# Your data stays yours _Mektebi 1.3 ยท reviewed 2026-10-24_ Each mosque's data is kept apart from every other mosque. The mosque decides about its data, and FETOSOFT hosts it on the mosque's behalf. A mosque that uses Mektebi trusts it with the names of its families, the progress of its children and the messages of its community. This chapter explains, in plain words, what Mektebi promises about that data. The promises themselves are in the [privacy policy](/privacy) and the [data processing agreement](/dpa). ## The mosque decides, FETOSOFT hosts Each mosque is responsible for the data of its students, parents and muallims. It decides who is enrolled and what is recorded about them. In legal terms, the mosque is the controller. FETOSOFT DOOEL runs the platform. It processes that data only on the mosque's instructions, as the mosque's processor. It does not use the data for its own purposes, does not sell it and does not use it for advertising, profiling or analytics. The people at FETOSOFT who work with the data are bound by confidentiality. If you are a student, a parent or a muallim, your mosque is the first place to ask about your data. ## Each mosque's data is kept apart Every mosque has its own space on Mektebi, and its records are kept apart from those of every other mosque. A mosque sees only its own records: its people, enrolments, grades, attendance, notes and chats. Chats stay within one mosque. This separation is checked by automated tests on every change: every page is tested automatically against another mosque's records. Inside a mosque, each role sees what it needs. Admins, muallims, parents and students each have their own access. {{shot:members-list}} ## One person in several mosques A person can belong to more than one mosque with the same login. At each mosque they have a separate profile. - No mosque can see another mosque's records about the person, such as enrolments, grades, attendance or notes. - The login is one account that the person manages themselves: their name, email address, profile photo and password. - The name, email address and profile photo are visible to every mosque the person belongs to. - A mosque cannot change the login of a person who also belongs to another mosque. {{shot:profile-switcher}} ## What a mosque can share: courses, never people There are two places where a mosque's work can be seen outside the mosque. In both, the mosque decides. **The Library.** A mosque, through its admins or the muallims of a course, can share that course's content with other mosques through the Library. Shared content carries the name of its author and their mosque. It contains teaching content only: text, quizzes and embedded images or audio. It never contains learner data or mentions of people. **The public course catalogue.** A mosque can publish a course in the public catalogue on the Mektebi website, which anyone can view without signing in. A published course shows its title and description, the mosque's name, the muallim's name and photo, and the number of enrolled learners. The mosque chooses which courses it publishes. ## When FETOSOFT support looks in Sometimes a problem can only be solved by seeing what the user sees. For support, and only when it is needed, for example to solve a problem that you or your mosque reported, authorised FETOSOFT support staff may access a mosque's data or sign in as a user. This access is used only for support and to keep the platform running, and the staff are bound by confidentiality. ## Where the data is stored The data is stored in the European Economic Area: - The application and the database are hosted by Vultr in the Netherlands. - Uploaded files, such as audio recordings, images and documents, are stored with Cloudflare R2, in storage bound to EU jurisdiction. FETOSOFT runs the platform from North Macedonia, and its staff access the data from there to operate and support the platform. North Macedonia is not on the list of countries with an adequate level of data protection. This access is therefore covered by the EU Standard Contractual Clauses, in the version adapted for Switzerland and recognised by the Swiss Federal Data Protection and Information Commissioner. They are part of the data processing agreement with the mosque. Cloudflare is a company based in the United States. The files stay stored in the EU, and any access by Cloudflare is covered by the same safeguards as other transfers to the United States. A few service providers, for email, error monitoring and push notifications, process certain data in the United States. The [privacy policy](/privacy) lists them and the safeguards that cover them. FETOSOFT gives the mosque at least 30 days' notice before it adds or replaces any provider that processes the mosque's data, and the mosque can object. ## How long data is kept A mosque's member data is kept for as long as the mosque keeps its account active. When an account or a profile is deleted, the personal data that belongs to it is deleted or anonymised within 90 days. It is removed from backups within the normal backup rotation. Where the law requires certain records to be kept, they are kept only for as long as the law requires. Some data is deleted sooner, for example absence reports and the records of who opened a mosque notice. The [privacy policy](/privacy) lists these periods. When a mosque stops using Mektebi, it can choose to have its data deleted or returned. ## Your rights You have the right to: - know what data is held about you and see it; - have wrong or incomplete data corrected; - have your data deleted; - restrict or object to its processing; - receive your data in a portable format; - withdraw your consent at any time. The quickest way is usually to ask your mosque. You can also write to support@fetosoft.com, and FETOSOFT will act on the request or pass it to your mosque. You can also complain to a data protection authority: in North Macedonia, the Agency for Personal Data Protection; in Switzerland, the Federal Data Protection and Information Commissioner; in the European Union, the authority of the country you live in. ## Binding texts The binding texts are the [privacy policy](/privacy), the [data processing agreement](/dpa) and the [terms](/terms). If anything here differs from them, those texts apply.