Privacy Policy for Hamel Al-Mesk (حامل المسك)

Effective date: September 20, 2026
Last updated: September 27, 2026

This Privacy Policy explains how the Hamel Al-Mesk (حامل المسك) educational application (the “App,” “Hamel Al-Mesk,” “we,” “us,” or “our”) processes, uses, stores, and shares information. The App is designed for kindergarten children and is used with accounts provided or authorized by a parent, guardian, school, nursery, or other educational institution. The student-account backend uses Odoo and is managed by the kindergarten team.

Student names and profile images are used to help children recognize their accounts within the App. They are not used for advertising or tracking across other companies’ apps or websites. The App also uses technical services that process diagnostic, installation, and device information, as explained below.

1. Information We Process

Account, profile, and support information

• Login information: username and password submitted to authenticate an existing student account. The App does not offer public, self-service account creation.
• Student profile information: student identifier, student name, profile image or avatar, grade, and assigned course information returned by the educational backend after login.
• Support communications: information included when a parent, guardian, or institution contacts us for help, privacy inquiries, or deletion requests.

How student names and profile images are used

Student names and profile images are supplied by the kindergarten-managed educational backend after successful login and displayed within the App so children can recognize their accounts and feel familiar with the learning experience. The App does not ask children to upload a profile photograph from their device.

Neither the App nor the kindergarten backend uses these names or profile images for targeted advertising, advertising measurement, or tracking across other companies’ apps or websites. They are not shared with data brokers. Displaying information associated with a student account is separate from using that information for advertising-related tracking.

Technical information

Connections to the educational backend and technical service providers may involve processing the following information, depending on the service:

• Internet Protocol (IP) addresses and basic network information;
• app version, operating system, device model, language, time zone, and country code;
• Firebase installation identifiers, crash-reporting identifiers, and similar app-instance identifiers;
• crash reports, stack traces, application state, error messages, timestamps, and diagnostic context;
• technical request details that may appear in service logs or error reports, such as URLs, request methods, response status, and request times; and
• application update information, such as the application identifier, release version, patch number, platform, and processor architecture.

We use these services to operate, configure, maintain, and troubleshoot the App. We do not use this information to advertise to children or build advertising profiles.

Information stored on the device

The App stores language preferences, login status, student session/profile information, and an authentication token on the device. Authentication tokens are stored using secure device storage where supported. The App also caches educational content to reduce repeated downloads.

2. Advertising, Tracking, and Device Features

The App:

• does not display third-party advertisements;
• does not sell personal information or share it with data brokers;
• does not use student names or profile images for tracking across other companies’ apps or websites;
• does not request access to device location services;
• does not provide features for children to capture or upload photographs, videos, or voice recordings;
• does not access contacts, SMS messages, or call logs;
• does not process payments or payment-card information; and
• does not provide chat, public posting, or social-networking features.

Interactive drawing, tracing, coloring, matching, and similar exercise input is used to operate activities on the device and is not intended to be uploaded as personal content.

3. How We Use Information

We use information to:

• authenticate students and maintain their sessions;
• provide the appropriate courses, lessons, books, media, and exercises;
• display the student’s name and avatar within the App;
• deliver, configure, and update App functionality;
• maintain security and prevent unauthorized access;
• diagnose errors and improve reliability and performance;
• respond to support, privacy, and deletion requests; and
• comply with applicable legal obligations.

Student profile information is used for the educational experience and account functionality, not targeted or behavioral advertising.

4. Service Providers and Information Sharing

Information is processed or disclosed as needed to provide the services described in this policy:

• Kindergarten and educational account provider: the kindergarten team manages the Odoo backend and student accounts. The institution may hold and administer student profile information and educational content assignments.
• Backend hosting and service systems: login credentials and authenticated requests are transmitted to the educational backend to authenticate the student and provide content.
• Google Firebase: Firebase Remote Config supplies operational configuration, Firebase Crashlytics supports crash diagnosis, and Cloud Firestore receives technical exception reports. These services may process installation identifiers, device and app information, network information, crash data, and diagnostic records. See Firebase Privacy and Security and Firebase’s Apple platform data disclosures .
• Shorebird: the App includes Shorebird to check for and deliver application patches. Update requests include application and release information and technical information needed to select a compatible patch. Depending on the updater version, requests may also include an anonymous installation identifier. Service infrastructure may process IP addresses in operational logs. See Shorebird’s technical FAQ and Shorebird’s Privacy Policy .
• Legal and safety purposes: information may be disclosed when reasonably necessary to comply with applicable law or valid legal process, or to protect users and the service.
• Business transfers: information may be transferred as part of a merger, acquisition, reorganization, or sale of assets, subject to applicable law and relevant privacy obligations.
• Authorized requests: information may be disclosed in response to a valid request or authorization from a parent, guardian, institution, or other authorized party, where permitted by applicable law.

We do not share student names or profile images with third parties for their independent advertising or marketing. Technical service processing described above is separate from the in-app display of student profiles.

5. Children’s Privacy

Hamel Al-Mesk is designed for kindergarten children. Student accounts are provided or authorized by a parent, guardian, school, nursery, or educational institution. The App does not allow children to publicly post information, communicate with unknown users, make purchases, or receive behavioral advertising.

Any parental consent or institutional authorization required by applicable law must be obtained through an appropriate process. This privacy notice does not itself constitute parental consent.

Parents and legal guardians may ask to review, correct, or delete their child’s personal information, or withdraw consent where applicable, using the contact details below. We may need to verify the requester’s identity and authority. Where the kindergarten controls the account, we will coordinate with or direct the request to that institution.

If you believe a child’s information was provided without appropriate authorization, please contact us.

6. Privacy Rights

Depending on applicable law, parents, guardians, and other authorized individuals may have rights to:

• request access to or a copy of personal information;
• correct inaccurate information;
• request deletion of personal information;
• restrict or object to certain processing;
• withdraw consent where processing relies on consent;
• request data portability; and
• complain to a competent data-protection authority.

Requests can be submitted using the contact details below. Available rights and any exceptions depend on applicable law and which organization controls the information.

7. Data Retention

Retention depends on the type of information and the organization or service that holds it:

• The App removes its stored authenticated session and authentication token when the user logs out.
• Student account records held by the kindergarten’s educational backend are managed under the institution’s retention arrangements and applicable law.
• Firebase and Shorebird service data is subject to the relevant service’s retention practices and any applicable project configuration.
• Technical exception records stored in our Firestore database are managed separately from Crashlytics records. Requests concerning these records can be sent to the contact address below.
• Support and privacy-request records may be retained as needed to respond to requests and meet applicable obligations.

Backup retention may differ from retention in active systems. Contact us for information about a particular record or deletion request.

8. Deletion Requests

Logging out removes the locally stored authenticated session and authentication token. It does not delete the student account from the educational backend. Uninstalling the App also does not delete server-side account records, and some secure credentials or backup copies may persist depending on the operating system and device settings.

To request deletion of a student account or associated personal information, a parent, guardian, or authorized institution may email info@hamelalmesk.com with:

• the subject “Hamel Al-Mesk Data Deletion Request”;
• the student username or identifier, without the password; and
• the requester’s relationship to the student and the institution that issued the account.

We will verify the requester’s identity and authority and handle information under our control in accordance with applicable requirements. Where the kindergarten controls the account or relevant records, we will coordinate with it to address the request.

9. Security

We use safeguards designed to protect information, including encrypted network transport and secure device storage for authentication tokens where supported. No method of transmission or storage is completely secure.

Please do not include passwords or unnecessary sensitive information in support messages.

10. Storage and International Processing

The kindergarten team manages the hosting arrangements for the Odoo educational backend. Questions about the location of student account records can be directed to the kindergarten or to us for coordination.

Technical service providers, including Google Firebase and Shorebird, may process information outside the user’s country. Processing locations depend on the service and its configuration. Further information is available in the providers’ privacy documentation linked above.

11. External Content and Links

The App may retrieve educational materials from remote servers. Requests to those servers necessarily disclose network information such as the requesting IP address. Where an independent external website is opened, its own privacy policy also applies.

12. Changes to This Policy

We may update this policy to reflect changes to the App, its services, or applicable requirements. We will publish the revised policy and update the date above. Additional notice or consent will be provided where required.

13. Contact Us

For privacy questions, parental requests, or complaints concerning Hamel Al-Mesk:

• Email: info@hamelalmesk.com
• Phone: +965 22 280 404

Please do not include a password in any message.