Privacy Policy

1. Data we collect

We only collect what we need to run the platform:

• Account details — name, email, phone number, and a hashed password. We never store your password in readable form.
• Tutor verification — age, gender, area of residence, CNIC, degree certificate, institution, and profile photo. This is used only to verify identity and qualifications.
• Activity — hiring requests, messages between you and a tutor or student, lesson confirmations, reviews, and payment records.
• Technical data — IP address, browser and device type, and cookies strictly used to keep you logged in.

2. How we use your data

• To create, secure, and operate your account.
• To authenticate tutor degree certificates through our own manual review and AI-based document checks.
• To match students with suitable tutors and process hiring requests.
• To record payments, calculate tutor payouts, and resolve disputes.
• To send essential transactional emails — verification, hiring updates, lesson reminders, and payment receipts. We do not send marketing email without consent.
• To detect fraud, abuse, and violations of our Terms of Service.

3. Who can see what

A tutor's public profile shows only their name, photo, degree, institution, subjects, rate, general area, and reviews. A tutor's CNIC, email, phone, and home address are never shown publicly— they are visible only to our admin team for verification. Student first names appear only alongside verified reviews; a student's email and phone are never made public.

4. Cookies

We use a small number of strictly necessary cookies to keep you signed in and to keep your session secure. We do not use third-party advertising or cross-site tracking cookies. You can clear cookies in your browser at any time, but you may then be signed out.

5. Data sharing

We do not sell your personal data. We share the minimum necessary information with the service providers that run our platform:

• Supabase — database, authentication, and secure file storage.
• Resend — sending transactional email.
• Vercel — application hosting.

We may also disclose data where required by Pakistani law or a valid legal request.

6. Data retention

We keep your data for as long as your account is active. If you close your account, we delete or anonymise your personal data within a reasonable period, except where we are required to keep payment and dispute records for legal, tax, or accounting purposes.

7. Security

Passwords are hashed, data is transmitted over encrypted HTTPS connections, and sensitive verification documents are stored in access-controlled storage. No system is perfectly secure, but we take reasonable technical and organisational measures to protect your information.

8. Children's privacy

IlmGhar is intended for adults. Students under 18 must use the platform through a parent or guardian who manages the account. We do not knowingly collect data directly from children without parental involvement.

9. Your rights

You can request access to, correction of, or deletion of your personal data, and you can object to certain uses, at any time. Email support@ilmghar.pk and we will respond within 30 days.

10. Changes to this policy

We may update this policy from time to time. When we make material changes we will update the date at the top of this page and, where appropriate, notify you by email.

11. Contact us

Questions about your privacy? Email support@ilmghar.pk or reach us through the contact page.