Legal Centre
Our promise. We never sell personal data, never show ads, never use student work to train AI, and keep schools and teachers in control of their class data. Documents for schools, parents and companies are all here. For a signed DPA, a security questionnaire or any request, write to support@fikrasmart.com.
Privacy PolicyWhat we collect, why, who sees it, how long we keep it, and your rights.Terms of UseThe agreement between you (or your school) and Fikra Smart.Student & Parent Privacy NoticeA plain-language notice for students and parents, covering COPPA, FERPA and GDPR.Data Processing AgreementFor schools, districts and companies: roles, instructions, transfers, audits. Includes Standard Contractual Clauses.Security & Incident ResponseHow we protect data, how we handle incidents, and how to report a vulnerability.Sub-processorsEvery provider that may process data for us, where, and why.AI Use & TransparencyWhich AI providers may be used, what is sent, human oversight, and limits.Acceptable Use PolicyWhat you may and may not do on Fikra Smart.Cookies & Local StorageWhat is stored on your device. We use no advertising or tracking cookies.Data Retention & DeletionHow long each kind of data is kept and how to have it deleted or exported.Copyright & Content ComplaintsHow to report infringing or harmful content, and how we respond.
For procurement teams
- Data location: Tokyo, Japan (database); global edge delivery.
- Roles: school is controller, Fikra Smart is processor (DPA with SCCs).
- Breach notice: within 72 hours.
- Frameworks addressed: UAE PDPL, GDPR/UK GDPR, COPPA, FERPA, CCPA/CPRA, SOPIPA.
- Sub-processors: published list, 30 days' notice of changes.
- Vulnerability disclosure: security.txt.