Privacy policy

This is a translation. In case of discrepancy, the French version prevails.

iStudy mobile application (parents, students, drivers) and the associated web area — version of 28 October 2026

1. Who processes your data

The iStudy application is published by MYFS SARL AU (Morocco). Each school that uses iStudy is the controller of the data of its students, their families and its staff; MYFS acts on its behalf as a technical service provider.

2. Data processed

Identity and account: last name, first name, email address, role (parent, student, driver), student ID number, parent–child link, gender, date of birth, profile photo; for parents, students, school staff and drivers: address and telephone number.
Schooling: class and section, timetable, subjects and teachers, exams, published marks and report cards, attendance (present, late, absent), homework.
Communication: messages exchanged with the school, notices to attend, attachments, school events, notifications received and their read status.
Billing: instalments, invoices, credit notes, payments recorded by the school (amounts, dates, payment method).
School transport: assigned bus and stops, boardings and drop-offs recorded by the driver, absences reported by the family.
Technical data: application session token, push notification token of the device and device name, notification preferences.

The application does not collect the geolocation of parents or students. Only the position of the driver's phone is used, during trips and while the application is open (see “Bus location”). It does not collect contacts and does not include any advertising or audience measurement tool. It only accesses your photos or files when you choose to attach one to a message.

3. Bus location

The position of the driver's phone is collected only during a school transport trip, and only while the application is open.
This position is visible to the parents of the students on the route during the trip, and to the school administration.
Positions are automatically deleted after 48 hours.
The log of trip events (arrivals at stops, boardings, driver messages) is kept by the school under the same conditions as the other transport data: for the duration of the student's schooling at the school, then archived or deleted by the school.
No location of parents or students is collected.

4. Purposes

Enable families and students to follow the student's schooling.
Ensure communication between the school and families (messages, notices to attend, events, notifications).
Manage billing and payments for tuition and transport.
Organise school transport and inform families of boardings and drop-offs.
Secure access to accounts.

5. Account creation and minors

Parent, student and driver accounts are created by the school. There is no public registration.
Student accounts, including those of minors, are created by the school. Parents or guardians access their children's data from their own account.

6. Retention period

Data is kept for the duration of the student's schooling at the school, then archived or deleted by the school. Accounting records (invoices, credit notes, payments) are kept for the period required by law. Login and notification tokens are deleted on logout or when the account is deleted.

7. Recipients and technical processors

Authorised school staff, according to their role (management, accounting, teachers, driver).
The hosting provider of the application's server.
Expo (Expo Push Service) for delivering push notifications to Apple and Android devices.
OpenStreetMap (base maps for bus tracking: the map server receives the IP address of the people viewing the map) and the Nominatim address search service (queried by the application's server, without transmitting users' IP addresses).
The school's email delivery provider.

No data is sold or passed on to third parties for commercial purposes.

8. Security

Each school's data is kept separate: a user can only access the data of their own school.
Access depends on each user's role (management, accounting, teacher, parent, student, driver).
Connections to the application and the website are encrypted (HTTPS).
The database is backed up every night.

9. Your rights

You may request access to your data, its rectification, its deletion or the restriction of its processing, and object to processing, under the conditions provided for by applicable law. Account deletion can be requested from the application (Compte / Account menu) or from the Account deletion page.

In accordance with Law No. 09-08 on the protection of individuals with regard to the processing of personal data, these rights are exercised by contacting your school or MYFS; you may also refer the matter to the National Commission for the Control of Personal Data Protection (CNDP).

10. Contact

For any question about your data, contact your school first. For any question about the application: MYFS SARL AU, info@myfs.be.