Terms of Use & Privacy Policy

1. Acceptance of Terms

By accessing or using Scolara, you agree to be bound by these Terms of Use. If you do not agree, please do not use the platform. These terms apply to all users: teachers, students, and parents.

2. Description of Service

Scolara is an educational platform for tutoring centers. Center managers and their teachers can organize classrooms, share resources, assign work, create quizzes, run live sessions, and follow student progress. Students can join their center's classrooms, submit work, and take quizzes. Guardians can receive authorized progress information and optional notifications.

3. User Accounts

Access is organized by the tutoring center:

• Center managers: receive an owner account from Scolara and manage the center's teachers, students, classrooms, and settings.
• Teachers: receive an account from their center manager and access only the center and classrooms assigned to them.
• Students and guardians: use the enrollment and access methods provided by their center. Guardian links and Telegram linking are optional and must be kept private.
• You are responsible for keeping your login credentials confidential.

4. Acceptable Use

You agree not to:

• Use the platform for any illegal or unauthorized purpose.
• Upload content that is offensive, harmful, or violates the rights of others.
• Attempt to access accounts or data belonging to other users.

5. Intellectual Property

Teachers retain ownership of the content they create and upload (quizzes, resources, assignments). Scolara does not claim ownership of user-generated content. The Scolara platform, its design, and code are the property of Scolara.

6. Limitation of Liability

Scolara is provided "as is" without warranty of any kind. We strive to keep the platform available and reliable, but we cannot guarantee uninterrupted access. Scolara shall not be liable for any loss of data or any indirect damages arising from the use of the platform.

7. Changes to Terms

We may update these terms from time to time. Continued use of the platform after changes constitutes acceptance of the new terms. We will indicate the date of the last update at the top of this page.

Legal framework

In Algeria, processing is governed by Law No. 18-07 of 10 June 2018, amended and supplemented by Law No. 25-11 of 24 July 2025, under the supervision of the National Authority for Personal Data Protection. The GDPR is referenced only when a processing activity falls within its scope.

Law 18-07 — Official Journal · Amending Law 25-11 · ANPDP

1. Data Controller

Scolara operates the platform and determines the processing needed for accounts, security, service operation, and support. Each tutoring center determines which students, guardians, teachers, classrooms, and educational records it manages and may therefore also be a data controller for that center's records. Questions can be sent to:

• Email: contact@scolara.net

2. Data We Collect & Legal Basis

We limit collection to data needed to provide and secure the service. In Algeria, processing is governed primarily by Law No. 18-07, as amended by Law No. 25-11, including its rules on consent, contracts, legitimate interests, and children's data. Where the GDPR applies, the corresponding Article 6 legal bases are used.

• Center and staff accounts: center name, manager and teacher names, usernames, email, phone, roles, and hashed passwords — needed for the service contract, access control, and security.
• Students: name, email and phone when provided, center relationship, and classroom memberships — needed for enrollment and education management authorized by the center and legal representative.
• Guardians and enrollment authorization: name, relationship, phone, email, authorization status, evidence type, date, source, and the staff member who recorded it. The center keeps the underlying paper or other evidence.
• Educational records: quiz answers, assignment submissions, grades, attendance, resource views, teacher remarks, schedules, and announcements — needed to provide education and follow progress.
• Uploaded files: center images, teaching resources, assignment files, and student submissions.
• Live-session evidence: room/session identifiers, teacher and student join/leave times, connection counts, aggregate connection duration, signed-event status, and whether microphone, camera, or screen share was used at least once. Scolara does not store the audio, video, screen content, recordings, or transcripts.
• Security and audit data: last-login IP address and time, account actions, and responsibility history — needed to prevent abuse and establish who performed important student-management actions.
• Optional communications: a Telegram chat identifier and notification delivery data are processed only when a guardian voluntarily links Telegram.

3. Minors' Data

Students may be minors. Under Article 8 of Algeria's Law No. 18-07, processing a child's personal data requires the consent of the legal representative or, where applicable, authorization from the competent judge. Scolara lets the center record the guardian, authorization status, source, time, and responsible staff member; the center must keep the underlying evidence. This enrollment authorization does not authorize photography or recording. We do not commercially profile students or use their data for advertising.

4. Cookies

Scolara uses the following cookies:

• Session cookies (scolara-admin, scolara-platform): strictly necessary for authentication. Duration: 7 days. No consent required.
• CSRF cookie (scolara-csrf): strictly necessary for security (prevents cross-site request forgery). Duration: 7 days. No consent required.
• Language preference cookie (lang): stores your language choice (Arabic, French, or English). Duration: 1 year. Set only with your consent.
• We do not use any analytics, advertising, or tracking cookies.
• We record your last login IP address and timestamp for security purposes (fraud prevention). This data is overwritten on each login and is not shared with third parties.

5. Third-Party Services

The platform currently relies on these service providers. Data locations and international transfers are assessed and configured as part of Scolara's deployment and legal obligations:

• Railway: hosts the application, PostgreSQL database, uploaded files, and rolling application backups.
• LiveKit Cloud: transports live audio, video, screen share, and data during a class and sends signed participation events to Scolara. Cloud recording and transcription are not enabled by Scolara.
• Telegram: used only for optional guardian notifications and authorized operational alerts. Linking a guardian account is voluntary.
• The LiveKit client, editor, math libraries, and fonts are served from Scolara itself; the site does not contact Google Fonts or a public JavaScript CDN for these assets. We do not sell or rent personal data for marketing.

6. Data Security

We implement appropriate technical measures to protect your data:

• All connections are encrypted via HTTPS (TLS).
• Passwords are irreversibly hashed using bcrypt.
• Access to student data is restricted by authenticated center roles and classroom membership; center managers have center-wide administrative access and teachers access their assigned work.
• Parent progress reports are accessible only via a unique private link.

7. Your Rights (Algerian Law and GDPR Where Applicable)

Algeria's Law No. 18-07, as amended, gives data subjects rights that include information, access, rectification, and objection. Additional GDPR rights apply when a processing activity falls within the GDPR's territorial scope.

• Right to information under Article 32 of Algeria's Law No. 18-07.
• Right of access under Article 34: ask whether your data is processed and obtain the information or a copy available to you.
• Right to rectification under Article 35: correct, update, or complete inaccurate or incomplete data.
• Right to object for legitimate reasons under Article 36, subject to the exceptions provided by law.
• Where processing relies on consent, the person concerned or legal representative may withdraw that consent, without affecting earlier lawful processing.
• Where the GDPR applies, rights may also include erasure, restriction, portability, and objection under GDPR Articles 17, 18, 20, and 21.
• To exercise any of these rights, contact us at: contact@scolara.net
• In Algeria, you may submit a complaint, appeal, or grievance to the ANPDP. If another supervisory authority is competent, you may contact that authority as well.

8. Data Retention

Data is kept only for the service, evidence, security, and legal periods that apply. Removal from one classroom does not by itself delete the student's center record:

• Student, guardian, authorization, and responsibility records are kept while the center relationship is active and afterward only where needed for a valid educational, evidentiary, security, or legal purpose.
• Educational records and uploaded files are kept while the relevant classroom or center record is active, then deleted or anonymized when no longer needed, subject to legal holds and valid requests.
• Scolara currently keeps seven rolling daily backup generations. Data deleted from the active service may remain in encrypted or access-controlled backups until those generations expire.
• Billing and manually recorded payment information is kept for applicable accounting and legal obligations.

9. Contact & Complaints

For questions or to exercise a right, contact contact@scolara.net and identify the center and person concerned without sending unnecessary sensitive data. In Algeria, complaints may be submitted through the ANPDP complaint portal; other competent supervisory authorities remain available where applicable.