Privacy Policy

Jisr is a teaching-assistance platform for English teachers in Morocco. The data controller is Ayoub [Full name — TO BE COMPLETED], founder of Jisr, reachable at contact@jisr.ma.

This processing is governed by Moroccan Law No. 09-08 on the protection of individuals with regard to the processing of personal data, under the supervision of the National Commission for the Control of the Protection of Personal Data (CNDP).

CNDP filing number: [TO BE COMPLETED after filing].

Depending on whether you are a teacher or a student, we collect:

• Account data: name, email address, role (teacher, student, administrator), CEFR level for students.
• Teaching content: courses, lessons, quizzes, documents that you create or upload.
• Student activity data: quiz attempts, answers, completed lessons, attendance at sessions, last activity dates.
• Minimal technical data: error logs (via Sentry) and essential session cookies.

We do not collect any sensitive data within the meaning of Law 09-08 (health, political or religious opinions, etc.).

• Providing the service: creating accounts, displaying courses, enabling quiz attempts and student tracking.
• Generating AI-assisted teaching content (quizzes, lessons, grading) at the teacher's request.
• Allowing teachers to track the progress of their own students.
• Ensuring security, detecting errors and improving the product.
• Communicating with you (invitations, account-related emails).

Aggregated learning data is never sold or exploited as a source of revenue; it is used only internally to improve the product.

Some students may be minors. Student accounts are created and managed by the teacher, who is responsible for obtaining the necessary parental consent before enrolling a minor student. We limit collection to what is strictly necessary for teaching follow-up.

• Your teacher (for students): they only see the activity and results of their own students.
• Yourself: you access your own data.
• The Jisr team: limited access for support and maintenance.
• Our technical subprocessors (see "Hosting abroad").

Students never see the personally identifying data of other students.

In order to operate, Jisr relies on providers whose servers are located outside Morocco. This constitutes an international transfer of data within the meaning of Law 09-08:

• Supabase — database, authentication and file storage.
• Vercel — application hosting.
• Anthropic and OpenAI — AI content generation and grading.
• Resend — sending of transactional emails.
• Upstash — rate limiting (anti-abuse).
• Sentry — technical error monitoring.

These transfers are subject to the required formalities with the CNDP [transfer authorization — TO BE COMPLETED / in progress]. We choose providers offering recognized security guarantees.

We keep your data for as long as your account is active. When a teacher removes a student from a course, history is retained by default to allow for possible re-enrollment; a permanent deletion can be requested. When an account is closed, data is deleted or anonymized within a reasonable period, except where retention is required by law.

In accordance with Law 09-08, you have the following rights:

• Right of access to your data.
• Right to rectification of inaccurate data.
• Right to object on legitimate grounds.
• Right to erasure of your data.

To exercise these rights, write to us at contact@jisr.ma. You may also refer the matter to the CNDP (www.cndp.ma) in case of a dispute.

We apply technical and organizational measures: encryption of communications (HTTPS), access control at the database level (Row Level Security), separation of roles, and error monitoring. As no system is infallible, we undertake to inform you in the event of an incident affecting your data.

We may update this policy. The date of the last update appears in the table of contents. In the event of a material change, we will inform you.