Privacy policy

1. Data controller

The platform is operated for your institution, which acts as data controller; EFAIX acts as its processor and runs the platform on its behalf. The contact point and the CNDP declaration reference must be completed by the institution before publication.

2. Data processed

The platform processes the following categories of data:

• Identity and account: full name, institutional email address, role (student, teacher, administrator), affiliated institution.
• Academic data: class and modules, courses and documents opened, submitted assignments (including uploaded files), grades and feedback, attendance, evaluation responses.
• Communications: internal messages and their attachments, notifications, support tickets.
• Personal tools: calendar, tasks, notes, meetings and, where applicable, meeting recordings.
• Student life: club membership, board roles, event registrations and form responses.
• Service requests: printing, materials or IT support requests and their attached files.
• AI features: practice quiz results, saved mind maps and a daily usage counter.
• Technical data: session state and online presence indicator.

3. Purposes

Data is processed to deliver the educational service: enrolment and access to courses, submission and grading of work, communication between members of the school, administration of student records and related services, and the operation of the learning-support tools.

4. Artificial intelligence features

The AI teacher, the mind map generator and the quiz generator send excerpts of the relevant course documents, together with your question, to a third-party inference provider (Cerebras). This processing takes place outside Morocco; the transfer must comply with the formalities required by Law 09-08.

Your conversations with the AI teacher are not stored on our servers: the history remains in your browser for the duration of the session. Your practice quiz results and the mind maps you generate are stored and linked to your account.

The study coach uses only data already held in the platform (quiz scores, deadlines, documents opened). No decision producing legal effects or affecting your academic record is taken automatically: the suggestions are advisory.

5. Recipients

Access is partitioned by role and enforced at the database level. A teacher can access the work and results of students in their classes; an administrator can access student-record data for their institution; a student can access their own data and the content of courses they are enrolled in.

Hosting is provided by Supabase (database and file storage). The AI features involve Cerebras as a processor, under the conditions described in section 4.

6. Retention

Account and academic-record data is retained for the duration of enrolment and thereafter according to the institution's archiving rules. Personal-tool data and AI content are deleted when an account-closure request is processed. Final retention periods must be set by the institution.

7. Your rights

You have rights of access, rectification and objection in respect of your data, under the conditions set out in Law 09-08. These rights may be exercised through the contact point designated by the institution. Some data cannot be deleted on request where it forms part of the academic record (submitted work, results).

To exercise your right to erasure, send a request to your institution or to platform support. Academic records are retained in line with the applicable archiving obligations.

8. Security

Access is authenticated and role partitioning is enforced by the database itself, not only by the interface. Files are held in restricted-access storage. Third-party service keys are never exposed to the browser.

9. Cookies

The platform sets cookies required for it to function — including maintaining your authenticated session and remembering your language and theme preferences — as well as limited analytics cookies to understand service usage and performance. No advertising cookies are used.