Privacy Policy

Last updated: July 22, 2026

Array LMS ("Array", "we", "us", "our") provides a cloud-based education-management platform ("the Service") used by schools, training centers, and academies ("Academies") to manage students, instructors, courses, groups, live classes, fees, and related academic operations. This Privacy Policy explains what data we collect through the Service, how we use it, who we share it with, and the choices available to you.

Each Academy that uses Array is the data controller for the personal data of its own students, guardians, instructors, and staff. Array acts as the data processor, operating the platform on the Academy's behalf. If you are a student, parent, or instructor with a question about your data, please contact your Academy first; Array supports Academies in fulfilling their obligations to you.

Contents 1. Information we collect 2. How we use information 3. YouTube API Services disclosure 4. Who we share data with 5. Data retention & deletion 6. Security 7. Children's privacy 8. Your rights 9. Multi-academy data separation 10. Changes to this policy 11. Contact us

1. Information we collect

Depending on your role (student, guardian, instructor, or academy admin), the Service may collect:

2. How we use information

We do not sell personal data, and we do not use student data for third-party advertising.

3. YouTube API Services disclosure

Array LMS uses YouTube API Services.

When an Academy enables recording for a live class, the Service automatically uploads the resulting video as an unlisted/private video to that Academy's own YouTube channel. The recording is used solely so that students already enrolled in that course can review the class after it ends. Array does not use YouTube data for any other purpose, and does not use it to build advertising profiles.

By using the recording feature of the Service, the Academy that connects a YouTube channel is also bound by the YouTube Terms of Service and the Google Privacy Policy.

An Academy admin who connected a YouTube channel to the Service can review or revoke Array's access to that Google account at any time from Google Account → Security → Third-party apps with account access. Revoking access stops all future uploads immediately; previously uploaded recordings remain on the connected YouTube channel under that Academy's own control.

4. Who we share data with

We share data only with service providers that help us operate the Service, under contractual confidentiality obligations, and only to the extent needed to provide their function:

We may also disclose information where required by law, regulation, or valid legal process.

5. Data retention & deletion

We retain personal data for as long as the Academy's account with us is active, or as needed to provide the Service. Financial records (invoices, payment transactions) are retained for the period required by applicable tax and accounting law, even after a student or instructor record is otherwise deleted.

An Academy admin can request deletion/anonymization of a student or instructor's personal data at any time. On request, we anonymize personally identifying fields (name, contact details, guardian information) while preserving the underlying academic and financial records legally required to be kept, in de-identified form where possible.

6. Security

7. Children's privacy

Array LMS is designed to be used by Academies to manage students of any age, including minors, under the supervision of the Academy and, where applicable, the student's parent or guardian. Academies are responsible for obtaining any consent required by local law before enrolling a minor and providing their information to the Service. Guardian contact information is collected specifically to support this relationship (e.g. progress updates, fee notices).

8. Your rights

Depending on your location, you may have rights to access, correct, export, or request deletion of your personal data. Requests should be directed to your Academy in the first instance, as they control the underlying student/staff record; Array provides the tools Academies use to fulfil these requests and will assist an Academy directly on request.

9. Multi-academy data separation

Array LMS is a multi-tenant platform: each Academy's students, instructors, courses, fees, and recordings are stored separately from every other Academy's data and are not visible to other Academies. Platform-level administration (billing between Array and an Academy, uptime/security monitoring) does not involve reading individual student records except as needed to provide technical support at an Academy's request.

10. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes to the Service or applicable law. We will update the "Last updated" date above when we do. Material changes will be communicated to Academy admins.

11. Contact us

Questions about this policy or how Array LMS handles data can be sent to: ahmed.reffaey.95@gmail.com.