Privacy Policy
What we hold about you, why we hold it, who else processes it, and what you can ask us to do.
In force since October 27, 2026
1. Who controls your data
Science Street for Technology and Educational Services, commercial register number 207977, tax registration number 752864041, registered at 10 Ghernata Street, Heliopolis, Cairo, operates the Shareh platform and is the controller of the personal data described here. You reach us at support@shareh.ai.
2. What you give us
| Data | When | Why |
|---|---|---|
| Email address | Registration | To identify your account and to write to you |
| Password | Registration | To sign you in. Our sign-in provider stores it; we never see it |
| Google account identifier | If you sign in with Google | To sign you in |
| First name and last name | Onboarding | To address you, and to issue a receipt |
| Nickname | Onboarding | To show you on the leaderboards and in a course gallery without showing your real name |
| Guardian email address and mobile number | Onboarding | So the school can reach the adult responsible for you, to send the guardian the notice described in section 12, to ask the guardian by a call or a message how you are finding the platform, which stops when the guardian asks, and, if you agree to marketing cookies, to match a registration or a payment to an advertisement as section 8 describes |
| Grade year | Onboarding or profile | To place you in the right course |
| Your own mobile number | Profile, optional | To reach you about your account, and, when your account names no guardian, to ask you by a call or a message how you are finding the platform, which stops when you ask |
| Interface language | Onboarding and profile | To write to you in Arabic or English |
| Your answer to a question we ask about the platform | Only if you accepted feedback, and only when you answer | To learn what to fix and what to build next, and to reply to you. We never ask for your name, your phone number, or your address in it |
3. What the platform records as you use it
| Data | Why |
|---|---|
| Lessons opened and videos watched, with how far through you reached | To move you along the course and to show you your progress |
| Every exercise and quiz attempt: the answer you gave, whether it was right, which try it was, and how many seconds you took on each item | To score your work, to show you what to review, and to find a question that is unclear |
| Experience points, streak, and leaderboard position | To run the reward and ranking features |
| Orders, the amount, the payment state, any discount code used, and the payment reference. For a manual transfer, the reference you give us | To sell you a course and to keep an accounting record |
| A record of the browsers and devices your account signs in from | To see an account being shared, and to protect your account |
| Time zone, detected by your browser | To decide when your study day starts and ends |
| The messages our sign-in, payment, video, and email providers send us about your account or your order | To keep your account and your order up to date. These can carry your name, your email address, and your phone number |
| A certificate for each course you complete that issues one: the course, the date you completed it, the date it was issued, its number, and its verification code | To prove that you finished the course |
| Photos you send to a course gallery, with the name you give each one, your note, its kind, the challenge or mission it joins, and the review our staff make of it | To run the course gallery described below |
| The points and badges your approved photos earn, your place on a course leaderboard, and your count in a challenge | To run the reward, ranking, and challenge features of a course |
Details of what the record of your devices holds are available on request from support@shareh.ai.
Your certificate carries a QR code and a verification address. Anyone who holds the certificate, its QR code, or that address can open the verification page. The page shows your first and last name as your profile holds them at that moment, the course, the certificate number, the completion and issue dates, and whether the certificate is valid or revoked. It shows nothing else about you. The verification page is not listed in search engines.
Some courses have a gallery, where students share photos of what they see under the microscope. Our staff see every photo first, and nobody else sees it until they approve it. They may approve it, ask you for a new photo, reject it with a reason, or remove it later. An approved photo is shown, with the name you gave it and your nickname, only to students who hold that course at the time. It is never shown with your real name. Students who hold the course can mark a photo they like.
A photo must not show a face, a name, or a fingerprint. Before a photo leaves your device, your browser redraws it, which removes the location and the camera details a phone stores in a photo. Our servers refuse a photo that still carries them.
We delete a photo when our staff reject or remove it. You can delete any of your own photos at any time from the gallery, and we then delete it. Your photos are deleted with your account.
An approved photo can earn experience points and badges in your explorer journal. A course can have its own leaderboard: students who hold the course see the ten with the most points earned in it, by nickname and points, and each student sees their own place. When too few students are ranked, the ten are hidden. A course can also run a challenge. Once it ends, the nicknames and places of the winners our staff pick are shown to students who hold the course.
4. What the platform collects automatically
| Data | Why |
|---|---|
| Your IP address | To protect the service from abuse, and, only if you agree to marketing cookies, to tell Meta and TikTok about your registration and your payment (see section 8). We store it only with an unpaid order, until the order is paid, cancelled, or expires |
| Technical records of your visit | To keep the service secure and to find the cause of a failure. See section 6 |
| Analytics events about the pages you open and how you move on them | To understand which parts of the platform work. Only with your consent |
| Technical error reports | To find and fix a fault. Only with your consent |
We do not record your screen. We do not send your name, your email address, or your phone number to our analytics provider.
We do not collect your card number. Your payment goes to our payment provider and the card details never reach us.
5. The record of your agreement
When you accept the Terms of Use and this Privacy Policy, and when you answer the cookie banner while you are signed in or sign in on a browser where you already answered it, we keep a record of what you agreed to: the document, the version of it in force at the moment you answered, your decision, your analytics, marketing, and feedback choice, and the date and time in UTC. If you withdraw a consent, we record the withdrawal in the same way.
We keep no IP address and nothing that identifies your browser with this record. We keep it while your account is open, and afterwards for as long as a claim about your agreement could still be raised. A cookie answer you give before you sign in stays in your browser. When you sign in on that browser, we record that answer with your account, unless your account already holds the same answer or a later one.
6. When something fails
A technical error report may include the page you were on and, only if you accepted analytics, your analytics identifier. We use it to find and fix the fault.
7. Why we may use it, in law
| Purpose | Basis under Law No. 151 of 2020 |
|---|---|
| Creating and running your account, and giving you the course you bought | Performing the contract with you |
| Payment, receipts, and accounting records | A legal obligation |
| Keeping the platform and your account secure, including the record of your devices | Our legitimate interest in preventing account sharing and fraud |
| Recording what you agreed to and when | A legal obligation, because we must be able to show the consent we rely on |
| Analytics, technical error reports, and marketing attribution | Your consent, which you give or refuse on the cookie banner and can change at any time |
| Asking your guardian, or you when your account names no guardian, by a call or a message how you are finding the platform | Our legitimate interest in learning how the platform serves learners and their families. It stops for a number as soon as its owner objects |
| Asking you about the platform and reading your answer | Your consent, which is the feedback choice on the cookie banner and which you can change at any time |
| Marketing email. We send none today; this covers it if we ever do | Your consent |
| Answering a lawful request from a competent authority | A legal obligation |
8. Who else processes it
We use service providers to run parts of the platform. Each of them acts on our instructions under a written agreement.
- Our sign-in provider, which creates your account, holds your password, and signs you in.
- Our hosting provider, which runs the platform and holds your data.
- Our payment provider, which takes your card or wallet payment.
- Our video host, which delivers lesson video.
- Our email provider, which sends you the email we write to you.
- Our analytics provider, which receives analytics events and technical error reports if you agree to analytics, and the answer you send us if you agree to feedback.
- Meta, the advertising platform behind Facebook and Instagram, only if you agree to marketing cookies: when you register and when you pay, we tell Meta so with your guardian's email address and mobile number, with your own in place of each one you did not give for your guardian, and an identifier of your account, all hashed with SHA-256, and with the identifier of the Meta advertisement that brought you, if any. With them we send the IP address of the device you used, the name and version of your browser (its user agent), and the identifier that Meta's own cookie stored in that browser. Meta uses them to match the registration or the payment to that advertisement and never receives your contact details or your account identifier in readable form.
- TikTok, on the same terms as Meta: only if you agree to marketing cookies, when you register and when you pay, we tell TikTok so with the same contact details and account identifier, hashed with SHA-256, with the identifier of the TikTok advertisement that brought you, if any, and with the IP address, the user agent, and the identifier that TikTok's own cookie stored in your browser. TikTok uses them to match the registration or the payment to that advertisement and never receives your contact details or your account identifier in readable form.
- Our speech provider, which turns the text our teachers write into the spoken audio in an exercise. It receives the lesson text only and never anything about you.
The list of our service providers and where they process data is available on request from support@shareh.ai.
A manual bank or InstaPay transfer does not go through a service provider. You send the money and give us the reference, and a member of our team checks it.
A partner store that sells a Shareh access code gives us the buyer's email address, and we may also send an access code to a learner of an earlier Science Street site. Such an email address is a delivery address only: we use it to send the code, and we clear it once the email with the code is delivered.
We do not sell your personal data, and we do not share it with an advertiser. We give data to a competent authority when the law requires it, and we tell you where the law lets us.
9. Transfer outside Egypt
Some of our service providers process your data outside Egypt. We transfer only what the service needs, and each provider is bound by a written agreement that obliges it to protect your data and to process it on our instructions alone.
10. How long we keep it
| Data | Period |
|---|---|
| Your account and your profile | While your account is open. When you close it we delete it, except what the accounting and tax rules require us to keep |
| Progress, attempts, and scores | While your account is open. When you close it we delete it, except what the accounting and tax rules require us to keep |
| Orders, invoices, and payment records | For the period the accounting and tax rules require, which runs past the closing of your account |
| The record of your agreement | While your account is open, and afterwards for as long as a claim about your agreement could still be raised |
| Messages from our service providers about your account or order | While your account is open, then deleted with it |
| The record of your devices | While your account is open, then deleted with it |
| Your gallery photos, their names, notes, and reviews | Until you delete a photo or our staff reject or remove it, and at most while your account is open. We delete them all when you close it |
| Your points, badges, course leaderboard place, and challenge counts | While your account is open, then deleted with it |
| Your certificates | While your account is open. When you close it we delete them, also when the accounting and tax rules keep your orders, and the verification page then finds no certificate at their address |
| The IP address, user agent, and Meta and TikTok cookie identifiers held with an unpaid order, only if you agree to marketing cookies | Until the order is paid, cancelled, or expires |
| Technical records and analytics events | For as long as our hosting and analytics providers keep them under our agreements with them |
| An answer you send us about the platform | While it is still useful for the decision it informs, and no longer than our analytics provider keeps it under our agreement with it |
We delete or anonymise data once the period ends.
11. Your rights
Under Law No. 151 of 2020 you may:
- Know what personal data we hold about you, and get a copy of it.
- Have an inaccurate value corrected. You can correct most of it yourself on your profile screen.
- Ask us to delete your data, where no law requires us to keep it. If you have ever paid us, the accounting and tax rules oblige us to keep the order, the invoice, and the payment record. We delete the rest: your profile, your progress, your attempts, your points, your gallery photos, your certificates, and your devices. We tell you what we kept and why.
- Withdraw a consent you gave, including your cookie consent, at any time. The withdrawal does not undo what we did lawfully before it.
- Object to a use we base on our legitimate interest.
- Ask us to restrict a use while we look at a complaint.
- Receive your data in a machine-readable form.
Write to support@shareh.ai. If you are not satisfied, you may complain to the Egyptian Personal Data Protection Centre. If you are under 18, your guardian may exercise these rights for you.
12. Learners under 18
The platform is built for school students, so most of our learners are minors. Every learner names a guardian when they register. The learner accepts the Terms of Use and this policy for themselves. We then write to the guardian address given at registration, and to a new address whenever it is changed, to tell the guardian that the account exists, to name the learner and the account email address, and to give the guardian a way to object. We do not ask the guardian to accept anything.
The Guardian and Minors Policy describes what we ask for and how a guardian reaches us. The leaderboard shows a nickname and never a real name. When too few learners are ranked in a group for a nickname to stay anonymous, the platform hides the board rather than showing it. You still see your own position.
The verification page of a certificate shows the learner's first and last name to anyone who holds the certificate, its QR code, or its address, so that the certificate can be checked against the name printed on it. It shows nothing else about the learner, and it is not listed in search engines.
We do not profile a learner for advertising and we do not sell a learner's data.
13. Security
We encrypt your data in transit and at rest. We limit staff access to the people whose work needs it, and we keep a record of administrative actions. We never store your password or your payment details. Details of our security measures are available on request from support@shareh.ai.
If a breach puts your rights at risk, we tell the Personal Data Protection Centre and, where the law requires it, we tell you.
14. Cookies
The Cookie Policy lists every cookie, who sets it, what it is for, and how long it lasts. You choose your analytics, marketing, and feedback categories on the banner, and you can change that choice at any time from the footer of any page or from your profile screen.
15. The other documents
These sit alongside this policy and are part of the same agreement:
16. Changes and contact
We may change this policy. When a change materially affects you, we tell you by email and on the platform before it takes effect, and we ask you to accept the new version the next time you sign in.
support@shareh.ai · WhatsApp +20 10 4424 4332