Privacy Policy

1. Scope of this privacy policy

This policy applies to the use of the Eco Passport app and its related services and systems, including in particular:

• Creating, signing in to, and managing the account.
• Activating the passport using an activation code or QR code.
• Following educational tracks and lessons.
• Answering quizzes and completing challenges.
• Collecting points, badges, and achievements.
• Uploading photos or videos to document missions.
• Issuing digital certificates and achievements.

2. Target audience

The Eco Passport app is primarily designed for young people aged 10 to 18.

When a user is below the legal age required to consent to the processing of their data, we may request the consent of a parent or legal guardian before creating an account or using certain features.

3. Information we may collect

First: account information

• Name or display name.
• Date of birth or age group.
• Gender, when provided on an optional basis.
• Governorate or city.
• School or educational institution name.
• Email address or phone number.
• Parent/guardian details when needed.
• Username and encrypted password.

Second: passport activation information

• Passport activation code.
• QR code linked to the account.
• The passport's unique identifier.
• Activation date and passport status.

Third: learning and progress data

• Completed tracks and lessons.
• Quiz answers and results.
• Points, rewards, and badges.
• Completed missions and challenges.
• The final environmental project.
• Activity and progress dates within the app.

Fourth: content uploaded by the user

When using the mission-documentation feature, the user may upload photos, videos, text, or files related to environmental activities.

Fifth: technical information

• Device type and operating system.
• App version and language used.
• Internet protocol (IP) address.
• Error and crash logs.
• Sign-in and activity times.
• Limited device or session identifiers.

4. How we use information

We use information for the following purposes:

• Creating and managing the user account.
• Activating the passport and linking it to its owner.
• Saving educational progress and achievements.
• Displaying points, badges, and certificates.
• Reviewing submitted missions and projects.
• Sending necessary account-related alerts.
• Providing technical support.
• Preventing fraud and unlawful use.
• Improving app performance and educational content.
• Preparing general, non-identifying statistics.
• Complying with legal and regulatory requirements.

We will not use data for purposes inconsistent with the app's educational nature without providing clear notice and obtaining the necessary consent.

5. Parental consent

We may request the consent of a parent or legal guardian when required by law, particularly when certain features are used by children.

Parental consent may cover:

• Approving the creation of the child's account.
• Approving the collection of basic data.
• Approving the upload of photos or videos.
• Approving the public sharing of a project or achievement.
• Reviewing or correcting the child's data.
• Requesting deletion of the account or data.

6. Photos and videos

Photos and videos uploaded by the user are used only for purposes related to environmental missions, challenges, and projects, such as:

• Verifying that the activity was carried out.
• Evaluating the environmental project.
• Documenting the achievement within the user's account.
• Displaying content after obtaining appropriate consent.

We will not publish the user's photos or videos in advertisements or public platforms without obtaining explicit, separate consent.

7. Geographic location

The app does not collect precise geographic location unless a feature requires it, and only after obtaining clear consent from the user or parent.

We may request general information such as governorate or city to personalize content or prepare general statistics about the program.

8. Sharing information

We do not sell or rent personal data, nor do we share it with advertisers for targeted marketing purposes.

We may share limited information with:

• Hosting and cloud storage providers.
• Notification and messaging service providers.
• Technical support and crash-analysis services.
• Partner schools or institutions when needed.
• Official authorities when disclosure is legally required.

These parties are permitted to use the information only to provide the agreed-upon services, while maintaining its confidentiality and security.

9. Advertising and tracking

The app does not intend to use children's data for targeted advertising or to create advertising profiles about them.

If any analytics or advertising service is added in the future, we will review its suitability for the age group, update this policy, and obtain the required consents.

10. Protecting information

We take appropriate technical and organizational measures to protect data, including:

• Encrypting communication between the app and the server.
• Storing passwords in encrypted form.
• Restricting data access according to permissions.
• Protecting activation codes and passport codes.
• Logging important administrative operations.
• Updating systems and addressing vulnerabilities.
• Creating appropriate backups.

However, no electronic method guarantees 100% complete protection, so we advise users to protect their own sign-in details.

11. Data retention period

We retain data only for as long as necessary to operate the account, provide services, save progress and achievements, and fulfill legal obligations.

When data is no longer needed, we delete it or securely anonymize it, unless retention is legally required.

12. User and parental rights

The user or parent, in accordance with applicable laws, may request to:

• Know what data we hold.
• Obtain a copy of the data.
• Correct inaccurate data.
• Delete the account and its associated data.
• Withdraw previously given consent.
• Object to certain data-use practices.
• Opt out of optional messages and notifications.
• Delete uploaded photos, videos, or missions.

We may request additional information to verify the requester's identity or their status as a parent before fulfilling the request.

13. Account deletion

Account deletion can be requested through one of the following methods:

• The account-deletion option within the app settings, when available.
• Contacting us via email.
• Using the account-deletion request page on the website.

After confirming the request, we delete the account and its associated data within a reasonable period, except for data that must be retained for legitimate legal or security reasons.

14. Notifications

The app may send notifications related to the following:

• New lessons and challenges.
• The user's progress and achievements.
• Account and security alerts.
• Certificates, badges, and rewards.
• Educational activities related to the program.

The user can turn off optional notifications from the app settings or device settings.

15. Links and external services

The app may contain links to third-party websites or educational services. This policy does not apply to those parties' practices, so it is recommended to review their own privacy policies.

16. Data transfer and storage

Data may be stored on servers within or outside the user's country, depending on the hosting provider and technical services used.

When transferring data between countries, we take appropriate measures to protect it in accordance with applicable laws and requirements.

17. Changes to this privacy policy

We may update this policy when:

• New features or services are added.
• Data-processing methods change.
• Technical service providers change.
• New legal or regulatory requirements arise.

We will indicate the last update date, provide appropriate notice when making material changes, and may request renewed consent when needed.

18. Contact us

To inquire about the privacy policy or request access to, correction of, or deletion of data, you can contact us using the following information: