Legal

Privacy Policy

Protecting our future generations online.

Effective Date: April 26, 2026  |  Last Updated: April 26, 2026

1. Introduction

Welcome to Imaan & Akhlaq ("we", "our", "us"), a character-building platform for children, parents, teachers and schools, operated by Imaan Akhlaq, Islamabad, Pakistan. This Privacy Policy explains what information our website (imaanakhlaq.org) and our Android application (package com.imaanakhlaq.app) collect, how we use it, and the choices you have. By using our services you agree to this Policy.

2. Children’s Privacy

Imaan & Akhlaq is designed for use by children with the involvement of a parent, teacher or school administrator. We comply with the Children’s Online Privacy Protection Act (COPPA), the EU General Data Protection Regulation (GDPR-K) and Google Play’s Designed for Families policy.

  • Student accounts are created and managed by a verified school administrator or teacher, who provides the required consent on behalf of the parent / guardian.
  • We never collect more information from a child than is reasonably necessary to provide the educational activity.
  • We do not sell, rent or share children’s personal information with third parties for advertising.
  • Parents and guardians may, at any time, request to review, correct or delete their child’s data by emailing us (see Section 9).

3. Information We Collect

(a) Account information — when you register as a parent, student, teacher, school admin or super-admin we collect: full name, email address, phone number (optional), password (stored as a one-way hash by Firebase Authentication), assigned school, role, class / section, and profile picture (optional).

(b) Educational activity data — quiz scores, book reading progress, attendance, teacher notes, fee status, and parent feedback. This data is stored in Google Firebase (Firestore + Storage).

(c) Device information — device model, OS version, app version, language and crash logs, used solely for diagnostics and to improve stability.

(d) Camera (Android only, optional) — the Qibla Finder feature can use your rear camera to overlay the Qibla direction on a live camera view, similar to Google’s Qibla Finder. The camera feed is processed entirely on your device, is never recorded, never uploaded and never stored. You may deny or revoke this permission in Android Settings; the rest of the app continues to work.

(e) Location (Android only, optional) — the Qibla feature uses your approximate or precise location only on-device to calculate the direction of the Kaaba and the distance to Makkah. Your location is never sent to our servers, never sold and never shared. You may deny or revoke this permission at any time.

(f) Local storage — the Tasbeeh counter, theme preference and last-opened page are stored only in your device’s local storage and are never transmitted.

4. How We Use Your Information

  • To create and authenticate your account and protect it from unauthorized access.
  • To deliver lessons, quizzes, books and activities, and to track learning progress.
  • To allow teachers and parents to monitor a student’s progress.
  • To send essential service messages (e.g. password reset, important school announcements).
  • To diagnose crashes and improve performance.
  • To comply with legal obligations.

We do not use your data for behavioural advertising, profiling, or AI-model training.

5. Third-Party Services

We rely on the following processors who are bound by their own strict privacy commitments:

  • Google Firebase (Authentication, Firestore, Storage, Hosting) — firebase.google.com/support/privacy
  • Hostinger — for the public website hosting.
  • WhatsApp — only when you tap the WhatsApp button to contact us; no data is shared automatically.

We do not integrate any third-party advertising SDK, analytics SDK that profiles users, or social-media tracking pixel inside the Android app.

6. Data Sharing

We do not sell or rent personal data. We share data only:

  • With the school / teacher you are enrolled with, so they can teach and assess you.
  • With service providers listed in Section 5, strictly to operate the service.
  • When required by law, court order, or to protect the safety of users.

7. Data Retention

Account and educational data are retained for as long as your account is active. If your account is deleted (by you or your school), all personal data is permanently removed within 30 days, except where we are legally required to keep it longer (e.g. tax records). Anonymous, aggregated statistics may be retained indefinitely.

8. Data Security

All traffic is encrypted in transit using TLS / HTTPS. Passwords are stored using Firebase Authentication’s industry-standard hashing. Access to production data is limited to authorized administrators and is protected by two-factor authentication. Despite these measures, no system can be 100% secure; please use a strong, unique password.

9. Your Rights & Account Deletion

You (or, for a child, the parent / guardian or school administrator) have the right to:

  • Access a copy of your personal data.
  • Correct inaccurate data.
  • Withdraw consent or restrict processing.
  • Delete your account and all associated data.

How to delete your account:

  1. In-app — open the app, go to your dashboard → profile menu → Delete Account, and confirm. Your account and personal data will be removed within 30 days.
  2. By email — send a request from your registered email to contact@imaanakhlaq.org with the subject line “Delete my account”. We will verify and process within 30 days.
  3. Web form — visit imaanakhlaq.org/delete-account.

You may also contact us with any privacy question; we respond within 14 days.

10. International Transfers

Our servers are operated by Google Firebase and may store data in regions outside Pakistan, including the United States and Europe. Google maintains appropriate safeguards (Standard Contractual Clauses) for international transfers.

11. Permissions Summary (Android App)

  • INTERNET — required to load lessons and sync progress.
  • CAMERA — optional, used only for the Qibla AR camera mode; feed never leaves the device.
  • ACCESS_FINE_LOCATION / ACCESS_COARSE_LOCATION — optional, used only on-device to compute Qibla bearing and distance to Makkah.

12. Changes to this Policy

We may update this Privacy Policy from time to time. We will post the new version on this page and update the “Last Updated” date above. Material changes will be announced inside the app.

13. Contact Us

For any privacy concern, data request, or to exercise your rights, please contact us:

Imaan & Akhlaq
Email: contact@imaanakhlaq.org
WhatsApp: +92 333 5756028
Address: Karachi, Sindh, Pakistan

This Privacy Policy is the legally binding agreement between you and Imaan & Akhlaq. By continuing to use our services, you confirm you have read and understood it.