This policy explains what personal data SGMS collects, why, who helps us process it, how long we keep it, and how to exercise your rights.
Who is responsible
SGMS is operated by Ibrahim Waleed Azab, Egypt. The operator is the data controller for this site. Contact: contact@support.aizger.com. We process personal data under Egypt's Personal Data Protection Law (Law No. 151 of 2020) and, where it applies to you, the data protection law of the country you live in.
What we collect
- Account: name, email address, password (stored only as a bcrypt hash), optional profile image, role, and when you accepted the Terms and chat rules.
- Learning: course and project enrollments, lesson progress, quiz attempts and answers, assignment submissions, grades and feedback, and lesson comments.
- Exams: exam enrollments, when you started and handed in, your answers or uploaded answer files, and your mark and feedback.
- Chat: messages, voice notes, code shares, and the course interest and message you write in an access inquiry.
- Moderation: reports you file, strikes issued to you, your appeals, and staff decisions.
- Technical: session cookies, and your IP address, which is used to rate-limit requests and appears in security logs for blocked or failed sign-in attempts.
- Payments: you pay by InstaPay or instant bank transfer outside this site. The transfer record your instructor receives shows the sender name, the InstaPay address, phone number, or account used, the amount, and the reference. We use it only to confirm payment and handle refunds.
We do not ask for your postal address, date of birth, or payment card details, and the site itself stores no payment data.
Why we use it, and on what legal basis
- To provide the service you signed up for (contract): your account, course access, progress, grading, and chat.
- To keep the platform safe (legitimate interests): rate limiting, reCAPTCHA checks, security logs, and handling reports and strikes.
- With your consent: optional performance measurement (Vercel Speed Insights). You can withdraw it at any time.
- To meet legal obligations: keeping payment records for tax and accounting, and disclosing information when Egyptian law requires it.
We send only account and service emails: verification, password reset, account-deletion codes, and strike notices. We do not run a marketing list and do not sell or rent your data.
Who processes it for us
- Vercel hosts the site and, only if you allow it, runs Speed Insights.
- MySQL database host stores the data described above.
- Cloudinary stores uploaded images, attachments, and voice notes when it is configured.
- Redis holds short-lived rate-limit counters and passes chat events between servers.
- An SMTP email provider delivers our account emails.
- Google reCAPTCHA runs on the login, register, and password-reset pages to block bots. Google receives device and interaction signals under its own privacy policy.
- YouTube plays lesson videos through its privacy-enhanced (youtube-nocookie.com) player. YouTube receives your IP address and may set storage once you play a video.
Most of these providers store data outside Egypt. Where Law No. 151 of 2020 or another applicable law requires it, we use their standard data processing terms for those transfers.
How long we keep it
- Account, learning, and chat data: for as long as your account exists.
- Email verification links: 24 hours. Account-deletion codes: 30 minutes.
- Suspended accounts: deleted 30 days after suspension unless an admin restores access.
- Rate-limit counters: minutes to an hour. Security log lines: kept only as long as our host retains server logs.
- Payment transfer records: as long as Egyptian tax and accounting rules require.
- When you delete your account, your records are removed from our database and the voice notes, exam answer files, and profile image you uploaded are deleted from media storage at the same time. If a file cannot be removed automatically, email contact@support.aizger.com and we will delete it by hand.
Children
Accounts are for people 13 or older, and sign-up asks you to confirm your age. We do not knowingly collect data from children under 13. If you believe a child under 13 has an account, email contact@support.aizger.com and we will delete it.
Your rights
- Access and portability: Settings, then "Download my data", gives you a JSON copy of your data.
- Correction: edit your name and image on your profile, or email us for anything else.
- Deletion: Settings, then Danger zone. If you cannot sign in, email contact@support.aizger.com from the address on the account.
- Withdraw consent: lets you turn optional measurement off.
- Objection and restriction: email us and we will respond within 30 days.
- Complaint: you can complain to Egypt's Personal Data Protection Center, or to the data protection authority where you live.
Security
Passwords are hashed with bcrypt, traffic uses HTTPS, sign-in and sensitive actions are rate-limited, and staff tools are restricted by role. No system is perfectly secure; if we learn of a breach that affects you, we will tell you.
Cookies
See the Cookie policy for the full list.
The Android app
Added September 28, 2026. The SGMS Android app shows this same site, so everything above applies. In addition:
- Performance measurement is on in the app (Vercel Speed Insights, described above), because the app does not show the cookie banner. You can turn it off in the app from in the footer.
- New-message notifications: while you are signed in and allow notifications, the app checks for new chat messages about once a minute, including in the background, and shows the sender and a preview on your phone. It stops when you sign out or turn SGMS notifications off.
- Phone permissions are asked for only when used: notifications, the camera and microphone (photo answers and voice notes), and storage on Android 9 and older (saving downloads). Files you pick or download stay on your phone unless you upload them.
- The app stores your sign-in session on the phone. Uninstalling it, or signing out, removes it.
Changes
We will update the date above when this policy changes, and tell signed-in users about significant changes in the app or by email.