Who makes Moraqib, and what protects your records.

Who publishes Moraqib

Publisher

Rashid Alnaqbi General Trading, a business registered in Abu Dhabi, United Arab Emirates.

Trade licence

CN-6753934, issued by the Abu Dhabi Department of Economic Development.

Product

Moraqib, a desktop application for Windows and Mac.

Contact

moraqib.ae@outlook.com

The same name appears on this website, in the app's own terms, and on the agreement the installer shows before it copies a file.

Moraqib is not a government service

Moraqib is developed and published independently by Rashid Alnaqbi General Trading. It is not affiliated with, approved by, or endorsed by any education authority or any government body.

Moraqib follows ministry rules where a teacher needs it to - the grading bands, the weighting, the absence ladder - because that is the work a UAE teacher actually does. Following a public rule is not the same as being approved, and Moraqib does not claim to be.

The installer is not code-signed yet

Windows cannot currently tell you who published Moraqib, because the installer does not carry a code-signing certificate. Windows will call it an unknown publisher and SmartScreen will warn you. On Mac, the app carries only a basic signature, and macOS will warn you too.

That warning does not mean either system found something wrong with the file. It means neither has been given proof of who made it. We would rather say that plainly than have you discover it at the moment you install.

Until a certificate is in place, the check available to you is the fingerprint below.

Check the file you received

Every installer has a SHA-256 fingerprint: a number that changes completely if a single byte of the file changes. The fingerprints for the current release are on the download page. Compute the fingerprint of the file you received and compare it.

This proves the file was not altered or swapped on its way to you. It does not prove who wrote it - only a code signature does that - so it is a useful check, not a guarantee of origin.

Where updates come from

Moraqib checks for new versions with GitHub, where its releases are published, and nowhere else. The address is fixed in the app; a web page cannot point it somewhere else.

Before an update installs, Moraqib checks that the file it downloaded is exactly the size and fingerprint that the release says it should be. That is an integrity check against the release record. It is not a code-signature check, and the app does not claim to make one.

An update never installs by itself. It waits for you.

How your records are encrypted

Moraqib keeps your classes, marks, attendance and notes in one database file on your own computer. Once you complete the one-time protection setup, that file is encrypted with AES in the SQLCipher version 4 format, using a 256-bit key made at random on your machine.

That key is protected two ways, and either one opens it. The everyday way is the operating system's own protected storage - DPAPI on Windows, the Keychain on Mac - tied to this computer and your signed-in account. The other is a recovery key, 128 bits, shown to you once at setup.

Automatic and manual Moraqib backups are copies of that encrypted file, so they are encrypted too.

What is not encrypted

Anything you export is an ordinary file. A report you print to PDF, a spreadsheet of marks, a Word document, a CSV - none of these is encrypted or password-protected, and anyone who gets hold of one can read it. That is true of exports from any program, and it is worth knowing before you email one or leave it on a shared drive.

The one exception is Moraqib's own backup file, which is the encrypted database itself.

There is also a window before protection is set up: on a brand-new installation the database starts unprotected. Moraqib refuses to store a real class in it until the setup is done, so a new install cannot quietly collect pupil records in an unprotected file.

Your recovery key, and what we cannot do

The recovery key is generated on your computer and shown to you once. It is never sent anywhere, and Rashid Alnaqbi General Trading never receives it, never stores it, and has no copy.

That has a consequence worth stating plainly: if you lose the recovery key and also lose access to the computer that holds the everyday key, nobody can open your database - not us, not anyone. Write the recovery key down and keep it somewhere other than the laptop.

Usage counts, and no tracking

Moraqib has no third-party analytics service, no tracking across apps or websites, no advertising identifier and no crash-reporting service. No third-party measurement code is built into it.

It does count its own use, with a switch. While 'Share usage counts with Moraqib' is on in Settings, it sends which screens and tools are used and when, how long Moraqib stays open, which AI feature and which AI model were used and the size and cost of each AI request, the kind of any error, the app version, whether the computer is a Windows PC or a Mac, and a random ID made on the computer, to Rashid Alnaqbi General Trading's own server. Each field is a fixed word or a number, so it cannot carry a name, a mark or anything typed. Switching it off stops it and deletes what had not been sent.

It does keep a small record of its own use inside your own database file, on your computer, and there is no code in the app that can send that anywhere.

What does leave the computer is listed, item by item, on the Privacy page: a check for updates, a licence check if you buy a licence, usage counts while they are switched on, an AI request only if you switch AI on, and a message for a parent only if you choose WhatsApp for it.

Reporting a security problem

If you believe you have found a security problem in Moraqib or on this website, email moraqib.ae@outlook.com and describe what you found and how to reproduce it. Please give us a reasonable chance to fix it before telling anyone else.

We are a small business, not a security team with a rota. There is no bug bounty and no payment. We will read what you send and reply.

Please do not test against anyone else's computer or data, and do not try to break into any service in order to demonstrate a problem.

Your school's rules come first

Moraqib is a tool a teacher installs on the computer they work on. Schools and employers set their own rules about third-party software, about where pupil information may be kept, and about the use of AI. Those rules apply to Moraqib as they do to anything else, and they take precedence over anything on this page.

If the people who approve software at your school need more detail, the information sheet for schools and IT collects it in one page.