Privacy Policy

**Who we are.** [Legal name of business] provides Madar. Each institution that uses Madar decides what data it enters; for that data we act on the institution's instructions. **Data we handle.** - Account data: names, phone numbers, email addresses, roles, login records. - Institution data entered by staff: students' and guardians' details, attendance, Quran/lesson progress, fees and payments, teachers' records. - Technical data: device type, browser, IP address and error logs needed to keep the service secure and working. **How we use it.** Only to run the service: show records to authorized users, send notifications the institution has enabled, generate receipts and reports, provide support, prevent misuse and meet legal duties. We do not sell data and do not use it for advertising. **Sharing.** Only with service providers that host or deliver the service (cloud hosting, database, email, and WhatsApp/Meta if the institution enables automated messages), under confidentiality obligations; or when required by Pakistani law. **AI features (when enabled).** Only the minimum data needed is sent to the AI provider, with names replaced by codes; ID numbers, phone numbers, photos and addresses are never sent. **Security.** Encryption in transit and at rest, strict separation of each institution's data, role-based access, audit logs and encrypted backups. **Retention.** As set out in the Data Retention, Backup & Deletion Policy. **Your choices.** Contact your institution to view, correct or delete your data; we help institutions fulfil such requests. Contact: [email].