Privacy Policy
How we collect, use, and protect your information
Effective Date: January 1, 2025
App: ILMA STEP Admin
Developer: ILMA University
1. INFORMATION WE COLLECT
a) Account Information
Your Employee ID, Student Email, and password are used for authentication only. We do not store plain-text passwords.
b) Location Data
We collect your device's GPS coordinates (latitude & longitude) ONLY at the time of login. This is required for security verification to ensure authorized access. We do not track your location continuously.
c) Device Information
We collect device model, OS version, and app version for crash reporting and support purposes (via Firebase Crashlytics).
d) Push Notification Token (FCM Token)
Your Firebase Cloud Messaging token is used to send you relevant notifications. You can disable notifications at any time from your device settings.
e) Analytics
We use Firebase Analytics to understand app usage patterns (screens visited, feature usage). No personally identifiable information is shared with analytics.
f) Local Storage
The app stores session data, preferences, and cache locally on your device using:
- Hive (offline data cache)
- SharedPreferences (app settings)
- FlutterSecureStorage (auth tokens — encrypted)
2. HOW WE USE YOUR INFORMATION
- Authenticate your identity securely
- Provide access to your university account data
- Send relevant push notifications
- Improve app stability via crash reports
- Personalize your dashboard experience
3. DATA SHARING
We do NOT sell, rent, or share your personal data with third parties for marketing purposes.
We use the following trusted third-party services:
- Firebase (Google) — Authentication support, Analytics, Crashlytics, Push Notifications
All data is transmitted over HTTPS (TLS encrypted).
4. DATA RETENTION
Your data is retained for the duration of your enrollment or employment at ILMA University. You may request data deletion by contacting us.
5. YOUR RIGHTS
- Access your personal data
- Request correction of inaccurate data
- Request deletion of your account data
- Opt out of push notifications (via device settings)
6. CHILDREN'S PRIVACY
This app is intended for university students and staff (18+ years). We do not knowingly collect data from minors.
7. SECURITY
We implement industry-standard security:
- HTTPS for all API communication
- Encrypted local token storage (FlutterSecureStorage)
- Location-based login verification
- Firebase Crashlytics for security monitoring
8. CONTACT US
For privacy concerns or data requests:
Email: support@ilmauniversity.edu.pk
Website: ilmauniversity.edu.pk
Address: ILMA University, Karachi, Pakistan