Privacy Policy

This Privacy Policy describes how Ihsan EMS (the “Platform”), operated by Ihsan IT, collects, uses, and shares information when you use our websites and the EMS mobile application.

Ihsan EMS is a multi-tenant education management platform. Each school or institution (“School”) that uses the Platform operates under its own domain and data space. Ihsan IT provides the software and hosting; your School is responsible for the student, guardian, and staff records it enters for its institution.

1. Who this policy covers

• Visitors to School websites powered by EMS
• Guardians, students, teachers, and staff who use EMS on the web or in the mobile app
• Anyone who downloads the EMS mobile app from the App Store or Google Play

2. Information we collect

Depending on how you use the Platform, we may process:

• Account details — name, phone number, email, password (stored hashed), and role (e.g. guardian, teacher, admin)
• School selection (mobile) — which institution you choose in the app so requests are scoped to that School
• Academic and administrative data — enrollments, attendance, exam marks, notices, fees, and similar records entered by your School
• Payment data — fee or subscription payment status and references when you pay online (e.g. via bKash). Card or wallet secrets are handled by the payment provider, not stored by us as full payment credentials
• Device and app data — device push-notification tokens, app version, and basic technical logs needed to run and secure the service
• Usage and diagnostics — server logs (IP address, timestamps, error traces) for security and reliability

3. How we use information

We use information to:

• Provide and operate the Platform for your School
• Authenticate users and authorize access by role
• Process fee and billing flows you or your School initiate
• Send notices and push notifications you or your School enable
• Maintain security, prevent abuse, and troubleshoot issues
• Comply with applicable law

4. Multi-tenant data scoping

When you select a School in the mobile app (or visit a School’s website), Platform requests are scoped to that School’s tenant. We do not use one School’s student records to serve another School’s users.

5. Sharing of information

We may share information with:

• Your School — administrators and authorized staff who manage their tenant data
• Service providers — hosting, SMS, push notification, and payment providers (such as bKash) only as needed to provide the service
• Legal requirements — when required by law or to protect rights and safety

We do not sell personal information.

6. Data retention

Account and School records are retained while the School’s subscription is active and as needed for legitimate operational, legal, or accounting purposes. Schools may request correction or deletion of records they control, subject to legal retention duties.

6A. Account deletion

If you create an account in the EMS mobile app or on the web, you can request deletion of that login account:

• In the app: More → My Profile → Delete account (confirm with your current password)
• On the web: My Profile → Delete account, or visit the account deletion help page on your School’s EMS site (/public/account-deletion)
• Without the app: Contact us (below) or your School administration

When you delete your account:

• Your login account is closed and personal login details (name, phone, email used for sign-in) are removed from the active account so you can no longer sign in with that account
• School operational records (such as fees, attendance, and academic data) may be retained by your School as needed to run the institution
• A limited identity snapshot may be retained for security, fraud prevention, and audit purposes
• Registering later with the same phone number creates a new account; it does not restore the deleted one

7. Security

We use industry-standard measures such as encrypted transport (HTTPS), hashed passwords, and access controls. No method of transmission or storage is 100% secure.

8. Children’s privacy

The Platform is used by educational institutions and may include records about minors. Such data is entered and managed by the School. Guardians access child-related information through School-authorized accounts.

9. Your choices

• Update profile details where the product allows
• Change or clear School selection in the mobile app
• Disable push notifications in device settings
• Contact your School for academic record requests
• Delete your login account in the app or on the web (see Account deletion above)
• Contact us (below) for Platform-level privacy questions or account deletion assistance related to the app publisher

10. Contact

For privacy questions about the Ihsan EMS Platform or mobile app:

• Website: https://ihsanit.com
• Product: Ihsan EMS

For questions about a specific student’s records, contact your School’s administration.

11. Changes

We may update this policy from time to time. The “Last updated” date at the top will change when we do. Continued use of the Platform after changes means you accept the updated policy.