Naogaon Islami Fazil Madrasah

Last updated: 1 August 2026

This Privacy Policy explains how Naogaon Islamia Fazil Madrasah (“we”, “us”, “the Institution”) collects, uses, shares and protects personal information when you use:

the NIFMAC Student Portal Android application (package com.codefixit.nifmstudentapp, “the Student App”),
the NIFMAC Teacher Portal Android application (package com.codefixit.nifmteacherapp, “the Teacher App”), and
this website,

together, “our Services”. “the Apps” means the Student App and the Teacher App.

The Apps are private, login-only portals for students enrolled with, and teachers employed by, the Institution. They are not public social networks and they do not display advertising. By using our Services you agree to this Policy. If you do not agree, please do not use the Apps.

1. Who is responsible for your data

Naogaon Islamia Fazil Madrasah is the data controller for the information described here. You can reach us at:

Address: Naogaon ,Dhaka,Bangladesh
Phone: 01577554056
E-mail: nifmn01@gmail.com
Support desk: https://nifmac.com/support

2. Information we collect

Accounts in both Apps are created by the Institution — there is no public sign-up. What we hold about you depends on whether you use the Student App or the Teacher App.

2.1 Student account and profile information (Student App)

Your student profile record, entered by the Institution during admission, may include:

Full name, admission / system ID and account status
Father’s and mother’s name
Date of birth, gender and blood group
Mobile number and home address
Student photograph (used on your profile and digital ID card)
Academic session, class, section and group
Documents uploaded to your student file by the Institution

2.2 Student academic information (Student App)

Attendance records
Exam schedules, seat plans, marks, letter grades, GPA and transcripts
Homework assigned to your class
Promotion and academic history
Online (MCQ) exam attempts: your answers, timing, score and review data

2.3 Examination integrity information (Student App)

While an online exam attempt is in progress, the Student App records exam-integrity signals such as the number of times the exam screen is left or the app is switched away from, together with the start, save and submit timestamps of your attempt. This is used only to protect the fairness of the examination and is visible to authorised Institution staff. The Student App does not take screenshots, record your screen, use the camera or microphone, or monitor any other app.

2.4 Student financial information (Student App)

Fee heads, dues, discounts and waivers applicable to you
Payment receipts recorded by the Institution’s accounts office (amount, date, method, receipt number)

The Student App displays these records for viewing only. It does not process payments and does not collect card, bank or mobile-wallet credentials.

2.5 Teacher account, employment and payroll information (Teacher App)

Your teacher profile record, maintained by the Institution’s administration, may include:

Full name, staff / system ID, designation and account status
Contact details (mobile number, e-mail, address)
Photograph, date of birth, gender and blood group
Qualifications, subjects and class / section assignments
Employment documents uploaded to your staff file by the Institution
Payslips and salary records (allowances, deductions, net pay) prepared by the Institution’s payroll — the Teacher App displays these for viewing only and does not process any payment

2.6 Content teachers create in the Teacher App

When you use the Teacher App to do your job, the records you create are stored on the Institution’s servers and attributed to your account:

Attendance you take for your classes
Exam marks you enter for your students
Homework you assign, including any attachment you upload
Notices you publish on the notice board
Question-bank and e-library files you upload
Edits you make to student records you are authorised to manage (these changes are logged)

2.7 Information you submit (both Apps)

Support tickets: the category, priority, subject and description you write, plus any file you choose to attach (JPG, PNG, PDF, DOC or DOCX, up to 5 MB).
Password changes: your current and new password, which are stored only in irreversible hashed form.

A file is read only when you pick it yourself from the device file picker — for a support attachment, or (in the Teacher App) a homework, question-bank or library upload. The Apps do not scan, index or upload your gallery, documents or any other file in the background.

2.8 Technical information (both Apps and the website)

Like any internet service, our servers automatically record limited technical data when an App communicates with them: IP address, request date and time, the endpoint requested, HTTP status and a basic user-agent string (device platform and app version). This is used for security, abuse prevention and troubleshooting.

2.9 Information stored on your device (both Apps)

Your login token, kept in the operating system’s encrypted storage (Android EncryptedSharedPreferences).
A cached copy of your basic profile and app preferences, so the App opens quickly.
Files you deliberately download (for example a receipt, result card, payslip or library document), saved to your device storage.

All of this is removed from the device when you log out or uninstall the App.

3. What we do not collect

This applies to both the Student App and the Teacher App:

We do not collect your precise or approximate location.
We do not access your contacts, SMS, call logs, camera, microphone or photo library.
We do not collect advertising identifiers and the Apps contain no ads and no third-party advertising or analytics SDKs.
We do not build advertising or behavioural profiles.
We never sell or rent personal information to anyone.

4. Device permissions the Apps request

Internet / network access — required to communicate with the Institution’s servers. This is the only permission declared by either App.
File access via the system picker — when you attach a file to a support ticket, upload a homework, question-bank or library file (Teacher App), or save a downloaded document, the App uses the Android system file picker, which gives it access only to the specific file you choose. You may decline; only those specific features will be unavailable.

5. How we use your information

To authenticate you and keep your account secure
To show students their profile, digital ID card, attendance, results, transcripts, seat plans, homework, fees and receipts
To show teachers their profile, class lists, timetable information and payslips
To let teachers take attendance, enter marks, assign homework, publish notices and share teaching material
To deliver notices, e-library material and question banks published by the Institution
To conduct and grade online examinations and to safeguard their integrity
To receive, route and answer support tickets
To maintain the Institution’s statutory academic, employment and financial records
To detect, investigate and prevent misuse, fraud or security incidents
To fix bugs and improve the reliability of the Services

We process this data to perform the educational, administrative and employment relationship between you (and, for students, your guardian) and the Institution, to meet our legal and record-keeping obligations, and for our legitimate interest in operating a secure service. We do not use your data for automated decision-making that produces legal effects on you.

6. Teachers’ access to student data

Teachers use the Teacher App as staff of the Institution. Through it, an authorised teacher can see and manage the records of students in the classes assigned to them — profiles, attendance, marks and result cards — strictly for teaching and administration. This access is limited by role-based permissions and class assignment, changes made to student records are logged, and teachers are bound by the Institution’s confidentiality rules. Teachers must not copy, share or use student data for any purpose outside their duties.

We share personal information only in these limited situations:

Within the Institution — with authorised teachers, administrative, accounts and IT staff, strictly on a need-to-know basis for their role.
With parents or legal guardians — the Institution may disclose a student’s academic, attendance and fee information to the student’s parent or guardian.
With service providers — our web hosting and e-mail providers, who process data on our instructions under confidentiality obligations, solely to run the Services.
With education authorities — where required for board registration, examinations or statutory reporting.
Where the law requires it — to comply with a valid legal process, or to protect the rights, safety or property of the Institution, our students, our staff or the public.

We do not share your information with advertisers, data brokers or any third party for their own marketing.

8. How long we keep your data

Academic records (enrolment, attendance, results, transcripts, promotion history) are retained for as long as the Institution is required to maintain student records, including after you leave, so that certificates and transcripts can be re-issued.
Employment and payroll records (teacher service records, payslips) are retained for the period required by applicable labour, accounting and tax rules.
Financial records (fee collections and receipts) are retained for the period required by applicable accounting and tax rules.
Teaching content (homework, notices, question banks, library files) is retained while it is in use by the Institution and removed when it is withdrawn.
Support tickets and attachments are retained while the matter is open and for a reasonable period afterwards for reference.
Server logs are retained for a short period for security and troubleshooting.
Login tokens are deleted immediately when you log out.

9. How we protect your data

All traffic between the Apps and our servers is encrypted in transit over HTTPS.
Passwords are stored only as salted, irreversible hashes — nobody, including our staff, can read them.
Your login token is held in the device’s encrypted storage, not in plain text.
Access to data inside the administrative system is restricted by role-based permissions — a student can see only their own records, and a teacher only the classes assigned to them.
Sensitive actions, downloads and document access are ownership-checked, and login attempts are rate-limited.

No system can be guaranteed perfectly secure. Please keep your password confidential, never share your account, and tell us at once if you suspect unauthorised use.

10. Children’s privacy

The Student App is intended for students enrolled with the Institution, many of whom are minors. It is designed as an education tool: there is no public profile, no chat with strangers, no advertising, no in-app purchase and no third-party ad or analytics SDK. The Teacher App is intended for adult staff only.

Accounts for minors are created by the Institution as part of the admission process, with the knowledge and consent of the parent or legal guardian, who may at any time review the student’s information, ask for it to be corrected, or ask us to stop processing it by contacting the Institution. We collect from children only the information necessary to deliver the educational service described in this Policy.

11. Your rights and choices

Access: view your profile and records at any time inside your App — attendance, results, fees and documents for students; profile, classes and payslips for teachers.
Correction: if any detail is wrong, raise a support ticket in the App or contact the office; the Institution maintains the authoritative record and will correct verified errors.
Objection / restriction: you (or, for a student, your guardian) may ask us to limit certain processing, subject to the Institution’s legal record-keeping duties.
Withdraw device permissions: review or revoke permissions at any time in Android Settings → Apps → NIFMAC Student Portal / NIFMAC Teacher Portal → Permissions.
Stop using an App: uninstalling it removes all locally stored data from your device.

12. Account and data deletion

To request deletion of your account and the personal data associated with it, use any of these routes:

Open a ticket from Support inside the App, choosing the category “IT / System Issues” and writing “Account deletion request” as the subject; or
Submit the form on our Support Desk page; or
E-mail nifmn01@gmail.com from your registered contact, stating your full name and admission / staff / system ID.

We verify every request with the account holder and, for a minor, with the parent or guardian. Once verified we will, within 30 days: disable your login, delete your login tokens and cached session data, delete your photograph, uploaded documents and support-ticket attachments, and delete or irreversibly anonymise your contact details.

What we must keep: the Institution is legally obliged to preserve core academic records (enrolment, examination results, transcripts, certificates), employment and payroll records, and financial records (fee collections and receipts) for the statutory retention period, even after an account is deleted. These are retained in the Institution’s administrative records only and are no longer accessible through the Apps. Deleting a student account does not clear any outstanding fees.

13. Cookies (website only)

This website uses strictly necessary cookies to keep your session and to protect forms against cross-site request forgery. Where the Institution has enabled a web analytics or tag-manager service on the website, that service may set its own cookies to produce aggregate visit statistics; you can block or delete cookies in your browser settings. The mobile Apps do not use cookies or any tracking technology.

14. Hosting and international transfers

Our data is stored on servers operated by our hosting provider, which may be located outside the People's Republic of Bangladesh. Wherever the data is processed, we require the same standard of protection described in this Policy.

15. Third-party links and files

The Apps may open external links, or documents hosted elsewhere, that the Institution has published (for example a library resource). We are not responsible for the privacy practices of those third parties; please read their policies before providing information to them.

16. Changes to this Policy

We may update this Policy as the Services or the law change. The revised version will be posted on this page with a new “Last updated” date, and material changes will be announced through the Apps’ notice board. Continued use of the Services after a change means you accept the revised Policy.

17. Contact us

Questions, concerns or complaints about this Policy or your data:

Naogaon Islamia Fazil Madrasah
Naogaon ,Dhaka,Bangladesh
Phone: 01577554056
E-mail: nifmn01@gmail.com
Online: Contact form · Support desk

Privacy Policy