massar-privacy

Privacy Policy — Massar

Last updated: October 1, 2026 Effective date: October 1, 2026

1. Introduction

Massar (“we”, “our”, or “the app”) is an educational mobile application that provides video-based learning content to students. This Privacy Policy explains what personal data we collect, how we use it, and your rights regarding that data.

By using Massar, you agree to the practices described in this policy.

2. Data We Collect

2.1 Account Information

Phone number: used for authentication via one-time password (OTP)
First and last name: collected during registration
School grade (class): selected during registration to personalize content

2.2 Enrollment Documentation

Enrollment proof documents: photos or images you submit to verify your enrollment. These files are stored securely and are accessible only to administrators.

2.3 Device Information

Device identifier: a unique identifier stored on your device to enforce our one-device-per-account policy and prevent unauthorized account sharing.

2.4 Learning Activity

Video progress: percentage of each video watched and last position viewed, to resume playback
Downloaded content: list of videos saved locally on your device
Course enrollments: subjects and chapters you have accessed

2.5 Notifications

Push notification token: used to send you alerts about your enrollment status, new content, and live session announcements

2.6 Technical Data

Basic usage data necessary to operate the service (session tokens, request logs). We do not collect analytics, advertising identifiers, or behavioral tracking data.

3. How We Use Your Data

We use your data exclusively to:

Create and manage your account
Authenticate you securely via OTP
Verify your enrollment and activate your access to content
Restrict account use to one device at a time
Deliver video lessons and track your progress
Send push notifications relevant to your account
Enable live session participation
Allow the AI assistant feature to answer questions about course content
Delete all your data permanently upon account deletion

We do not use your data for advertising, profiling, or any commercial purpose beyond operating the service.

4. Third-Party Services

We use the following trusted third-party services to operate the app:

Service	Purpose	Privacy Policy
Supabase	Database, authentication, file storage	supabase.com/privacy
Cloudflare R2	Video file hosting	cloudflare.com/privacypolicy
Agora	Live video streaming	agora.io/en/privacy-policy
Expo / Firebase	Push notifications	expo.dev/privacy
Anthropic	AI assistant (course Q&A)	anthropic.com/privacy

These services process data only as necessary to perform their functions. We do not authorize them to use your data for their own commercial purposes.

5. Data Storage and Security

Your data is stored on Supabase infrastructure hosted in the European Union. Video content is hosted on Cloudflare R2. We apply the following security measures:

All data in transit is encrypted via HTTPS/TLS
Authentication uses short-lived JWT tokens
Enrollment documents are stored in private storage accessible only to administrators
Device-level restrictions prevent unauthorized access from other devices

6. Data Retention

Data type	Retention period
Account information	Until account deletion
Enrollment documents	Until account deletion or rejected and replaced
Video progress and downloads	Until account deletion
Push notification tokens	Until account deletion or token renewal
Session logs	30 days maximum

When you delete your account, all your personal data is permanently and irreversibly deleted from our systems.

7. Your Rights

You have the right to:

Access the personal data we hold about you
Correct inaccurate information (name, class) via the app
Delete your account and all associated data at any time via Profile → Delete my account
Withdraw consent by deleting your account

To exercise any of these rights or for any privacy-related request, contact us at: moustaphaissa.pr@gmail.com

8. Children’s Privacy

Massar is intended for secondary school students. We do not knowingly collect personal data from children under the age of 13 without verified parental consent. If you believe a child under 13 has created an account without consent, please contact us and we will delete the account immediately.

9. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the “Last updated” date at the top of this page. For significant changes, we will notify users via push notification or in-app message.

Continued use of the app after changes are posted constitutes your acceptance of the updated policy.

10. Contact

If you have any questions, concerns, or requests regarding this Privacy Policy, please contact: Email: moustaphaissa.pr@gmail.com