Privacy Policy

Last updated: 26 July 2026 · Version 2

This document is the Privacy Policy for the mobile application published on Google Play as GCA (also referred to as "the App"), package name college.pingoo.mobile, developed and operated on behalf of GCA in Banha, Egypt. This policy explains what personal data the App collects, how it is used, how it is protected, and the rights of users.

1. Data we collect

• Account data: your phone number, name, and role (parent or teacher) — required to create an account.
• Child data (entered by the parent, not by the child): name, age, enrolled class or course, attendance records, behavior notes, assessment results.
• Optional photos: a photo of the child that the parent chooses to upload, or a cartoon avatar generated by DiceBear.
• Chat messages between the parent and the teachers / school admin, kept for context in the conversation.
• Usage logs: IP address, device type, and timestamps, used only for security auditing and product improvement.

2. Why we collect it

• To show each parent their own child's schedule, attendance, materials, and progress.
• To let parents and teachers communicate securely inside the App.
• To manage subscriptions and payment installments.
• To make sure every parent sees only their own children and never another family's data.

3. How we protect it

• All network traffic is encrypted end-to-end with HTTPS (TLS 1.2+).
• Passwords are hashed using Argon2 — we never store or see plain text passwords.
• We do not sell your data or your child's data to any third party under any circumstances.
• Data is stored on secured cloud infrastructure with restricted access limited to the authorized technical team.

4. Children's privacy

The App is designed for use by adults (parents and teachers) only. Children do not create accounts or use the App directly. All child-related information inside the App is entered and controlled by the parent who owns the account.

5. Your rights

• You may request deletion of your account and all associated data at any time using our public account-deletion page: https://pingo-production-92f8.up.railway.app/delete-account.
• You can update your child's photo and name from inside the App.
• You can email us at any time with data questions: privacy@example.com.

6. Data retention

We retain your data while your account is active. When you delete your account, we permanently erase your personal data and your children's data within 30 days, except for financial records that Egyptian law requires us to retain.

7. Third-party services

The App uses the following third-party services strictly for the features described above:

• Railway (application hosting) — receives the HTTPS traffic that reaches our servers.
• DiceBear (public avatar API, proxied through our server) — used to render cartoon avatars from parameters. Does not receive any personal data.
• YouTube — teachers may share YouTube links as course materials; clicking a link opens the YouTube app or browser, which is then governed by YouTube's own policies.

8. Updates to this policy

We may update this Privacy Policy from time to time. Any material change will be announced inside the App before it takes effect.

9. Contact

For any privacy question, data-access request, or complaint, contact us directly:

• Email: privacy@example.com
• Postal address: GCA, Banha, Qalyubia Governorate, Arab Republic of Egypt