Privacy Policy

What Waqar Does

Waqar helps Quran schools and centers manage schools, circles, students, teachers, admins, parents, attendance, recitation sessions, Quran progress, notes, reports, exports, notifications, and plan controls.

Data We Process

• Account data: name, email, phone, password hash, profile photo, verification status.
• School data: school name, type, city, logo, approval and plan status.
• Student data: name, date of birth, gender, phone, parent link, current surah/ayah, status, notes.
• Halqa, teacher, attendance, session, recitation, rating, mistake tag, and report data.
• Notifications, weekly summary email data, uploaded profile photos and school logos.
• Technical data: sessions, essential cookies, request metadata, IP addresses, logs, and security records.

Why We Use Data

We use data to provide the service, authenticate users, control school access, record attendance and recitations, generate reports, enable parent visibility when configured, send transactional emails, enforce plan limits, provide support, and protect the service.

Schools and Student Data

For school records, the school normally controls the data and Waqar acts as a service provider. Schools are responsible for having the right authority or consent to enter student, parent, teacher, and school data into Waqar.

Sharing

We do not sell school, student, parent, or teacher data. We may use hosting providers such as OVHcloud, email providers such as Nuntly or SMTP providers, and backup/storage providers when needed to operate the service.

Security

Waqar uses bcrypt password hashing, server-side sessions, HTTP-only cookies, role-based school access, tenant checks, CSRF protection, upload validation, deployment secrets, TLS through Nginx in production, and encrypted backup tooling. No system can guarantee absolute security.

Cookies

Waqar uses essential cookies for login sessions, CSRF protection, and language preference. The current application does not require advertising or tracking cookies.

Retention, Export, and Deletion

We keep data while a school account is active and as needed for service, backup, support, security, legal, or contractual reasons. Schools may request export or deletion. Production deletion is targeted within 30 days after an approved request, while encrypted backups may retain deleted data until backup expiry.

Contact

For privacy or data questions, contact support@waqar.app.