Fatiyyah AcademySub-processors
These companies host or run parts of Fatiyyah Academy for us. Each has a contract with us that limits what it may do with personal information, requires it to keep the information secure, and covers any transfer outside the UK. We tell academies at least 30 days before adding or replacing a sub-processor, so they can object.
| Provider | What it does | Information involved | Where |
|---|---|---|---|
| [OVHcloud] | [Runs the Fatiyyah Academy server: the app and its database, and a test copy with its own database and files. OVH also takes one automated backup of the whole server each day, and keeps one copy] | [All service data, stored and in use, and in that daily backup] | [London, United Kingdom (OVH's London data centre, UK2). Where OVH keeps its daily backup of the server, and for how long, is to be confirmed with OVH (question for the owner)] |
| [OVHcloud Object Storage] | [Keeps the files the app stores, in a private bucket. A second bucket keeps the nightly backups: a copy of each file, and an encrypted copy of the database] | [Children's recitation recordings, teachers' voice notes, parents' signatures on daily reports, page images an academy uploads, and the backups] | [Files in London, United Kingdom. Backups in a different region, not chosen yet (question for the owner)] |
| [Email provider: question for the owner, not chosen yet, and to be in the United Kingdom or the European Union] | [Sends sign-in links, password resets, invitations and security alerts; tells an academy's administrators when a concern is raised or children's PIN sign-in is paused; and sends our safeguarding contact the details of each safeguarding concern and of any concern about an administrator, and of its closing] | [Names, email addresses and what each email says, including what was reported in a safeguarding concern] | [United Kingdom or European Union] |
[This version of Fatiyyah Academy does not use LiveKit (live lesson audio and video: live lessons are not in this version), Stripe (payments: the academy is not billed through the app), or Google Firebase Cloud Messaging and Apple Push Notification service (phone notifications: there are no Android or iOS apps in this version), so they are not listed. Cloudflare holds the fatiyyah.academy domain's DNS records only, with its proxy off, so it carries none of the app's traffic and handles no personal information.]
Fatiyyah Academy does not use advertising, analytics or social media providers.
To be told about changes, academies can write to privacy@fatiyyah.academy.