Who we are
Madressa Center is a service of Ziarat Planner, Karachi, Pakistan, for madrasas in Pakistan to keep their fees, attendance and learning records.
Who decides about the data
Each madrasa decides what it records about its children and guardians, and is responsible for having their permission. Madressa Center keeps those records for the madrasa and uses them only to provide the service to it.
What is kept
- For staff: name, email address, password (stored only in scrambled form), role.
- For children, as the madrasa enters them: name, gender, date of birth, group, attendance, learning progress, fees, payments and receipts.
- For guardians: name and phone number, and which children they belong to.
- For staff without a login, such as a cook or a guard: name, job and phone number, and their attendance.
- For people who give to the madrasa, as the madrasa enters them: name and phone number, with their donations.
- Earlier versions of a record, when it is corrected.
- For the service itself: when you accepted this notice and the terms, sign-in records and a log of actions (who did what, without names or phone numbers).
No national identity card (CNIC) number, home address or photo of a child is kept.
Where it is kept
With service providers that keep the data for us: Supabase (database and sign-in, in Singapore), Vercel (the website) and Resend (emails, sent from Japan). Supabase keeps a daily backup of the database for 7 days.
On the sign-up, sign-in and password forms, Cloudflare Turnstile checks that a person, not a machine, is using the form. For this check, Cloudflare receives your IP address and technical details of your browser and its connection. Cloudflare uses them only to detect and stop automated misuse and to improve that detection, never to identify, profile or target you.
Who can see it
Only the staff of the madrasa, each according to their role. One madrasa can never see another’s data. Ziarat Planner’s own admin sees which madrasas use the service and counts, never a child’s or a guardian’s record.
How long it is kept
As long as the madrasa uses the service. A madrasa can delete a child’s record on a guardian’s request; payment records then stay without the child’s name. A madrasa’s owner can ask Ziarat Planner, through the contact details on ziaratplanner.com, to remove the whole madrasa, and everything that belongs to it is then deleted; the daily backups keep it for up to 7 days more. A sign-up never confirmed is deleted after 7 days.
Your choices
Ask your madrasa to correct, export or delete a child’s or a guardian’s record. Staff can change their own password and turn on two-step sign-in.
Changes
A changed notice gets a new version, which everyone accepts once, the next time they use the app, before they go on.