Privacy Policy

1. About this Policy

This Privacy Policy explains how Ityhad Solutions, operating under the name “Ityhad” (“Ityhad,” “we,” “us,” or “our”), collects, uses, stores, discloses, and protects personal information.

This Policy applies when you use:

The Ityhad website;
The Ityhad mobile application;
Student, school, administrator, and therapist portals;
Public application and parent-approval pages;
Messaging, notification, support, and related services.

Together, these are called the “Services.”

Ityhad helps schools and educational communities prevent and respond to bullying, connect students with appropriate support, communicate with authorized school personnel and therapists, and access educational resources.

2. Who operates Ityhad?

Ityhad is operated by:

Ityhad Solutions Registration number: 199879 15 Avenue Al Abtal, No. 4, Rabat Email: contact@ityhad.com

When a participating school creates student accounts, provides student records, manages school personnel, or responds to school-related reports, that school may also be responsible for its own use of personal information.

Questions about a school’s independent practices should be directed to the school.

3. Information we collect

The information we collect depends on your role and how you use Ityhad.

Account information

We may collect:

First and last name;
Email address;
Telephone number;
Account and authentication identifiers;
School or organization;
Account role;
Profile photograph;
Account, invitation, membership, and security status;
Language and application preferences.

Authentication and login sessions are managed through a specialized authentication provider. Ityhad does not need to receive your password in plain text.

Student and school information

A participating school or administrator may provide:

Student name and email address;
School, grade, and class;
City;
Telephone or parent telephone number;
Profile photograph;
Gender;
Date of birth;
School membership and invitation information.

This information may be entered individually or uploaded through a school roster file.

Wellbeing and support information

When a student uses the screening, support, SOS, or follow-up features, we may process:

Answers about bullying or harassment;
Emotional, social, physical, and academic effects;
Free-text descriptions;
Screening classifications such as light, moderate, or severe;
Suggested next steps;
Follow-up status and feedback;
Severe or priority support requests;
The type of support selected;
Parent, relative, therapist, or school-staff contact details;
Therapist selections, responses, and refusal reasons;
Support-request and appointment status.

This information may be sensitive and may reveal information about a student’s health or wellbeing.

Bullying reports and testimonies

When a user submits a report, we may collect:

The students identified as victims or alleged perpetrators;
The location, date, or time of the incident;
A description of what happened;
Responses or confirmations from identified participants;
The report’s review status;
Actions taken by authorized personnel.

The reporting interface may display a generated alias and hide the reporter’s identity from ordinary recipient views. However, Ityhad retains a technical link between the alias and the authenticated account for security, investigation, abuse prevention, and service operation.

Reports submitted under an alias are therefore pseudonymous, not technically anonymous from Ityhad.

Messages and appointments

We may collect:

Messages between students and therapists;
Messages between students and authorized school administrators;
Chat participants and timestamps;
Message delivery and read status;
Blocking and reporting information;
Appointment proposals and available time slots;
Appointment confirmations, reminders, cancellations, and declines;
Appointment notes and reasons provided by users;
Parent responses submitted through appointment links.

Users should avoid including unnecessary sensitive information in messages.

Therapist information

We may collect:

Name, email address, and telephone number;
Professional category, specialization, and job title;
Years of experience;
Professional biography and profile photograph;
Office address and working hours;
Professional contact details;
Office latitude and longitude;
License applications and supporting documents;
Articles, images, and professional content;
Patient, communication, support-request, and appointment relationships created through the Services.

Some therapist information is displayed publicly or to students so users can identify and contact suitable professionals.

School and therapist applications

Applicants may provide:

Full name and contact information;
Establishment or workplace;
Professional or organizational role;
Specialization and experience;
School type, city, and address;
Authorization documents;
Trade-register documents;
State-recognition documents;
Other supporting files;
Application and license status.

Content and activity

We may collect:

Articles created by therapists;
Saved articles and reactions;
Search and filter selections;
Reports of inappropriate content;
Feedback, complaints, and support requests;
Notification read status;
Recent account activity.

Location information

With your permission, the mobile application may access your device’s foreground location to center the therapist map and help show therapists near you.

Ityhad does not request background-location access.

Location permission is optional. You may refuse or withdraw it through your device settings. Some nearby-therapist features may be less useful without it.

The application may process the visible map area or geographic boundaries needed to retrieve therapist locations. Device location and map information may also be processed by the device operating system and map provider.

Notifications and device information

If you enable push notifications, we may collect:

A push-notification token;
Device platform;
Device name;
Application version;
Notification delivery and receipt information;
Date the device was last active.

We use this information to send chat messages, support updates, appointment reminders, screening results, and service announcements.

You can disable notifications through your device settings, although important in-app notices may remain available when you open the Services.

Technical information

We may automatically receive:

IP address;
Device, browser, and operating-system information;
Application version;
Request dates and times;
Requested pages or routes;
Session and authentication information;
Error and security records;
Communication and notification-delivery records.

We use this information to operate, secure, troubleshoot, and maintain the Services.

4. Where information comes from

We may receive personal information:

Directly from you;
From your school or organization;
From authorized administrators;
From therapists;
From a parent, guardian, relative, or selected contact;
From other users who identify you in a report;
From authentication, notification, mapping, and communication providers;
Automatically from your browser, device, or application.

If another person identifies you in a bullying report, we may need to retain and review that information even though you did not provide it directly.

5. How we use information

We use personal information to:

Create and authenticate accounts;
Connect users to the correct school or organization;
Manage student and staff invitations;
Provide role-appropriate features;
Process wellbeing questionnaires;
Generate screening classifications and support suggestions;
Receive and manage bullying reports;
Connect students with authorized support;
Facilitate communications with school staff and therapists;
Arrange appointments and parent approval;
Send push, web, email, SMS, or WhatsApp communications;
Provide therapist directories and maps;
Provide educational articles and contacts;
Process school and therapist applications;
Manage licenses, seats, and organization access;
Respond to feedback, inquiries, and deletion requests;
Moderate harmful or inappropriate content;
Investigate abuse, fraud, and security incidents;
Maintain compatible and secure application versions;
Comply with legal obligations;
Protect the safety and vital interests of users where permitted.

We do not sell personal information. We do not use student wellbeing or support information for third-party advertising.

6. Screening and automated processing

Answers submitted through the wellbeing questionnaire may be processed using predefined rules to generate a screening category and suggested next steps.

A screening result:

Is intended to guide access to support;
Is not a medical or psychological diagnosis;
Does not replace assessment by a qualified professional;
Should not be the sole basis for a medical, legal, disciplinary, or safety decision.

Certain text or images may be submitted to automated safety-moderation services. These services help identify potentially harmful, inappropriate, or unsafe content.

Flagged content may be rejected or reviewed by authorized personnel. Automated moderation can make mistakes and does not mean that every submission has been reviewed by a person.

7. How information is shared

We disclose information only when reasonably necessary to provide, secure, or administer the Services.

Schools and authorized personnel

Authorized school administrators or staff may receive information necessary to:

Manage school accounts;
Review bullying reports;
Respond to requests for school support;
Manage account-deletion requests;
Perform safeguarding and administrative responsibilities.

Access should be limited to personnel with a legitimate need to know.

Therapists

A selected or assigned therapist may receive information necessary to:

Review and respond to a support request;
Understand relevant screening context;
Communicate with a student;
Propose and manage an appointment;
Provide related professional services.

This may include student profile information, screening context, messages, support-request information, appointment information, and relevant parent contact details.

Parents, guardians, relatives, and trusted contacts

When a student selects a parent, relative, or another trusted person for support, Ityhad may use the provided contact details to send a limited message or support request.

In certain severe-support workflows, a parent may receive:

A notice that support communication has begun;
An appointment proposal;
A secure appointment link;
Appointment reminders;
Limited therapist contact information.

Parent links may show the therapist’s name, telephone number, and available appointment times. Recipients should keep these links private.

Service providers

We use specialized providers for:

Authentication and account management;
Cloud hosting and databases;
File and image storage;
Email delivery;
Push notifications and application updates;
Maps and location features;
SMS or WhatsApp communications;
Automated content-safety moderation;
Security, caching, and service infrastructure;
Apple and Google application distribution.

These providers may process identifiers, contact details, device information, content, files, or technical records only as necessary to perform their services.

Legal and safety disclosures

We may disclose information when reasonably necessary to:

Comply with applicable law or a lawful authority request;
Protect a student or another person from serious harm;
Investigate fraud, abuse, or security incidents;
Enforce the Terms of Use;
Establish, exercise, or defend legal claims;
Complete a lawful merger, financing, reorganization, or transfer of the business.

8. Children and students

The Services are designed to be provided to students through participating schools and authorized organizations.

Schools are responsible for ensuring that student accounts are created lawfully and that any required notices, permissions, or consents have been obtained from students, parents, or guardians.

Where a student cannot legally provide consent, authorization must be provided by a parent, guardian, school, or other legally authorized representative.

Parents and guardians may contact us regarding the information of a child for whom they are legally responsible. We may need to verify their identity and authority before processing a request.

9. Confidentiality and safeguarding

Ityhad limits access to sensitive information based on user role and operational need. However, confidentiality is not absolute.

Information may be disclosed when:

The user requests contact with a therapist, school representative, parent, relative, or other helper;
Disclosure is needed to operate the selected support workflow;
There is a serious safety concern;
Disclosure is legally required;
Information must be reviewed to investigate abuse or protect the Services.

Reports displayed under an alias remain technically linked to the reporting account within Ityhad’s system.

Users should avoid entering unnecessary identifying information in free-text fields.

10. Cookies and local storage

The website and mobile application use essential cookies, secure storage, and similar technologies for:

Authentication and session management;
Security and fraud prevention;
Language and display preferences;
Application-update preferences;
Core functionality.

The mobile application may store authentication sessions and preferences using secure device storage.

We do not currently use behavioral advertising cookies. If non-essential analytics or advertising technologies are introduced, this Policy and the relevant consent controls will be updated.

11. Retention

We retain personal information only for as long as reasonably necessary for:

Providing the Services;
Maintaining account and organization relationships;
Safeguarding students;
Preserving professional and support records;
Resolving disputes;
Investigating abuse or security incidents;
Complying with legal obligations.

Retention depends on the type and sensitivity of the information, its purpose, the duration of the account or school relationship, and applicable professional or legal requirements.

Operational examples include:

Abandoned application drafts may be removed after a short period;
Original school roster-upload files are generally removed from file storage after approximately 24 hours;
Expired parent and upload links are disabled according to their configured expiry;
Account, report, message, screening, appointment, and audit records may be retained after account closure when necessary for safety, legal compliance, record integrity, or dispute resolution.

When information is no longer required, we delete, anonymize, or securely isolate it.

Deleting information from an account may not delete copies already received by an authorized school, therapist, parent, or other recipient.

12. Account deletion and privacy choices

Depending on applicable law, you may request:

Access to your personal information;
Correction of inaccurate information;
Information about how your data is used;
Objection to particular processing;
Withdrawal of consent;
Deletion or anonymization where available.

Students can submit an account-deletion request through the mobile application. The account remains active until an authorized organization administrator processes the request.

Therapists may submit a deletion request through their account or contact us.

Following approval, access may be removed and direct identifiers may be deleted or anonymized. Certain records may be retained for safeguarding, legal, professional, security, or record-integrity reasons.

To make a privacy request, contact contact@ityhad.com. We may need to verify your identity or your authority to act for a child.

13. Security

We use technical and organizational safeguards intended to protect personal information, including:

Authentication and access controls;
Role-based permissions;
Encryption in transit;
Restricted access to private uploads;
Secure mobile storage;
Expiring and tokenized links;
Sensitive-field log redaction;
Rate limiting and security monitoring;
File-cleanup procedures;
Service-provider security requirements.

No online system can guarantee absolute security. Users must protect their credentials and report suspected unauthorized access to contact@ityhad.com.

14. International processing

Some technology providers may process or store information in countries other than the user’s country.

When information is processed internationally, we use appropriate contractual, technical, and organizational safeguards and follow applicable data-protection requirements.

15. Third-party links

The Services may link to schools, therapists, partners, application stores, maps, or external resources.

Third-party services are governed by their own terms and privacy policies. Ityhad is not responsible for information a user independently provides outside the Services, including during telephone calls or in-person appointments.

16. Changes to this Policy

We may update this Policy to reflect changes in the Services, technology, or applicable law.

The revised Policy will display a new “Last updated” date. We may provide additional notice or request renewed consent when a material change affects sensitive information or user rights.

17. Contact us

For privacy questions or requests:

Ityhad Solutions Registration number: 199879 15 Avenue Al Abtal, No. 4, Rabat Email: contact@ityhad.com