Legal

Privacy policy

Effective 13-11-2026. Applies to ilmvanta.com, the Ilm Vanta web app at app.ilmvanta.com and the Ilm Vanta Android app.

1. Who we are

Ilm Vanta is school management software for schools in Pakistan. It is provided by Muhammad Kaleem (Ilm Vanta), Lahore Pakistan ("Ilm Vanta", "we", "us"). You can reach us about privacy at info@ilmvanta.com.

2. Schools and Ilm Vanta

Each school decides what information it keeps in Ilm Vanta and why. For that information the school is responsible for it (the data controller) and Ilm Vanta processes it on the school's behalf (the data processor), only to provide the service to that school. We do not sell this information, use it for advertising, or share it with other schools.

For the information you send us through this website, for example a demo request, Ilm Vanta is responsible.

3. Data schools keep in Ilm Vanta

Depending on the modules a school uses, its staff may enter:

• Students: name, date of birth, gender, nationality, religion, registration and GR numbers, campus, class and section, enrolment history, photo (if added), previous school, admission applications, entrance test results and documents.
• Parents and guardians: name, relationship to the student, CNIC number, phone number, email address, occupation, address, and whether they may collect the child.
• School records: attendance, fee challans, discounts and payments, exam marks, report cards and teacher remarks, timetables and covers, and notes and follow-ups about a student's progress.
• Staff: name, father's or spouse's name, gender, date of birth, CNIC number, phone, email, address, qualification, campus, department and designation, joining date, bank name and account number, salary structure, payroll and payslips (including provident fund, EOBI and tax deductions), staff attendance and leave.
• User accounts: username, name, email address, role, and the password, which is stored only as a secure hash. Parents sign in with their CNIC number as the username.

4. Data recorded automatically

• Audit log (Premium plan): which user did what and when, with the IP address and browser.
• Sign-in attempts: time, result, IP address and browser, used to protect accounts.
• Server logs: technical logs used to keep the service running and to fix errors.
• Notification delivery log: which notifications were sent, by which channel, and whether delivery worked.

5. The Android app

The Ilm Vanta app is for parents and teachers of schools that use Ilm Vanta. It shows the same school records as the web app, limited to what the signed-in person is allowed to see. The app:

• creates a random installation ID and sends it with the device's name or model and the platform (Android) when you sign in, so you and your school can see and end your sign-ins;
• keeps you signed in with a token stored in the phone's secure storage; the server keeps only a hash of it, and a sign-in lasts at most 90 days;
• asks your permission before showing notifications; if you allow them, the phone's push token is stored with your sign-in and removed when you sign out;
• keeps recent data on the phone so it can be read without internet (and, for teachers, attendance marked offline until it can be sent); this copy is encrypted, cleared when you sign out, and removed after 30 days;
• creates a temporary file when you share a challan or report card, and deletes it after sharing;
• remembers your language choice (English or Urdu).

The app does not use your location, camera, microphone, contacts, photos or files, and it contains no advertising, analytics or crash-reporting tools.

6. Notifications and email

Schools can send notices, absence alerts and fee reminders to the app's inbox, as push notifications, and by email. Push notifications are delivered through Expo's push service and Google's Firebase Cloud Messaging. What shows on a locked phone never includes CNIC numbers, phone numbers or registration numbers; a money amount appears only in the message that a payment was received. Email is sent through Google's Gmail SMTP service. WhatsApp buttons open the sender's own WhatsApp with a ready message; Ilm Vanta does not send WhatsApp messages itself.

7. The AI assistant (Ask Ilm Vanta)

Ask Ilm Vanta is off by default. We switch it on only for a school that asks for it, and only staff can use it; parents cannot. When a staff member asks a question, Ilm Vanta looks up the records that person is already allowed to see (for example a student's name, attendance, marks and subjects) and sends the question with those records to Google's Gemini API to write the answer. The assistant can only read; it cannot change any record. Google processes this data under the Gemini API terms that apply to our account. A school that does not want this keeps the assistant switched off.

8. This website

When you request a demo we receive the details you type: school name, your name, role, city, number of students, phone or WhatsApp number, email address and message. The form is delivered to us by Web3Forms. We use these details only to reply to you and arrange a demo.

This website has no analytics, advertising or tracking scripts. It is hosted on GitHub Pages, whose servers record standard technical logs (such as IP address and browser) when pages are requested.

9. Cookies

This website sets no cookies. If you choose the light or dark theme, that choice is saved in your own browser and never sent to us.

The web app uses only cookies that it needs to work: one that keeps you signed in, one that remembers which school you are signing in to, and one for your language. There are no advertising or analytics cookies.

10. Service providers

This means data may be processed outside Pakistan. We share with each provider only what it needs for its task.

11. How long we keep data

• School data: for as long as the school's account is active. When an account ends, the school can ask for an export, and we delete the school's data 90 days after the account ends.
• Backups: the database is backed up daily; backups are overwritten as they age.
• Audit log: 90 days by default (a school can change this).
• Notification inbox: 180 days; delivery log: 90 days (a school can change these).
• App sign-ins: at most 90 days; data kept on the phone: at most 30 days, and cleared at sign-out.
• Demo requests: as long as needed to answer and follow up your enquiry.

12. Security

All connections use HTTPS. Passwords and app sign-in tokens are stored only as hashes. Each school's data is kept separate, and staff see only what their role allows. Accounts are locked after repeated wrong passwords. Data kept on phones is encrypted. No system is perfectly secure, and we will tell affected schools without delay if we learn of a breach that affects their data.

13. Children

Schools keep records about their students, who are children, as part of running the school. Children do not sign in to Ilm Vanta: only school staff and parents or guardians aged 18 or over do. Schools are responsible for informing parents about the records they keep.

14. Your choices and requests

If you are a parent, guardian, student or staff member, please contact your school first to see, correct or delete information it keeps about you or your child; the school can make most changes itself, and we help schools with any request. You can also write to us at info@ilmvanta.com and we will pass your request to the school.

In the app you can turn notifications off in your phone's settings, mute types of notices, and sign out at any time, which removes the data stored on the phone.

15. Changes and contact

We will update this page when our practices change and show the new effective date at the top. For important changes we will also inform schools. Questions: info@ilmvanta.com.