Who makes Muraqib, and what protects your records.

Who publishes Muraqib

Publisher

Rashid Alnaqbi General Trading, a business registered in Abu Dhabi, United Arab Emirates.

Trade licence

CN-6753934, issued by the Abu Dhabi Department of Economic Development.

Product

Muraqib, a desktop application for Windows and Mac.

Contact

[email protected]

The same name appears on this website, in the app's own terms, and on the agreement the installer shows before it copies a file.

Muraqib is not a government service

Muraqib is developed and published independently by Rashid Alnaqbi General Trading. It is not affiliated with, approved by, or endorsed by the UAE Ministry of Education, ADEK, KHDA, or any other government authority.

Muraqib follows ministry rules where a teacher needs it to - the grading bands, the weighting, the absence ladder - because that is the work a UAE teacher actually does. Following a public rule is not the same as being approved, and Muraqib does not claim to be.

The installer is not code-signed yet

Windows cannot currently tell you who published Muraqib, because the installer does not carry a code-signing certificate. Windows will call it an unknown publisher and SmartScreen will warn you. On Mac, the app carries only a basic signature, and macOS will warn you too.

That warning does not mean either system found something wrong with the file. It means neither has been given proof of who made it. We would rather say that plainly than have you discover it at the moment you install.

Until a certificate is in place, the check available to you is the fingerprint below.

Check the file you received

Every installer has a SHA-256 fingerprint: a number that changes completely if a single byte of the file changes. The fingerprints for the current release are on the download page. Compute the fingerprint of the file you received and compare it.

This proves the file was not altered or swapped on its way to you. It does not prove who wrote it - only a code signature does that - so it is a useful check, not a guarantee of origin.

Where updates come from

Muraqib checks for new versions with GitHub, where its releases are published, and nowhere else. The address is fixed in the app; a web page cannot point it somewhere else.

Before an update installs, Muraqib checks that the file it downloaded is exactly the size and fingerprint that the release says it should be. That is an integrity check against the release record. It is not a code-signature check, and the app does not claim to make one.

An update never installs by itself. It waits for you.

How your records are encrypted

Muraqib keeps your classes, marks, attendance and notes in one database file on your own computer. Once you complete the one-time protection setup, that file is encrypted with AES in the SQLCipher version 4 format, using a 256-bit key made at random on your machine.

That key is protected two ways, and either one opens it. The everyday way is the operating system's own protected storage - DPAPI on Windows, the Keychain on Mac - tied to this computer and your signed-in account. The other is a recovery key, 128 bits, shown to you once at setup.

Automatic and manual Muraqib backups are copies of that encrypted file, so they are encrypted too.

What is not encrypted

Anything you export is an ordinary file. A report you print to PDF, a spreadsheet of marks, a Word document, a CSV - none of these is encrypted or password-protected, and anyone who gets hold of one can read it. That is true of exports from any program, and it is worth knowing before you email one or leave it on a shared drive.

The one exception is Muraqib's own backup file, which is the encrypted database itself.

There is also a window before protection is set up: on a brand-new installation the database starts unprotected. Muraqib refuses to store a real class in it until the setup is done, so a new install cannot quietly collect pupil records in an unprotected file.

Your recovery key, and what we cannot do

The recovery key is generated on your computer and shown to you once. It is never sent anywhere, and Rashid Alnaqbi General Trading never receives it, never stores it, and has no copy.

That has a consequence worth stating plainly: if you lose the recovery key and also lose access to the computer that holds the everyday key, nobody can open your database - not us, not anyone. Write the recovery key down and keep it somewhere other than the laptop.

No analytics, no tracking

Muraqib has no analytics service, no behavioural tracking, no advertising identifier and no crash-reporting service. No third-party measurement code is built into it.

It does keep a small record of its own use inside your own database file, on your computer, and there is no code in the app that can send that anywhere.

What does leave the computer is listed, item by item, on the Privacy page: a check for updates, a licence check if you buy a licence, and an AI request only if you switch AI on.

Reporting a security problem

If you believe you have found a security problem in Muraqib or on this website, email [email protected] and describe what you found and how to reproduce it. Please give us a reasonable chance to fix it before telling anyone else.

We are a small business, not a security team with a rota. There is no bug bounty and no payment. We will read what you send and reply.

Please do not test against anyone else's computer or data, and do not try to break into any service in order to demonstrate a problem.

Your school's rules come first

Muraqib is a tool a teacher installs on the computer they work on. Schools and employers set their own rules about third-party software, about where pupil information may be kept, and about the use of AI. Those rules apply to Muraqib as they do to anything else, and they take precedence over anything on this page.

If the people who approve software at your school need more detail, the information sheet for schools and IT collects it in one page.