Privacy policy

ictfrombcd learning service · Phase 1

  1. 1

    Information used for your account

    When you register, ictfrombcd stores the details you submit so it can create and maintain your student account. Phone numbers must be verified and are not editable as ordinary profile fields. WhatsApp number, email address, and postal address are optional profile details.

    • Your name, verified phone number, medium, district, nearest city, school, and class or grade form the core profile.
    • The system records that you accepted this privacy policy during registration.
    • Optional WhatsApp, email, and address details are saved only when you choose to provide them.
    • Phase 1 does not request an identity-card number or institute affiliation.
  2. 2

    How account details are used

    Profile information helps identify your account, show relevant classes, manage lesson access, and allow the class administrator to respond to account requests. Keep your details accurate and contact the administrator if something needs correction.

    • Your selected medium, district, and class help the administrator organise learning support.
    • Your profile is shown to authorised administrators when they manage student accounts.
    • Your phone number is also the account sign-in name and the destination for verification messages.
    • Account details are handled for the learning service and its account administration.
  3. 3

    Payments and payment slips

    Phase 1 accepts manual bank-transfer payments. The site records each payment submission and its review status. Prices are read from the published lesson records. An uploaded slip is kept as a private file for review and is never exposed as a public file link.

    • A payment record identifies the student account, lesson, amount, submission date, and current status.
    • The administrator can review the submitted slip and record the approval or rejection decision.
    • Slip files are stored outside the public folder and are available only through protected access.
    • The slip hash is retained with required payment history even if the original file is later removed.
  4. 4

    Lessons and learning access

    The site records lesson enrollments so it can determine which lessons are available to your account. Paid access may expire on the date shown for the lesson or enrollment; a renewal starts from its approval date. Free lessons do not expire.

    • A private recording or live-session link is returned only after a server-side access check.
    • A fresh signed playback URL is issued each time you choose Watch.
    • Phase 1 does not store server-side video progress.
    • Manual grants and paid enrollments are recorded with their own expiry rules.
  5. 5

    Student feedback

    Signed-in students may send feedback about the learning service. Feedback is reviewed by an administrator before it appears on the About Us page. You can choose to display it anonymously.

    • If you do not choose anonymity, your name and class or grade label appear with approved feedback.
    • Anonymous feedback is displayed as Anonymous Student.
    • Pending feedback is visible only to administrators and is not shown publicly.
    • When an account is deleted, pending feedback is removed and approved feedback is anonymised.
  6. 6

    Sign-in and security records

    Phone verification codes expire and have attempt limits. The site keeps session records so a sign-in can be revoked and the current account session can be managed. Passwords are stored as password hashes rather than readable text.

    • Verification codes are short-lived and limited to reduce repeated guessing.
    • Session records allow an administrator or account action to revoke access.
    • The system records a device fingerprint and request details used for session security.
    • These records support access control and investigation of unusual account activity.
  7. 7

    Messages and notifications

    The site stores notifications related to lessons and account activity. A phone number is used for verification messages through the WhatsApp bot configured by the administrator. During local development, codes go to the console instead of a real messaging service.

    • Messages may confirm a phone number or provide an account-related update.
    • The WhatsApp bot receives a phone number and message under the configured service contract.
    • The site notification panel shows messages addressed to your account or all students.
    • Notifications are removed when an account is deleted.
  8. 8

    Account deletion and retained records

    You can request deletion from your profile. The account is anonymised, active sessions and lesson access are revoked, and notifications and payment-slip files are removed. Payment, attendance, and audit records remain in anonymised form; the payment slip hash stays with its payment record.

    • Identifying profile details are cleared or replaced during anonymisation.
    • Payment history is retained for accounting and cannot be erased with the profile.
    • Attendance and audit history remain linked to the anonymised user record.
    • The original payment-slip image is deleted while its hash is retained.
  9. 9

    Questions about your information

    If you have a question about a profile detail or deletion request, contact the class administrator using the contact information configured on the Contact page. The administrator can update this policy text in the site settings.

    • Use the Contact page to find the current support details.
    • Ask the administrator to correct a profile detail that you cannot update yourself.
    • You may request account deletion from your profile page.