Privacy Policy
1. Introduction
ILMA STEP (“the App,” “we,” “our”) is the official mobile application of ILMA University. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the App. By using ILMA STEP, you agree to this policy. If you do not agree, please discontinue use of the App.
2. Information We Collect
2.1 Account & Identity Information
- Full name, Student ID, and registered email address
- Cell phone number (optional), campus affiliation, and role (student/admin)
- Profile image (provided by the university system)
- Provided at registration and maintained by ILMA University
2.2 Academic & Financial Records
- Course enrollments, program status, and semester eligibility
- Account balance and transaction history (semester-wise)
- Managed on university servers and displayed in-app for your reference
2.3 Device & Technical Information (collected at login only)
- Device model, operating system version, and app version
- Device timezone
- Firebase Cloud Messaging (FCM) token for push notifications
- Geographic location (latitude/longitude) — captured once at the time of login solely to detect unauthorized or suspicious login activity. This data is not used for tracking, advertising, or any other purpose.
2.4 Usage & Analytics Data
- Screen navigation events and login/logout events
- Document upload and form submission activity
- Crash reports and error logs
- Notification preferences and mute status
- Collected via Firebase Analytics and Firebase Crashlytics
3. How We Use Your Information
- To authenticate your identity and maintain session security
- To display your academic records, financial data, and university communications
- To deliver push notifications for important university updates
- To detect and prevent unauthorized account access using login location data
- To monitor app performance and fix crashes via Firebase Crashlytics
- To improve the overall app experience through aggregated usage analytics
4. Third-Party Services
We use the following third-party services that may process your data under their own privacy policies:
5. Data Storage & Security
- Authentication tokens are stored in platform-specific secure storage (iOS Keychain / Android Keystore)
- Academic and financial data is fetched from ILMA University's secure backend servers and never stored permanently on-device
- Local data is cached using encrypted on-device storage
- We implement industry-standard security measures to protect your information
6. Data Retention
- Session tokens are deleted upon logout
- Cached data is cleared on logout
- Academic and financial records are retained as per ILMA University's institutional data retention policies
7. Your Rights
- Access, update, or delete your personal information by contacting the IT Support Desk
- Revoke notification permissions through your device settings
- Revoke location permissions through your device settings (login will proceed without location data)
- Request full account and data deletion via the Data Deletion Request page
8. Children's Privacy
The App is intended exclusively for enrolled university students aged 18 and above. We do not knowingly collect data from individuals under 13 years of age. If you believe a minor has provided personal information to the App, please contact us immediately.
9. Changes to This Policy
We may update this Privacy Policy periodically. The “Last Updated” date at the top of this page will reflect the latest revision. Your continued use of the App after any changes constitutes your acceptance of the updated policy.
10. Contact Us
IT Support Desk, ILMA University
Email: support@ilmauniversity.edu.pk
Website: www.ilmauniversity.edu.pk
To request deletion of your data, visit our Data Deletion Request page.