Oustad
Start for free

Privacy policy

Last updated: August 2026

The Oustad platform respects the privacy of its users and is committed to protecting their personal data. This policy explains which data we collect when you use our services, why we collect it, who we share it with, and which rights Algerian law grants you over it. By using the Oustad service, you acknowledge that you have read this policy.

1. Who we are

Oustad is an educational platform for third year secondary school students in Algeria preparing for the baccalaureate examination. It is available through the oustad.app website and through the mobile app.

The platform is operated by زواوي وسيم إلياس (Zouaoui Wassim Elyes), a sole trader registered in Algeria, holder of tax identification number 10216300045716041680 issued by the Directorate General of Taxes. Place of business: Coop Immo El Djamel BT 02, Rouiba, Alger. The data controller is the operator himself, who can be reached by email at wassdzouaoui@gmail.com or by phone on +213 563 19 18 93.

2. Applicable law

The processing of your data is governed by Law no. 18-07 of 10 June 2018 on the protection of natural persons in the processing of personal data, and by the other Algerian texts in force, in particular Law no. 18-05 on electronic commerce and Law no. 09-03 on consumer protection and the suppression of fraud. Both the operator and the users are located in Algeria.

3. The data we collect

We collect only the data needed to provide the service:

  • Account data: first and last name, email address (or Google account if you choose to sign in that way), role (student or parent), track and specialisation, wilaya, date of birth (optional) and phone number (optional).
  • Learning activity data: the lessons, exercises and quizzes completed, the answers given, the study time as measured on the server side, and the progress calculated in each subject.
  • Data linking a parent account to a student account.
  • Subscription data: the photo of the CCP or BaridiMob transfer receipt, the subscription amount and its status. We collect no bank card data and we never see any card number.
  • The exercise photos you upload yourself through the "Snap an exercise" feature.
  • Technical data: IP address, device type and operating system, usage logs, and the cookies detailed in section 12.
  • Measurement and advertising data: the pages you visit on our site and how long you stay on them, the site or advertisement you came from, and the advertising click identifier where one exists. This data is used to measure how effective our advertising is and to find out whether our pages are understood.

We collect no sensitive data within the meaning of Law 18-07, and we never ask you for any.

4. Purposes and legal basis of the processing

  • Providing the educational service and managing the account and the subscription, in performance of the contract between you and us.
  • Securing the service, preventing unlawful use and improving the quality of the content.
  • Measuring how effective our advertising is and knowing which advertisement or page led to an actual sign up, which rests on our legitimate interest in not spending an advertising budget in the wrong place. You may object to this particular processing as set out in sections 10 and 12, without that preventing you from using the platform.
  • Meeting the legal, tax and accounting obligations that apply to the operator.

The processing is based on your express consent when the account is created, and on the consent of the parent where a minor is concerned. You may withdraw that consent at any time by deleting the account or by writing to us, without affecting the lawfulness of the processing carried out before the withdrawal.

5. Intended audience and minimum age

Oustad services are aimed at students in the final year of secondary education who are preparing to sit the baccalaureate examination, and who are usually 16 years old or older. Our services are not aimed at children, we do not knowingly open an account for a child under 16, and if we become aware of such an account we delete it.

6. Minors and parental consent

The legal age of majority in Algeria is nineteen full years, so a large share of third year secondary students are minors. In that case, the student’s data is processed with the consent of their parent or legal representative. The parent can create their own account, link it to their child’s account, follow the child’s work, and exercise the rights set out below on the child’s behalf, including requesting the deletion of the account.

7. Who we share data with

We never sell your data. We share the strict minimum with service providers who act on our behalf and on our instructions:

  • The hosting provider, where the data is stored on servers located in the European Union.
  • Umami, the audience measurement tool that we host ourselves on our own server. It records the pages visited, the device and the site you came from. It builds no profile about you and its data is never sent to any third party.
  • Meta (Facebook and Instagram), when you reach us through an advertisement on one of its platforms. We send Meta the sign up or subscription event, together with your email address in a hashed form from which the original address cannot be recovered, the advertising click identifier, the IP address and the browser type. The only purpose is to know which advertisement led to an actual sign up. We do not send it your learning activity, your results or the content of your exercises.
  • The lahsab platform, to organise manual payment by CCP and BaridiMob and to track the state of the subscription.
  • Google, in one case only: if you choose to sign in with a Google account.
  • The Amazon SES service, to send account related emails such as sign up confirmation and password recovery. The provider receives your email address and the text of the message.
  • Artificial intelligence providers, namely Google through the Gemini service and DeepSeek, exclusively to run the "Snap an exercise" feature and to generate or correct exercises at your request. All that is sent to them is the image or the text of the exercise, plus your answer when you ask for a correction, without your name, without your email address and without your account identifiers. They act as processors on our instructions and are not permitted to use this content for their own purposes.

We disclose your data to no other party except on a judicial request or under a legal obligation.

8. Where the data is stored

The platform servers are currently hosted inside the European Union, which means your data is transferred and stored outside the national territory. Some of the providers listed above may also be located outside Algeria. In those cases we make sure the operation stays within what is necessary to deliver the service, and complies with the safeguards that Law 18-07 imposes on transfers of data abroad.

9. Retention period

We keep your data for as long as your account is active. After the account is deleted, your data is made anonymous so that it can no longer be linked to you, except for the accounting documents relating to subscriptions, which are kept for the period required by tax and commercial law.

10. Your rights

Law 18-07 grants you the following rights over your data:

  • The right to be informed that processing exists and what it involves.
  • The right to access your data.
  • The right to correct inaccurate or incomplete data, or to have it erased where the processing does not comply with the law.
  • The right to object to the processing on legitimate grounds.

Beyond what the law provides, we commit on our side to letting you withdraw your consent at any time and to delete your account directly from inside the app, which results in your data being made anonymous.

To exercise any of these rights, write to us at wassdzouaoui@gmail.com and we will reply within a reasonable time. You also have the right to lodge a complaint with the National Authority for the Protection of Personal Data.

11. Data security

We take reasonable technical and organisational measures to protect your data against loss, unauthorised access, disclosure or alteration, including encryption of the connection and restricted access to the database. No method of transmission or storage over the internet can guarantee absolute security.

12. Cookies

In the web version we use three kinds of cookies:

  • The authentication cookie (oustad_token), which is necessary for the service to work and whose purpose is to keep you signed in.
  • The visit source cookie (oustad_attr), in which we record the advertisement or campaign you came from, valid for 90 days. Its only purpose is to connect your sign up to the advertisement that led to it.
  • The Meta advertising cookies (‎_fbp and ‎_fbc), placed by the Facebook tag when you reach us through an advertisement, which let Meta know that the click on the advertisement ended in a sign up.

In the mobile app, by contrast, we use no cookies at all, since the sign in token is kept in the secure storage of the device.

We do not use cookies to display advertising inside the platform, nor to sell your data, nor to track you across other sites unrelated to us. You can delete these files or block them from your browser settings at any time, or use private browsing, without it affecting your use of the platform, apart from the authentication cookie without which you cannot stay signed in.

13. Changes to this policy

We may update this policy to reflect changes in our services or in the law. When we make a substantial change we will inform you by appropriate means, and the last updated date shown at the top of the page indicates the version in force.

14. Contact us

For any question or request about this policy or about your data, write to us at wassdzouaoui@gmail.com, call us on +213 563 19 18 93, or write to us at: Coop Immo El Djamel BT 02, Rouiba, Alger.