Privacy Policy

Last updated: October 2026

Who we are

MadrasahOS is run by TIME94 LTD, registered office 20 Wenlock Road, London, England, N1 7GU, company number 17276097. We provide school management software for madrasahs. In this policy, "we" and "us" mean MadrasahOS. You can contact us at [email protected].

Our role

We act in two roles. For the account details of people who sign up to MadrasahOS, we decide how the data is used, so we are the "controller". For the records a madrasah keeps about its students, parents and staff, the madrasah decides how the data is used and we act on its instructions as its "processor". If you want to see, correct or delete a student record, please contact your madrasah first.

What data we collect

  • Account details: your name, email address, phone number if you give one, the madrasah you belong to, and your login details.
  • Madrasah records: information that madrasahs and their users enter, such as student, parent and staff details, attendance, Quran and Hifz progress, behaviour, assessments, homework, fees and payments, messages, posts, photos, voice notes and videos. This can include information about children.
  • Payments: card payments are handled by Stripe. We do not store full card details.
  • Technical data: your IP address, browser and device type, and logs of errors and security events.
  • Notifications: if you turn on push notifications, we store a notification address for your device so we can send them.
  • Sign in with Google: if you choose it, we receive your name and email address from Google.

How and why we use it

  • To provide the service you or your madrasah signed up for (contract).
  • To keep the service secure, fix problems, provide support and improve it (our legitimate interests).
  • To meet legal obligations, such as tax and accounting records.
  • To send push notifications, only if you agree (consent). You can turn them off at any time in your device or browser settings.

We do not sell personal data and we do not use it for advertising.

Who we share it with

We use these types of service provider to run MadrasahOS, and they only receive what they need:

  • Hosting and storage: Microsoft Azure
  • Email delivery: Microsoft (Microsoft 365 email)
  • Payments: Stripe
  • Error monitoring: Sentry
  • Security and performance: Cloudflare
  • Sign in: Google, if you choose to use it

Within a madrasah, information is visible to the people that madrasah gives access to, such as teachers, administrators and parents or guardians. We may also disclose information where the law requires it.

Where data is stored

Our main servers are located in the United Kingdom. Some of our providers may process data outside the UK. Where that happens we rely on the safeguards the law requires, such as approved contract terms.

Security

Data is sent over encrypted connections (HTTPS). Each madrasah's data is kept in a separate database area, and access is limited to people who need it. Two-step login is available. No system is completely secure, so we cannot guarantee absolute security.

How long we keep it

We keep account details while your account is active. A madrasah's records are kept until the madrasah deletes them or ends its subscription. After a subscription ends we delete or return the madrasah's data within 90 days, unless the law requires us to keep something longer. Deleted data may remain in backups for up to 30 days before it is overwritten.

Children

MadrasahOS is not for children to sign up to on their own. Information about children is entered and managed by madrasahs and by parents or guardians, and we only process it for the madrasah's purposes.

Your rights

You have the right to ask for a copy of your personal data, to have it corrected or deleted, to restrict or object to how it is used, to receive it in a portable format, and to withdraw consent where we rely on it. Email [email protected] and we will reply within one month. If you are unhappy with how we handle your data, you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.

Deleting your account

You can delete your account in the app or website under your account settings, or follow the steps at madrasahos.com/delete-account/. Deleting your account removes your login, name, email address and notification settings. Messages and posts you wrote may stay visible to others at your madrasah, shown as "Deleted user". Records a madrasah holds about students belong to the madrasah and are not removed when you delete your own login. Contact your madrasah about those.

Cookies and third-party content

We use only essential cookies that keep you signed in and protect the service. We do not use advertising or analytics cookies. See our Cookie Policy for details. Our pages also load fonts and code libraries from third-party content delivery networks, which receive your IP address when your browser requests them.

Changes to this policy

If we make an important change we will update the date above and tell account holders by email or in the service.

Contact

For privacy questions, contact [email protected].