Privacy Policy
Last updated: 8 October 2026
This policy explains what personal data Subjex holds, why, who can see it, and what you can ask us to do with it. It follows Egypt’s Personal Data Protection Law (Law No. 151 of 2020) and its Executive Regulations.
1. Who we are
Subjex (subjex.app) is an online platform that teachers in Egypt use to run their classes. It is run from Egypt by its owner (“Subjex”, “we”, “us”), who decides how the personal data in it is used — the data “controller”. Contact: support@subjex.app.
2. Children
Most students on Subjex are under 18. Egyptian law treats children’s data as sensitive and requires the consent of a parent or legal guardian.
- A student under 18 may create an account only if a parent or legal guardian agrees. The student confirms this with a tick box when signing up.
- A parent or guardian can link to their child’s account at any time, see what the child’s teachers record, and ask us to correct or delete the child’s data.
- We collect from children only what they need to take part in their classes. We do not ask for a child’s date of birth or home address.
3. What we collect
- Account details: your name (for students and parents, the first name and the first letter of the family name), email address, password (stored only in a scrambled, “hashed” form we cannot read), the kind of account (student, parent or teacher), and the codes Subjex gives you (Student ID, parent PIN, teacher code). A phone number, if you choose to add one.
- Teachers also: phone number, subjects, city, a short bio if added, and an optional profile photo shown to their students. For teachers who asked us to call them back through the earlier “Join us” form on our website (closed in October 2026): the name, phone number, subject, centre and city they gave.
- Learning records in a group: which groups a student asked to join or belongs to, attendance marks, work handed in (with any files and notes), grades and teacher feedback, and lessons marked as done.
- What teachers add: groups, lessons, course materials (files), assignments, and live-session times and links.
- Links between parents and children, and records of failed attempts to link or to sign in (to stop guessing).
- Your agreement: which version of the Terms of Use and this policy you accepted, and when.
- Technical data: our hosting providers record technical information such as IP address, browser type and the time of each visit, to keep the service working and secure.
We do not ask for national ID numbers, payment card details or health information.
4. Why we use it
- To run your account and the classes you take part in: teachers see their students’ work, attendance and grades; students see their own; parents see their children’s.
- To keep Subjex secure and prevent misuse — for example, limits on guessing PINs and passwords.
- To answer you when you contact us, and to send the emails your account needs (confirming your email address, resetting a password).
- To meet our legal obligations.
We do not sell your data, show advertising, use tracking or analytics tools, or use your data to train artificial intelligence. We do not send marketing emails; if we ever want to, we will ask for your consent first, and you can stop them at any time.
5. The legal basis
We process personal data with your consent, which you give by ticking the boxes when you sign up, or by accepting on the screen that asks you after you sign in. For a child under 18, it is processed with the consent of their parent or legal guardian. You can withdraw consent at any time (see section 8). Withdrawing does not undo what was done before, and we may not be able to keep an account open without the data it needs.
6. Who can see your data
- Your teachers: the name, Student ID and learning records of the students in their groups.
- Linked parents: their own child’s groups, grades, feedback and attendance.
- Other users: your name as saved (first name and initial), the kind of account and your code can be seen by other signed-in users — for example when a teacher looks at a request to join, or a parent links to a child. Your email address and phone number are not shown to them.
- Subjex’s owner and staff: account details and learning records (groups, grades, feedback, attendance) and a student’s linked parents’ contact details, to give support (for example to confirm an email address or set a new password) and to keep the platform safe. Each staff member sees only the accounts of the teachers they look after; the owner can see all accounts.
- Our service providers, who process data for us under their own security commitments: Supabase (database, sign-in, file storage and account emails), Cloudflare (hosting and delivering the website), jsDelivr (delivers one program file the website uses) and Google Fonts (delivers the website’s fonts). The last two receive only technical data, such as your IP address.
- Meeting platforms (Zoom, Google Meet, Microsoft Teams) receive data from you only when you open a session link; their own privacy policies apply.
- Authorities, when Egyptian law requires us to share data.
7. Where your data is kept — outside Egypt
Our service providers keep Subjex’s data on servers outside Egypt: Supabase stores the database and files in its data centres abroad, and Cloudflare serves the website from its network around the world. When you agree to this policy you consent to this transfer. We choose providers that protect data with strong security measures, and we will complete any licence or permit that Egypt’s Personal Data Protection Center requires for it.
8. Your rights
You — or, for a child, the parent or legal guardian — have the right to:
- know what data we hold about you, and get a copy;
- have it corrected or completed;
- have it deleted;
- withdraw your consent;
- ask us to limit how we use it, or object to a use;
- be told if your data is affected by a security breach.
Write to support@subjex.app from the email address of the account. A parent writes from their own account’s email and gives the child’s Student ID. We may ask you to confirm who you are. We answer within six working days, as the law requires.
If you are not satisfied with our answer, you can complain to Egypt’s Personal Data Protection Center.
9. Cookies and browser storage
Subjex does not use advertising or tracking cookies. Your browser stores only what the site needs to work: your sign-in session, your language choice, and short-lived notes for the page you are on. Logging out removes your sign-in from that browser.
10. How long we keep data
- We keep your account and its records while the account exists, so that students and parents can look back at their history.
- When you ask us to delete your account, we delete it and the data linked to it within 30 days, except anything the law requires us to keep. For a student, that is their group memberships, attendance, the work they handed in (including files), grades and feedback, and parent links. Our provider keeps backup copies for a limited time, after which they are deleted automatically.
- When a teacher deletes their account, the groups they made stay available to their students, with the students’ records, unless the teacher also asks us to delete the groups.
11. Security
We protect data with: encrypted connections (HTTPS) everywhere; passwords stored only in hashed form; database rules that let each person reach only what they are allowed to see; private file storage, opened only through short-lived links; limits on repeated guesses of PINs and passwords; and an on-screen watermark with the viewer’s name on course materials, to discourage copying. No system is perfectly secure. If a breach puts your data at risk, we will tell Egypt’s Personal Data Protection Center within 72 hours, and tell you within three working days after that, as the law requires.
12. Changes to this policy
We will update this policy when Subjex changes. The date at the top shows the latest version. For an important change we will ask you to accept it again the next time you sign in.