encrypted, are never sent to the browser and are never written to logs.
• Retention and deletion: when the academy disconnects Zoom in Cintrue, or removes the app from its Zoom account, we revoke the token with Zoom where possible and delete the stored tokens immediately. Session records stay with the academy's lesson until the academy deletes them; deleting a session deletes its Zoom meeting.
• No selling, no advertising: we do not sell Zoom data, use it for marketing or advertising, or share it with anyone else.

Legal basis and consent

We process personal data on the basis of the consent given at registration, and as necessary to provide the agreed educational service. You may withdraw consent to WhatsApp notifications at any time by contacting us; doing so does not affect the continuation of the student's account.

Children's data

Many of our students are under 18. Registration takes place with the knowledge and consent of a parent or guardian, and the parent's number is used to receive notifications about the student — including exam results and attendance records. A parent or guardian has the full right to access, correct, or request deletion of their child's data.

Data retention

Our data follows the academic year cycle: student data is entered at the start of each academic year and is deleted when that year ends and a new cycle begins. We do not retain personal data indefinitely. Minimal financial records may be kept only for the period the law requires.

Security

Data is transmitted over an encrypted connection (HTTPS), access tokens and sensitive values are stored encrypted, and dashboard access is limited to authorised users under defined permissions.

Your rights

Under Egyptian Personal Data Protection Law No. 151 of 2020, you have the right to:

• Access the personal data we hold about you.
• Correct any inaccurate data.
• Request deletion of your data.
• Withdraw consent to processing, including WhatsApp notifications.
• Object to or restrict the processing of your data.

To exercise any of these rights, email us at info@cintrue.com. We will respond within thirty days at most.

Changes to this policy

We may update this policy as the service or legal requirements change. The last-updated date appears at the top of this page, and we will notify users of any material change.