We don't sell your data
We never sell or rent your data, and never use students' data for advertising.
Privacy
Your data, plainly explained.
What we collect, why, where it is stored, who can see it and how to exercise your rights — written under Algerian Law No. 18-07 on the protection of natural persons in the processing of personal data, as amended.
At a glance
The full text below is the binding version.
Teachers control their students' data
In a teacher's academy, the teacher is the controller; we process on their behalf and instructions.
Our servers are outside Algeria
We say it plainly: your data is hosted by providers in the European Union and the United States, named below.
Your rights are free
Access, rectification, erasure and objection at no cost; rectification or erasure within 10 days.
Who is responsible for your data
Dirassa+ is an Algerian education platform operated by an activity registered under the auto-entrepreneur status. Our full legal identity is on the About page; write to us at contact@dirassaplus.com.
We process data in two distinct roles:
- We are the controller for the accounts of teachers, schools and their staff, for visitors to our site, and for anyone dealing with us directly (subscriptions, the “Digital Teacher” course, Dirassa Studio, support).
- The teacher or school is the controller of their students' data; we act as a processor, on their behalf and only on their instructions (Article 39 of Law 18-07).
If you are a student in a teacher's academy, contact your teacher first about your data. If they don't answer, write to us and we will help.
The data we collect
We collect only what the service needs. We never ask for an ID number, a date of birth or sensitive data.
| Category | What it includes | Source |
|---|---|---|
| Account | Full name, email, phone (optional), password (stored hashed, unreadable to us), language, photo (optional) | You |
| Learning | Enrolments, progress and playback position, notes and ratings, exam answers and results, exam-integrity signals (leaving the page or full screen) if the teacher enables them | Your use |
| Orders and payments | Amount, payment method, photo of the payment receipt (BaridiMob or CCP), activation codes, delivery address and phone for a physical product | You and the teacher |
| Community and messages | Posts, comments, likes, poll votes, support messages, bookings, messages sent through teachers' contact forms | You |
| Technical | IP address, browser and device, sign-in and usage logs, notification subscriptions, linked Dirassa Studio devices | Your device |
| Teacher content | Lessons, videos, files, exams, academy settings, staff accounts | The teacher |
| Marketing | Advertising identifiers (_fbp, _fbc, ttclid) and visit source, only on pages where measurement is enabled | Your browser |
| Orders without an account (showcases and shop) | Name and phone, email if you type it, wilaya, commune and address for a delivery, your answers to the teacher's questions, amount and payment method, the version of the terms you accepted, and a token your browser keeps to find your order | You |
| Interested people (“Notify me”, waitlist, free file) | Name and phone or email, wilaya and form answers when asked, your consent and its version, visit source (campaign name only) | You |
| Showcase visit measurement | A random session token that does not identify you, sections seen and taps, device type, language and country, visit source (campaign names only). No IP address is stored for measurement and a person's visits are not linked across days | Your browser |
| Page reports and contact forms | The report's reason, details and optional contact, or your message. Against abuse, a salted, irreversible fingerprint of the IP address that the teacher never sees | You and your device |
Card details never pass through us. Edahabia, CIB and international card payments are processed directly by Chargily Pay or Stripe on the teacher's own account; we never store card numbers.
Watermark: to protect lessons, the student's name is shown over the video during playback — never their email or phone.
Why we process your data, and on what basis
Every processing has a specific purpose and a basis the law allows (Article 7 of Law 18-07):
| Purpose | Basis |
|---|---|
| Creating your account; running the academy, lessons, exams, live classes and community | Performance of the contract with us or with your teacher |
| Processing orders and subscriptions, issuing invoices | Performance of the contract; legal and tax obligations |
| Protecting content, preventing fraud and abuse, securing the platform | Legitimate interest (ours and teachers'); legal obligation |
| Keeping connection logs for one year | Legal obligation (Article 11 of Law 09-04) |
| Sending essential service messages | Performance of the contract |
| Marketing messages and advertising measurement | Your prior consent, which you can withdraw at any time |
| Fulfilling your order without an account and telling you its status | Performance of the contract with the teacher |
| Telling you when an offer you follow opens | Your prior consent, which you can withdraw at any time |
| Measuring a showcase's visits for its owner (first-party, no cross-site tracking) | The teacher's legitimate interest in knowing how their page performs, using non-identifying data |
| Improving the product with aggregated statistics | Legitimate interest, using aggregated non-identifying data |
Who can see your data
We never sell or rent your data. Only these parties see it:
- The teacher or school you enrolled with, and their staff according to the permissions they grant.
- The owner of the showcase or shop you ordered from without an account or left your details with to be notified, and their staff according to their permissions, to confirm your order or get back to you. They only see measurement totals, never an individual visitor.
- Our technical providers, listed below, each limited to its task.
- Competent authorities, when the law requires it and upon a lawful request.
| Provider | Role | Where it processes |
|---|---|---|
| Supabase | Database, authentication, storage | European Union (Ireland) |
| Vercel | Hosting and running the app | United States; execution in Ireland and a global delivery network |
| Cloudflare R2 | File storage: receipts, lesson files, exam answers | Cloudflare global network |
| Bunny.net | Video hosting and streaming | Europe |
| Hetzner | Live-streaming and recording server | Germany |
| Resend | Staff invitation emails | United States |
| Chargily Pay | Edahabia and CIB payments, on the teacher's account | Algeria |
| Stripe | International card payments, on the teacher's account | United States and European Union |
| Meta and TikTok | Ad measurement, only where enabled | United States and elsewhere |
| Anthropic, OpenAI, Google, ElevenLabs | AI tools for lesson creation and Dirassa Studio — teacher content only, never student data | United States |
| Google, Apple, Mozilla | Delivering notifications to your phone (title and text only) | Depends on your browser |
Delivery companies chosen by a teacher receive from that teacher only the name, phone and address needed for delivery.
Transfers outside Algeria
As Article 32 of Law 18-07 requires, we state it clearly: the platform's servers and technical providers are located outside Algeria, mainly in the European Union (Ireland, Germany) and the United States.
This transfer is necessary to deliver the service you request and rests on your express consent when you create your account, within Articles 44 and 45 of Law 18-07. We choose providers applying recognised protection standards, encrypt data in transit and restrict their access to their task.
If you refuse this transfer, we cannot technically provide the service; you can ask us to delete your account at any time.
How long we keep data
We keep data only as long as its purpose requires (Article 9 of Law 18-07):
| Data | Period |
|---|---|
| Active account | For as long as the account is active |
| Academy whose subscription ended | 90 days to allow renewal or export, then permanent deletion — including that academy's student data |
| Account deletion request | Deleted within 10 days, except what the law requires us to keep |
| Connection and usage logs | One year from recording (Article 11 of Law 09-04) |
| Invoices and transaction records | As long as commercial and tax law requires |
| Backups | Rotated periodically; deleted data leaves them at the end of the cycle |
| Course registrations and marketing contact | Until the purpose is met or you withdraw consent |
| Interested people (“Notify me”, waitlist) | 180 days after signing up, then deleted automatically |
| Showcase visit measurement | Raw data 90 days, totals without any identifier 25 months, daily salts deleted after 48 hours |
| Orders without an account | Like any order: as long as commercial and tax law requires |
How we protect your data
We apply appropriate technical and organisational measures (Article 38 of Law 18-07), including:
- Encryption of all traffic (HTTPS/TLS); passwords stored with irreversible hashing.
- Each academy's data isolated by database-level access rules; fine-grained staff permissions.
- Signed, expiring links for videos, files and payment receipts.
- Encrypted payment keys for teachers; an activity log of who did what, and when.
No system is 100% secure, and the internet is an open network where data can be exposed to risks. We keep those risks as low as we can; choose a strong password and never share it.
If a breach affects your data, we notify the National Authority for the Protection of Personal Data and you without delay (Article 43 of Law 18-07), and the teacher concerned when their students' data is involved.
Students under 19
Many students are minors. The age of majority in Algeria is 19 (Article 40 of the Civil Code), and processing a child's data requires their legal representative's consent (Article 8 of Law 18-07). Therefore:
- Every student under 19 must sign up with their parent or guardian's consent, which they confirm when creating the account.
- The parent or guardian can exercise all the rights below on the minor's behalf and ask for the account's deletion at any time.
- Teachers who accept minors must make sure their parents agree, especially before any payment.
Your rights and how to use them
Law 18-07 gives you the following rights, free of charge:
- Information: everything on this page (Article 32).
- Access: obtaining the data we hold about you (Article 34).
- Rectification and erasure: correcting, updating or deleting your data, carried out within 10 days (Article 35).
- Objection: on legitimate grounds, and at any time without reason to direct marketing (Article 36).
- Withdrawing consent: at any time, without affecting what came before.
To make a request:
- Email contact@dirassaplus.com from the address linked to your account, naming the right you want to exercise.
- We may ask you to confirm your identity, so we never hand your data to someone else.
- We answer and act within the legal time limits, and tell you what was done.
You can also edit your name, phone, photo and password in your profile and sign out of all devices. If you believe your rights were not respected, you can complain to the National Authority for the Protection of Personal Data at anpdp.dz.
Marketing messages and notifications
We send marketing by email or notification only with your prior consent (Article 37 of Law 18-07, Article 31 of Law 18-05). Unsubscribe free of charge at any time; we act on it within 24 hours.
Service messages (email confirmation, invitations, session or exam reminders, changes to terms) are part of the service; you can adjust phone notifications in your browser or on the platform.
For teachers and schools: how we process your students' data
When you accept students, you are the controller of their data and we process it on your behalf. We commit to:
- Processing it on your instructions and only to run your academy.
- Keeping it confidential, applying the security measures above, and binding our providers to the same.
- Helping you answer your students' requests (access, rectification, deletion) and letting you export their list.
- Telling you without delay about any breach affecting your students' data.
- Deleting it when our relationship ends, after the 90-day period above.
Your own duties as controller remain: filing with the National Authority where required, informing your students, and obtaining parents' consent for minors. Details are in the terms of use.
Changes to this policy
We may update this policy when the service or the law changes. We notify you of any material change at least 30 days in advance by email or in the platform; the update date is shown at the top of this page.
Contact us about your data
For any question or request: contact@dirassaplus.com — or through the Contact page.
A question this page didn't answer?
We reply to every message, in plain words.