Privacy Policy

Effective as of September 17, 2026 (2026-09-17)

This page explains, in plain language, how the Minela platform protects your data, where it is stored, who can see it, and what your rights are. Questions? Email privacy@minela.net.

1. Who we are and what this policy covers

Minela («من إلى») is a school-management platform operating through minela.net and two mobile apps: the Minela app for parents (ID net.minela.app) and the Minela Staff app for school staff (ID net.minela.staff). This policy applies to both apps and this website. By using any of them, you acknowledge that you have read this policy.

2. The school owns and is responsible for the data

Our services are provided to subscribed schools, and there is no public signup in the apps: the school administration creates the accounts for its staff and for parents, enters the data, and decides who may access what. The school is therefore the owner of and party responsible for the data of its students, staff, and parents, while Minela operates the platform on the school’s behalf and under its instructions, pursuant to the subscription agreement concluded with the school.

3. Children’s data (students)

Login accounts in our apps are intended for adults: school staff and parents. Student data — and most students are minors — is entered by school staff and processed under the school’s responsibility as the owner of and party responsible for that data, within its educational and contractual relationship with parents. Permissions are designed so that a student’s data is accessible only to the authorized staff of their school and to their own parent; no parent can see another family’s children. Our apps are not directed at children, and student data is processed on the school’s instructions in compliance with applicable children’s-privacy law. If you have a concern about your child’s data, contact the school first, or email us at privacy@minela.net.

4. What data we process

  • Account data: name, phone number, email, role and school, and a profile photo if one is added.
  • Student records the school enters or a parent proposes a change to: personal details, grade and section, attendance, marks and report cards, behavior, recorded fees, emergency contacts, and optional fields the school defines (such as notes or blood type).
  • Content you create: posts, comments, messages, attachments (photos and files), and content reports.
  • Device data: push-notification token, device identifier, and app version, to deliver notifications and manage sign-in sessions.
  • Crash diagnostics: technical information about an error (device model, operating system, app version, error context) without personal data.
  • Location in the parent app: a one-time reading of the device location only when you tap “My current location” on the home-location screen; the pin you confirm is sent to the school for review. There is no background tracking.
  • Location in the staff app: the bus position from the device of the staff member who started a bus trip, only between “Start trip” and “End trip”, shared with the school and with the parents of the students on that bus; and student NFC card identifiers when scanned.

We do not use data for advertising, do not sell it, and do not track you across other apps or websites.

5. Providers that process data on our behalf

We use technical service providers to run the platform; each receives only what it needs for its task:

  • Hosting: running the servers, database and file storage.
  • Notifications: delivering notifications to your device using the device token only.
  • Crash reporting: detecting technical failures, without personal data.
  • Text messages: sending the sign-in code to your phone number.
  • Maps: displaying maps, searching places by name (only the typed query is sent), and computing the bus route and arrival times (stop coordinates only).

These providers process data only on our behalf, to deliver the service, and protect it to the same or an equal standard. We share no data for analytics or advertising.

6. Where data is stored

Platform data is stored on secure servers. Data travels between your apps and our servers encrypted with TLS, and access within the platform is restricted by role-based permissions (supervisor, teacher, driver, parent).

7. Data retention

We retain data for as long as the school’s subscription to the platform is active, as it forms part of the school’s operational record. When the subscription ends, or upon the school’s request, the school’s data is deleted from our operational systems within a reasonable period. You may also delete your own account at any time in the app (Profile → Delete account), or request it through your school or via the account deletion page. Encrypted backup copies, kept only to recover from a disaster, are deleted automatically within 90 days; if a backup is ever restored, deletions made after it was taken are applied again.

8. Data security

We apply appropriate technical and organizational measures to protect data, including: TLS encryption in transit, fine-grained role-based access permissions, separation of each school’s data, periodic backups, and restricting the operations team’s access to the minimum necessary.

9. Your rights

  • Access and correction: because the school is the source and manager of the data, the fastest way to correct any information is through your school’s administration.
  • Deletion: in the app (Profile → Delete account), through your school, or via the account deletion page.
  • Inquiries and complaints: email privacy@minela.net and we will respond as soon as possible.

10. Changes to this policy

We may update this policy from time to time. We will publish the updated version on this page with a new effective date, and we will inform subscribed schools of any material change before it takes effect.

11. Contact

Privacy questions: privacy@minela.net
General inquiries: info@minela.net