Privacy Policy

العربية

Last updated: November 6, 2026

This page explains the data collected by the eStudy Android app and Windows program, why we collect it, who sees it, and when it is deleted. The last parts cover this website, and the data of teachers and their assistants.

Who is responsible for your data

eStudy is an educational platform owned by Ahmed Elgamal in Egypt, and it is the party that stores and protects your data. Each teacher on eStudy has their own platform that they manage themselves, so the teacher and their assistants see the data of their own students in their platform only, each assistant according to the permissions the teacher gives them.

  • Your account is the same with all teachers: every teacher whose platform you joined sees your name, code and mobile number, while the rest of your data (subscriptions, viewing, grades, messages and so on) is kept separately with each teacher and is not visible to any other teacher.
  • The eStudy administration can see all data, to serve you, solve problems and protect the platform, including the private messages between you and the teacher.
  • A teacher does not know who your other teachers are, and cannot see any of your data with them.

Your account data

Full name, mobile number and password
Purpose: Creating your account, signing in and contacting you. The password is stored encrypted in a way that cannot be read, and nobody can see it, not even the teacher or the platform administration.
Student code: a number given to your account automatically
Purpose: Identifying your account with the teacher and when you contact us, and the watermark.
The list of platforms you joined, and the date and way you joined each one (you registered yourself, the teacher added you, or from an Excel file)
Purpose: Signing in to your platforms and showing them to you in “My platforms”.
Answers to the “registration fields” each teacher asks for when you join their platform (they may include a parent’s number, the school year or the tutoring center)
Purpose: Organizing students for the teacher, and the parent report. Only the teacher who asked for them sees your answers.

The teacher may also create your account with the same data (one by one or from an Excel file) instead of you registering in the app.

Data collected while you use the app

An identifier for your phone that Android gives to this app only, an identifier for your computer from Windows, the history of moving the account between devices, and sign-in attempts from a device not linked to your account
Purpose: Linking your account to the allowed number of devices (usually one phone and one computer), and technical support. The identifier is stored on the server in a transformed form from which the original cannot be recovered. The app does not use the advertising ID, the SIM or device number (IMEI), or network addresses.
Device data: its name as set in its settings, its model, operating system version, app version, whether it is a tablet, and the date of first sign-in and last use
Purpose: Shown to the teacher and technical support on your page, to serve you and solve problems.
Your last activity in each platform, and the record of when you opened lectures
Purpose: Teacher reports (such as the list of students who did not open the platform or a new lecture). Your last activity in one platform is not shown to any other teacher.
Video watching and listening percentages, the stopping point, the last page in the handout, your notes on videos, the stars on dictionary words, and playback settings (video speed, subtitles and their size, dictionary playback)
Purpose: “Continue where you stopped”, “My studying” and teacher reports, and the view limit if the teacher set one.
Answers to exams and homework, including text, photos and voice recordings in essay answers, start and submission time, the number of times the question audio was played, and the grades and the grader’s comment
Purpose: Grading and results.
Attempts to record or capture the screen, to show it on another screen, emulators, and modified (rooted) phones, with the content name, device and time
Purpose: Content protection.
Your subscriptions and their dates, the activation codes you used, and requests to subscribe, renew, move to another device or delete the account
Purpose: Opening content for you and calculating when a subscription ends, and serving you and answering your requests.
Private chat messages between you and the teacher: text, photos, PDF files and voice messages, with replies, and the last message you read
Purpose: Communication between you and your teacher. They are seen by the teacher, the assistants allowed to handle messages, and the platform administration.
The list of videos and listening exercises you downloaded inside the app: the content, quality, size, device and date, and live session attendance: first join time, last join time and number of joins
Purpose: Shown to the teacher on your page, locking your downloads when your subscription ends, and following attendance.
The notifications you receive, reading and opening them, and the Firebase notification token
Purpose: Your notification list and delivery to your phone, and the number of students who opened each notification in the teacher’s log.
WhatsApp messages the platform sends you: the message text, your mobile number, its status (sent or failed) and time
Purpose: Sending platform notifications on WhatsApp, and the teacher’s log of what was sent.
The number of wrong sign-in attempts, activation codes and platform codes
Purpose: Temporary locking when they repeat, to protect your account and the platforms from guessing.
Error numbers: when an unexpected error happens on the server, its number is recorded with what was happening, the time, the device and browser type, and the account type (student or teacher), without your name or data
Purpose: Solving problems, when you send us the error number shown to you. It is deleted after 90 days.

Data added by the teacher or an assistant

  • The groups you are in (such as a tutoring center name or a class time), to organize students, open content and send notifications to a whole group at once.
  • Private notes the teacher writes on your page, which are not shown to you.
  • Suspending your account in their platform and the reason (the reason is shown to you), and extra views if the teacher set a view limit.
  • Your presence or absence in classes, if the teacher or an assistant records it.
  • Payments: the agreed price, the payments the teacher records (amount, date, method and a note), the remaining amount, and the next payment date. They are shown to you in the app to follow your subscription, and you get a reminder of the payment date. The payment itself happens with the teacher outside the app, and the app never asks for any payment details.

How content protection works

The app blocks screenshots and screen recording on the video, listening exercise, handout, exam and homework, and answer review screens.

To detect recording attempts, the Windows program checks the names of programs running on the computer and signs of a virtual machine, and the Android app checks for known apps that modify the phone (root) or run Android on a computer, and for screens connected to the phone. This check happens on your device only, and nothing is sent to the server except the type of attempt if one is detected, not the list of programs and not a picture of the screen.

Your name, your code, or both may appear as a watermark on videos and handouts, and on the copy of a handout you download, according to each teacher’s settings.

Permissions the app asks for

  • Camera: on Android to scan the QR code of a teacher’s platform, and to take a photo for an essay answer or a photo you send in chat, and on Android and Windows for the camera in live sessions if you turn it on. It is requested the first time you use it, and works only while in use.
  • Microphone (Android and Windows): to record an essay answer or a voice message in chat, and to speak in live sessions if you turn it on, only while in use.
  • Storage (Android 7 to 9 only): to save a handout to the Downloads folder when you tap “Download”, if the teacher allows downloading it. Android 10 and newer do not need this permission.
  • Notifications (Android 13 and newer): to show platform notifications and chat messages, and the download progress notification.

Choosing a photo from the gallery or a PDF file for chat is done with the Android or Windows picker, so the app only reaches what you choose. The app does not ask for your location, your contacts, or your phone number from the device.

What is stored on your device only

This data stays on your device and is not sent to us:

  • Your recent searches.
  • Dark mode, sound effects, volume, repeat and pause settings in listening exercises, and the window size on Windows.
  • The name, logo and color of the platforms you opened, to show the welcome screen without internet.
  • Temporary dictionary audio files, deleted when you sign out.
  • Your writing on handouts (pen, highlighting and text), deleted when the handout file changes.
  • Videos and listening exercises you download, stored encrypted and playable only inside the app.

The app also stores your sign-in on your device, encrypted with the operating system’s protection, so you do not type your password every time. If the internet is cut, viewing and answers are kept on your device temporarily and sent to the server when the connection returns. A handout you download stays in the Downloads folder until you delete it. If your account is deleted, your downloads and your writing on handouts are deleted from the device, and all of the above is deleted when you uninstall the app.

Outside services

Your data is stored on the platform’s server, and we use only these outside services:

  • YouTube (Google): videos play through the YouTube player inside the app, and downloading them inside the app is done directly from YouTube, so YouTube receives what any YouTube player receives (such as the internet address and device type), subject to Google’s privacy policy.
  • Firebase (Google): only to deliver notifications to your phone. It receives the notification token and the notification text, including the first line of a chat message and the sender’s name.
  • ML Kit (Google): scanning a QR code happens on your phone itself, and the camera image is not sent to anyone. The library may send Google general data about how it works (such as the device model and system version) to improve its performance.
  • Zoom (Zoom Video Communications): live sessions run through Zoom using the teacher’s own account, so Zoom receives your name and code as they appear in the meeting, your voice and video if you turn them on, and what any Zoom page receives (such as the internet address and device type), subject to Zoom’s policy.
  • WhatsApp: when you tap a button that opens WhatsApp (such as “Subscribe” or “Technical support”), a ready message is written with your name and code, and it travels through WhatsApp when you send it yourself. Platform notifications may also reach you as WhatsApp messages on your registered mobile number from the teacher’s own number, so WhatsApp receives your number and the message text, subject to WhatsApp’s policy.
  • Google’s text-to-speech service: it receives only the dictionary words and examples the teacher writes, to generate their pronunciation, and receives no data about you.
  • The hosting company Hetzner Online GmbH (Germany): the platform’s server runs on it and its data is stored there. The server is in Finland, inside the European Union.
  • Cloudflare: every connection between the app, the program or the website and the server passes through it for protection and encryption, so it receives your device’s internet address.
  • Google Drive: a backup copy of the server data is kept there, encrypted so it cannot be read without the encryption password.

We do not sell your data, and we do not share it with anyone for advertising. There are no ads, trackers or advertising analytics in the app or on the website.

Protecting your data

  • The connection between the app, the program, the website and the server is encrypted.
  • The platform’s server does not log visitors’ addresses, and keeps an error log only, deleted after 90 days.
  • Handouts, photos, recordings and chat attachments open through temporary links that expire within minutes, after checking your access.
  • Each teacher and their assistants reach the data of their own platform’s students only, and the server checks this on every request.
  • We temporarily lock attempts when a wrong password, activation code or platform code is repeated, to protect your account from guessing.

How long data is kept

  • Your data is kept as long as your account exists.
  • Notifications are removed from your list after 90 days, and the log of sent WhatsApp messages is deleted after 90 days.
  • Exam data (answers, grades and attachments) and chat messages and their attachments may be deleted by the teacher with the “Data cleanup” tool at the end of a term or year.
  • The Excel file a teacher uses to add students is deleted from the server 7 days after it is uploaded.
  • Backups are deleted automatically within 30 days, on the server and on Google Drive.
  • If your account has not belonged to any platform for a year, it is deleted automatically.
  • If a teacher removes you from their platform, only your file with that teacher is deleted (your subscriptions, viewing, grades, messages and so on in their platform), and your account and other platforms stay as they are.

Deleting your account and changing your data

You can ask for your account and data to be deleted from the app with your password, or from the Delete Account page with your mobile number and password. The account is deleted within 7 days of the request, it is removed from all your platforms, and your subscriptions in them are cancelled.

Permanently deleted: the account and its devices, and with every teacher: your subscriptions, viewing, notes, grades, answers and their attachments, downloads and writing on handouts, attendance in live sessions and classes, payments, private messages, dictionary stars, registration field answers, groups, requests and notifications, and the WhatsApp messages sent to you.

Kept: a small summary with each teacher (name, code, deletion date, number of subscription days and activity numbers) until the teacher’s monthly invoice to the platform is fully paid, lines with your name and code in the activity log to know what was done on the account, backups until they are deleted automatically within 30 days, and a transformed fingerprint of your sign-in tokens that does not identify you for 30 days, so the app on your devices knows the account was deleted and removes your downloads from them. Your student code also stays reserved and is never given to anyone else.

Your data is shown to you inside the app, where you can also change your password. To change your name or mobile number, contact technical support: the platform administration changes them, because they are shared by all your platforms.

Children

The app is used by students of all ages, including children under 13 (such as primary school students). Children under 13 may use the app on condition that a parent or guardian creates the account or approves it, and the parent or guardian is responsible for its use.

  • We collect from children only the same data described on this page, which is needed for studying with the teacher.
  • There are no ads, trackers or advertising analytics in the app, and the app does not use the advertising ID or location.
  • A parent or guardian can ask to see, change or delete a child’s data, from the Delete Account page or by contacting us.

This website

  • The website needs no account for students, and does not use any cookies for tracking.
  • If you choose dark mode on the home page, your choice is saved in your browser in a small cookie named theme (containing only light or dark) for one year, so it applies to all pages of the website. It is not used for anything else.
  • The intro video on teachers’ pages is not loaded from YouTube until you tap play.
  • Fonts and images are loaded from the platform’s own server, not from an outside party.
  • The Delete Account page sends the mobile number and password to the server to confirm the account owner. When wrong details are entered, your device’s internet address is saved in a transformed form from which it cannot be recovered, to prevent guessing, and it is deleted after 15 minutes.
  • The “Teacher sign-in” window saves a random number in the browser that does not identify a person. When a wrong code is entered, this number and the internet address are saved in a transformed form that cannot be recovered, to prevent guessing, and they are deleted within an hour.

Data of teachers and their assistants

  • Name, mobile number and password (encrypted, cannot be read), email for the teacher, and permissions.
  • The browser type of each sign-in to the control panel, and the number of wrong sign-in attempts, to protect the account and for technical support.
  • Permission for control panel notifications in the browser, if the teacher or assistant turns them on.
  • The log of actions each of them takes in their platform (such as opening a subscription or recording a payment), for the teacher to see.
  • Emails (such as a password change link) are sent through the Resend service, which receives the email address and the message text.

Changes to this policy

If what the app or the website collects changes, we update this page and change the “Last updated” date at the top.

Contact

App owner: Ahmed Elgamal, Egypt. For any question or request about your data, contact us: