سياسة الخصوصية وحماية البيانات

Privacy Policy (English)

Effective date: 12 November 2026. Developer, owner and data controller: Asim Faisal Ali Saeed, owner of El-Mohandes Scholarships (مكتب المهندس للمنح والدراسة بالخارج), referred to as "the Office". Contact: elmohandes.scholarships@gmail.com

Data we collect

• Account: name, email, email-verification status. Passwords are handled by Firebase Authentication and are never visible to us.
• Academic profile: nationality, residence, date of birth, target degree and field, certificates and grades with their countries, languages and test scores, work experience, leadership, volunteering, research, awards, application readiness and career plan.
• Optional sensitive answers: financial need and conflict displacement, used only to match scholarships that require them.
• Optional profile photo.
• Payments: method, amount, the receipt image you upload and request status. We do not collect card numbers or banking passwords.
• Your documents ("My documents"): files you upload yourself, such as your passport, certificates, transcripts and recommendation letters, and the scholarships you track. The office team sees them only when you ask it to apply with you.
• Application service requests: your phone or WhatsApp number, your note and the scholarship, so an adviser can contact you.
• Your CV: what you enter in the CV builder (contact details, education, experience, skills and languages). It is saved so you can edit it later and is seen by the office team only when helping you apply. When you ask for wording help, the text is sent to the AI provider for that purpose only.
• Document reviews: the letter or study plan you paste for review and its result (score, notes and suggested edits). The text is sent to the AI provider for the review only, and the result is saved so you can compare your versions.
• Mock interviews: the questions, your written answers and their evaluation. When you answer by voice, your browser turns speech into text with its own service (such as Google in Chrome); we do not keep any audio. The text is sent to the AI provider for the evaluation only.
• Recommendation letter requests: the recommender's name and email (if you enter it), the scholarship and your note to them, the request status, and the letter they upload. Through the private link the recommender sees only your name, the scholarship and your note; the letter is saved in your document vault.
• "Your feedback" messages: the problem, suggestion or rating you send, the screenshot if you attach one, the app version and device type, and the office's reply.
• AI coach: your messages, the coach's replies, and daily/weekly/monthly usage counters.
• Notifications and, on Android, the device notification token.
• Basic server logs (time, IP address, account ID, AI token counts) for security and abuse prevention.

We show no ads and we do not sell or share your data for third-party marketing.

How we use it

To run your account; assess your profile and match it against scholarship rules (including grade equivalence by country); generate AI coach replies (your message and a profile summary are sent to the AI provider for that purpose only); verify payments and activate subscriptions; send account notifications; keep the service secure and enforce usage limits; and answer your requests.

Success stories: if you write your success story and explicitly agree to publish it, the Office publishes it after review inside the app and on a public web page, under the name you choose (full, first name only, or no name) with the scholarship and the year. We never publish your email, phone or profile. Delete it any time in the app and it is removed from both.

Your school or counselor: if you join a school, centre or counselor group with its code and explicitly agree, the group's manager sees only your name, the level you want to study, your profile score, how many scholarships you track and how many times you were accepted. They do not see your documents, messages, payments or profile details. Leave the group any time from your profile and this stops and your data is removed from it; it is also removed when you delete your account.

Ambassador codes: if you sign up with the code or link of one of the Office's ambassadors (a school, centre or student), the ambassador sees your first name, the first letter of your second name and your sign-up date, and for each approved payment its amount and their commission, so the Office can calculate it. They never see your email, phone or academic profile.

AI: we never use your data to train any AI model. Coach messages go to Anthropic only to generate the reply, and Anthropic does not train its models on API data under its commercial terms.

Notifications and email: account notifications (payments, dates, your requests) are part of the service. Office announcements and offers can be turned off in Profile → Phone notifications → Office announcements and offers. We send no marketing email; emails are limited to account verification and password reset.

Cookies: no tracking cookies, analytics or ads; see Cookies and device storage.

Processors

Google Firebase (authentication, Firestore database, messaging), Cloudinary (profile photos, payment receipts and the documents you upload), Netlify (web hosting, AI coach server, usage counters) Anthropic (Claude models for the AI coach), Moyasar and Paymob (online payments in Saudi riyals and Egyptian pounds: you enter your card details on their page and we never receive them; we send the amount, currency, your name and email, and receive only the transaction status and number to activate your account), WhatsApp by Meta (only if you turn on WhatsApp notifications in your profile: we send your activation, office replies and the most urgent daily reminder to your number through WhatsApp Business; Meta receives your number and the message text only, and you can turn it off any time), and Google Play (for subscriptions bought in the Android app installed from Google Play: Google handles the whole payment and we never receive your card details; we receive only the purchase token, subscription status and expiry date to activate your account). Their servers may be located outside your country.

Retention

Account, profile and photo: until you delete your account. AI conversations: until you delete them or your account. Payment records and receipts: up to 3 years from payment for accounting and dispute handling. Uploaded documents: until you delete them or your account. Error reports: up to 90 days. Technical logs: short periods set by the hosting provider.

Your rights

View and edit your data in the app; delete AI conversations; delete your account in the app (Profile → Delete account) or through the account deletion page; withdraw consent by deleting your account; download a full copy of your data yourself any time (Profile → Download a copy of my data, JSON); turn off office announcements; request a correction or anything else by email (we answer within 30 days).

Security

Encrypted connections (HTTPS), database rules that stop users from reading each other's data, and service keys kept server-side only.

Children

The app is not directed to children under 13 and we do not knowingly collect their data. Users under 18 should use it with a parent or guardian's consent. At sign-up users confirm they are 13 or older, and under 18 with a guardian's consent. If we learn an account belongs to a child under 13, we delete it and its data.

Changes

We will notify you in the app about material changes and ask for your consent again.