Privacy Policy

This Privacy Policy explains how Centerly ("we", "us") collects, uses, shares, and protects personal data when you visit our website, register a workspace, or use our dashboard, portals, and related services (the "Service").

Centerly serves education centers. We process data about center staff and about students and parents that centers upload or collect through the platform. In most cases, your center is the organization deciding why student and parent data is processed; Centerly acts as a service provider processing that data on the center's instructions.

Centerly is the data controller for account, billing, website, and product-analytics data relating to workspace owners and visitors.

For student, parent, and staff records stored inside a customer workspace, the center operating that workspace typically determines the purposes of processing. Centerly processes that information to provide the Service under our agreement with the center.

Contact: hello@centerly.app

Account & workspace data: name, email, phone, organization name, branch details, role assignments, subscription status, and billing records.

Student & family data (provided by centers): names, contact details, enrollment, attendance, exam results, invoices, portal credentials, and optional photos or documents you upload.

Usage & device data: log files, IP address, browser type, feature usage, error reports, and security events.

Communications: support tickets, contact form messages, and email correspondence with our team.

Payment data: subscription charges are processed by payment partners. We receive transaction status and limited billing metadata — not full card numbers stored by Centerly.

Location data: when QR attendance or geofencing features are enabled, student devices may send coarse location at check-in as configured by the center.

Provide and secure the Service — authentication, RBAC, attendance, billing modules, notifications, and data export.

Process subscriptions and send billing-related communications.

Improve reliability and develop features through aggregated usage analysis.

Respond to support requests and contact form inquiries.

Detect fraud, abuse, and security incidents.

Comply with legal obligations and enforce our Terms of Service.

Where GDPR or similar laws apply, we rely on: performance of a contract (providing the Service), legitimate interests (security, product improvement, B2B communications), consent (where required — e.g. optional marketing cookies), and legal obligation.

Centers are responsible for identifying and documenting their own legal basis for processing student and parent data they control.

We do not sell personal data. We share data only as needed to operate the Service:

• Infrastructure and hosting providers

• Payment processors for EGP subscription checkout

• Email and notification delivery services

• Analytics and error monitoring tools (configured to minimize personal data where possible)

• Professional advisers or authorities when required by law

Subprocessors are bound by confidentiality and data-protection obligations appropriate to their role.

Workspace data is retained while your subscription or Free workspace is active and for a reasonable period afterward to allow export and resolve billing or legal matters.

Contact form and support records are kept as long as needed to handle your request and maintain an audit trail.

Centers may delete or archive records inside their workspace subject to product capabilities and their own legal retention duties.

We may anonymize or aggregate data for analytics after deletion where appropriate.

We implement administrative, technical, and organizational measures designed to protect personal data — including encryption in transit, access controls, role-based permissions, and monitoring for suspicious activity.

No online service is completely secure. You play a critical role: use strong passwords, limit admin access, and train staff on portal and QR attendance workflows.

Report suspected security issues to hello@centerly.app. We will investigate and respond according to our incident procedures.

Depending on your location, you may have rights to access, correct, delete, restrict, or port personal data, or to object to certain processing.

Workspace owners and admins can access and export much of their organization's data directly in the dashboard. Students and parents should contact their center for portal-related requests.

For requests relating to data Centerly controls directly (account, billing, marketing), email hello@centerly.app. We may verify identity before fulfilling requests.

You may lodge a complaint with a supervisory authority where applicable law provides that right.

Centerly is used by education centers to manage learners, including minors. We do not knowingly market directly to children.

Centers must obtain appropriate consent from parents or guardians where required before creating student records or enabling student portals.

Parents accessing the parent portal see information authorized by the center. Contact your center first if you believe student data is inaccurate or should be removed.

Data may be processed in Egypt and in other countries where our infrastructure or subprocessors operate. When data is transferred internationally, we use appropriate safeguards such as contractual protections where required by law.

Our website and app use essential cookies for authentication, locale, and security. We may use analytics cookies to understand product usage; you can control non-essential cookies through your browser where applicable.

We do not use student portal sessions for third-party advertising profiles.

We may update this Privacy Policy from time to time. We will post changes on this page and update the "Last updated" date. Material changes may be communicated by email or in-app notice.

Questions or privacy requests: hello@centerly.app