Privacy Policy
Last updated: 29 June 2026
This Privacy Policy explains how AABAR ("AABAR", "we", "us") collects, uses, shares, and protects personal information in connection with the AABAR Nurseries platform — the web dashboard used by nursery administrators and staff, the AABAR Parents mobile app, and the AABAR Staff mobile app (together, the "Services").
Who we are
AABAR provides nursery-management software to nurseries (each a "Nursery"). For data that parents and staff submit through the Services, the relevant Nursery is the data controller and AABAR acts as a data processor on the Nursery's behalf. For account and operational data we determine ourselves, AABAR is the controller. Contact: info@aabar.io · Egypt.
Who uses the apps
The Services are intended for adults — nursery administrators, teachers/staff, and parents or guardians. The apps are not directed to children and children do not create accounts or use the apps themselves. Children are the subjects of certain records that authorized adults enter on their behalf (see below).
Information we collect
Depending on your role, we process the following categories of data:
- Account & identity — name, email address, phone number, role (admin/teacher/parent), relationship to a child, and the Nursery you belong to.
- Authentication — a hashed password and a session token (JWT) used to keep you signed in. We never store passwords in plain text.
- Children's information (entered by authorized staff/parents) — name, date of birth, class/level, profile photo, and allergy / dietary information.
- Daily care records — daily progress logs (meals, nap, mood, water, attendance, activities, notes), class schedules, and weekly menus.
- Health-related requests — medicine requests (medicine name, dosage, schedule, dates) and any prescription image you upload; dose logs recorded by staff.
- Communications — chat messages between parents and staff, including voice notes (audio recordings) you choose to send.
- Events & payments — event RSVPs and any payment-proof images you upload (we do not collect card numbers or process card payments in the app).
- Images / files — photos and documents uploaded through the apps (child photos, announcement images, prescriptions, payment proofs).
- Device & notifications — a push-notification token and device name, used only to deliver notifications you have enabled.
- Technical / log data — minimal server logs (e.g. error diagnostics) needed to operate and secure the Services.
How we use information
- To provide the core service: linking parents to their own children, showing daily reports, schedules, menus, announcements, events, medicine, and therapy/behavior records.
- To enable parent↔staff messaging (text and voice notes).
- To send notifications you opt into (e.g. a new daily report or message).
- To authenticate you and keep your account and your Nursery's data secure.
- To operate, maintain, debug, and improve the Services.
We do not sell personal data, we do not use it for advertising, and we do not run third-party ad networks or analytics SDKs that track you across other apps.
Data isolation (multi-tenant)
The platform is multi-tenant: each Nursery's data is strictly scoped to that Nursery, and a parent can only access records for their own linked child/children. Access is enforced on every request by server-side authorization checks.
Legal bases (where GDPR/▲ applies)
- Contract — to provide the Services you or your Nursery signed up for.
- Legitimate interests — to secure, operate, and improve the Services.
- Consent — for optional features such as push notifications, microphone/voice notes, and photo uploads.
- Legal obligation — where we must retain or disclose data by law.
Permissions the apps request
- Microphone — only when you record a voice note to send in a chat.
- Notifications — only to deliver alerts you enable.
- Photos/Storage (as applicable) — only when you choose to attach an image (e.g. prescription, payment proof, profile photo).
Sharing & processors
We share data only as needed to run the Services: with your Nursery and its authorized staff; with infrastructure providers that host the platform (e.g. our cloud hosting and managed database provider); and with the push-notification delivery service when you enable notifications. These providers process data on our instructions under appropriate agreements. We may disclose data if required by law or to protect rights and safety.
Data retention
We retain personal data for as long as your account/Nursery is active and as needed to provide the Services, then delete or anonymize it within a reasonable period, unless a longer period is required by law. Nurseries can request deletion of records they control.
Your rights
Subject to your local law, you may request access, correction, deletion, export, or restriction of your personal data, and may withdraw consent for optional features. To exercise these rights, contact info@aabar.io (for a child's records, requests are handled together with the relevant Nursery). You may also contact your local data-protection authority.
Account & data deletion
To delete your account and associated personal data, email info@aabar.io from your account email, or ask your Nursery administrator. We will process verified deletion requests within a reasonable timeframe.
Security
We protect data with industry-standard measures: encrypted transport (HTTPS), hashed passwords, scoped bearer-token authentication, tenant isolation, and signed time-limited URLs for private media (photos and voice notes). No method of transmission or storage is 100% secure, but we work to protect your information.
Children's data
Information about children is entered solely by authorized adults (the Nursery's staff and the child's own parents/guardians) for childcare purposes. Children do not use the apps. We handle children's data with extra care and only for delivering the childcare service.
International transfers
Data is processed in the region where our hosting and database are located. Where data is transferred across borders, we rely on appropriate safeguards as required by Egypt law.
Changes to this policy
We may update this policy; we will post the new version here and update the "Last updated" date.
Contact
AABAR — info@aabar.io — Egypt