Legal
Privacy Policy
Your trust matters. Here's exactly what we collect, why, and how we protect it.
Last updated: 26 May 2026
Ilmkaar is operated by LumaByte Pvt. This Privacy Policy explains how we handle your personal information when you use ilmkaar.com and related services. By using Ilmkaar you agree to the practices described below.
Information We Collect
- Account details you provide when registering: your name, email, password (stored as a one-way hash), city, board, and target university.
- Practice data: MCQs attempted, answers chosen, time spent, scores, and the chapters you study most.
- Device & session data: browser type, device identifier, IP address, and login timestamps — used solely for security and the single-session policy.
- Payment data: transaction references and screenshots you submit for JazzCash, Easypaisa, or NayaPay. We do not store full wallet credentials or card numbers.
- Webcam proctoring footage (only when you explicitly enable it for a test). Recordings are encrypted at rest and auto-deleted after the configured retention window.
How We Use Your Information
- Run your account and personalize your MCQ practice (recommendations, weakness detection, performance reports).
- Process subscription payments and issue invoices.
- Prevent abuse, fraud, and account sharing through device-session checks and webcam proctoring (when enabled).
- Send account-related emails: verification codes, payment confirmations, important policy updates.
- Improve our content and platform — we may use anonymized, aggregated stats (e.g., 'X% of students struggle with Chapter 3').
How We Protect Your Data
- Passwords are hashed with bcrypt — we cannot see or recover your plaintext password.
- All traffic between your browser and Ilmkaar is encrypted via HTTPS / TLS.
- Webcam recordings (when enabled) are encrypted at rest.
- Access to our production database is restricted to authorized engineers, audited, and protected by 2FA.
- We enforce a single active session per account so a leaked password can't be used in parallel from a second device.
Your Rights
- Access — request a copy of the personal data we hold on you.
- Correction — edit your profile fields directly, or email us for fields you cannot change.
- Deletion — request your account and all associated data be permanently erased.
- Withdraw proctoring consent — disable webcam proctoring at any time from the test setup screen.
- Export — request a copy of your test history in a machine-readable format.
Sharing & Third Parties
- We do not sell your personal data. Ever.
- We share data only with the providers needed to operate the service: our database host (Hostinger), email delivery (transactional emails), and payment-verification staff.
- We may disclose information if required by Pakistani law, a valid court order, or to protect the rights and safety of our users.
Cookies & Local Storage
- We use a single secure HTTP-only session cookie to keep you logged in.
- We use localStorage/sessionStorage for non-essential UX (e.g., dismissing the launch-offer popup).
- We do not use third-party advertising or tracking cookies.
Contact Us
For any privacy-related question or to exercise your rights, reach us at support@ilmkaar.com or on WhatsApp at 0334 9631114.