Privacy Policy
Last updated 3 October 2026
Darsy connects students and parents in Egypt with IGCSE tutors. This policy explains what we collect, why, who we share it with, and what you can ask us to do about it. It covers the Darsy mobile app and this website.
Darsy is used by people under 18. If you are under 18, please read this with a parent or guardian. Parents can create and manage their child's account, and an in-person 1-on-1 session for someone under 18 can only be booked by a parent or guardian.
Who we are
Darsy is operated by Omar Azar, Egypt. For any privacy question, or to make any of the requests described below, contact privacy@darsyapp.com.
What we collect
Information you give us
| Data | Why |
|---|---|
| Email address and password | To create and secure your account. Passwords are hashed; we never see or store the plain text. |
| Name, phone number | So tutors and students can identify and contact each other about a booking. |
| Role (student, parent, tutor) | Determines what the app shows you and what you can do. |
| School year, school name, date of birth | Students only. Used to match students to the right level of teaching. |
| Gender, city, district | Gender is required for tutors and optional for everyone else; city and district are optional. Used for filtering search results and for in-person sessions. |
| Profile photo | Optional. Shown on your profile. |
| Subjects, levels, rates, availability, biography | Tutors only. This is what students search and book against. |
| Identity document photo | Tutors only. Used once to verify identity before a tutor becomes visible in search, and to allow in-person sessions. |
| Emergency contact | Optional. Used for in-person sessions. |
| Messages and images | Messages you send to another user through the app, and any image you attach to one. Images are stored privately and can only be opened by the people in that conversation. |
| Addresses | Where an in-person session takes place: a tutor's home or teaching centre, or the address a student gives for a session at their home. Shared with the other person only once the booking is paid. |
| Payout details | Tutors only. The mobile wallet number, InstaPay address or bank account that earnings are paid to. |
| Reports and blocks | If you report or block another user, we keep who reported whom and why, so that our team can review it. The other person is not told. |
| Reviews you write | Shown publicly on a tutor's profile. |
Information created by using Darsy
- Bookings, sessions, attendance records and cancellations.
- Payment records — amount, date, status, and a reference from our payment processor. We never receive or store your card number. Card details are entered directly into Paymob's secure checkout.
- Refunds and wallet balance.
- A device token, if you allow notifications, so we can send you reminders and booking updates.
- Basic technical logs, including your IP address, used to keep the service running and to limit abuse such as repeated login attempts.
- Crash and error reports. If the app crashes or a request fails unexpectedly, a report is sent with technical details of what went wrong, your device model and operating system version, and your account's internal ID so we can match it to a problem you tell us about. It does not include your name, email address, messages or anything you typed.
What we do not do
- We do not sell your personal information.
- We do not use your data for advertising, and there are no advertising trackers in the app.
- We do not track you across other apps or websites.
- We do not read your messages except where we must to investigate a safety report or a dispute you have raised.
Who we share it with
Only with the services needed to run Darsy, and only what each one needs:
| Service | What it receives |
|---|---|
| Supabase | Database and account hosting — all of the account data above. |
| Paymob | Payment processing. Receives your name, email, phone and the amount. Card details go to Paymob directly, not through us. |
| Google Firebase | Push notifications, crash reports from the app (Crashlytics), and sign-in if you use Google. |
| Sentry | Error reports from our servers, hosted in the EU. Technical details of a failed request; no names, emails or message contents. |
| Email and SMS providers | Your email address, to send verification and password-reset codes. Your phone number, if phone verification is in use, to send a code by SMS (Twilio). |
| Apple | Sign-in only, if you use Sign in with Apple. |
| Render, Cloudflare | Application hosting and protection. Receive network requests, including your IP address. |
We also share what is necessary between users of the app itself: when you book, the tutor sees your name and the booking; when a tutor is booked, the student sees their profile, subjects and rate. Parents can see the bookings and sessions of children on their account.
We will disclose information if required by Egyptian law, or where we reasonably believe it is necessary to protect someone's safety.
How long we keep it
We keep your account data for as long as your account exists. Payment and booking records are kept for seven years after the transaction, because tax and accounting rules require it. Identity documents submitted by tutors are kept for as long as the tutor's account exists, so that a verification can be checked again if a safety concern is raised, and are deleted when the account is deleted. They are stored privately and can be opened only by our review team.
Deleting your account
You can delete your account from inside the app: Profile → Account → Delete account. This removes your profile, your personal details, the messages and images you sent, your profile photo and any identity document you uploaded. Payment and booking records are retained as described above, with your name removed where we are able to do so. Deletion cannot be undone.
If you no longer have the app, you can ask us to delete your account from the account deletion page.
Your rights
You can ask us to give you a copy of your data, correct it, or delete it. Most of this you can do yourself in the app; for anything else, email privacy@darsyapp.com and we will respond within 30 days. If you are under 18, a parent or guardian can make these requests on your behalf.
Security
Traffic between the app and our servers is encrypted with HTTPS. Passwords are hashed. Access to the production database is restricted. No system is perfectly secure, and we will tell affected users promptly if a breach puts their data at risk.
Changes
If we change this policy in a way that materially affects you, we will notify you in the app before the change takes effect. The date at the top always shows the current version.