Privacy Policy

ALC Casablanca Connect (“the app”) is the official communication platform of the American Language Center Casablanca (“the center”, “we”), which acts as the data controller for the personal data described in this policy. The app exists for one purpose: communication between the center, its students, their parents, and its staff. This policy explains what data we handle to make that work, and what we deliberately do not do with it.

What we collect

Most of your data does not come from the app at all — it comes from the center’s own registration records, created when you enrolled.

• Identity and enrollment data — your name, student ID, level, and class enrollment, imported from the center’s registration system
• Contact details — the email address and phone number you provide, used for signing in and account recovery
• Credentials — your password, stored only in hashed form; we cannot read it
• Linked sign-in accounts — only if you choose to link Sign in with Apple or Google: the account identifier that provider issues for this app, and the email address it shares with us (with Apple, this may be a private relay address). We never receive your Apple or Google password, and you can unlink either one at any time
• Content you create — messages, photos, and voice notes you send in conversations, and any support requests you submit
• Technical data — a push notification token identifying your device, and the device platform (iOS or Android), so notifications can reach you

What we use it for

• Delivering announcements, class updates, and messages
• Showing your digital student card at the front desk
• Letting parents follow their enrolled children
• Sending push notifications and account emails (password resets, account setup)
• Keeping the platform safe — center administrators can moderate conversations that belong to the center

What we do not do

• No advertising, and no advertising identifiers
• No analytics or behavioral tracking
• No selling or renting of personal data — to anyone, ever
• No use of your data for any purpose unrelated to the center’s work

Who processes data on our behalf

We use a small number of service providers strictly to run the platform. Each receives only what its role requires.

• Google Firebase — delivery of push notifications to Android devices and web browsers
• Apple Push Notification service — delivery of push notifications to iOS devices
• Render — hosting of the application servers and database
• Cloudflare — storage of media files such as photos and voice messages
• Resend — delivery of account emails
• Apple and Google — confirming your identity when you use Sign in with Apple or Google sign-in, if you have chosen to link them

Children and minors

Many of the center’s students are minors. Their accounts are created by the center from enrollment records — children cannot sign up on their own, and the app has no public registration. Parents can register with their own email address and their child’s student ID to follow their child’s school communication. Questions or concerns about a minor’s data can be raised with the center at any time using the contact details below.

How long we keep data

Your data is kept while your account is active. When you request deletion, your account is scheduled for permanent removal after a 90-day grace period, during which you can change your mind and cancel the request from the app. After the grace period, your account and the personal data attached to it are permanently deleted.

Your rights

Under Moroccan Law 09-08 on the protection of personal data, you have the right to access, correct, and delete your personal data, and to object to its processing. You can exercise these rights directly:

• Access and correction — your profile is visible in the app; corrections to enrollment data can be requested at the front desk
• Deletion — request account deletion in the app under Settings, or contact us using the details below

Security

All traffic between the app and our servers is encrypted in transit. Passwords are stored hashed, never in plain text. Access to personal data inside the platform is restricted by role — teachers see their own classes, parents see their own children, and administrative access is limited to authorized center staff.

Changes to this policy

If this policy changes in a way that matters, we will announce it in the app before the change takes effect. The effective date at the top of this page always reflects the current version.

Contact

American Language Center Casablanca
Email: info@alccasablanca.org