Privacy Policy

Last updated: 1 August 2026

This Privacy Policy explains how Spark (“we”, “us”, “the Institution”) collects, uses, shares and protects personal information when you use the NIFMAC Student Portal Android application (package com.codefixit.nifmstudentapp, “the App”) and this website (together, “our Services”).

The App is a private, login-only portal for students already enrolled with the Institution. It is not a public social network and it does not display advertising. By using our Services you agree to this Policy. If you do not agree, please do not use the App.

1. Who is responsible for your data

Spark is the data controller for the information described here. You can reach us at:

E-mail: hello@example.com
Support desk: https://www.spark.softscraft.com/support

2. Information we collect

2.1 Account and profile information

Student accounts are created by the Institution — there is no public sign-up in the App. Your profile record, entered by the Institution during admission, may include:

Full name, admission / system ID and account status
Father’s and mother’s name
Date of birth, gender and blood group
Mobile number and home address
Student photograph (used on your profile and digital ID card)
Academic session, class, section and group
Documents uploaded to your student file by the Institution

2.2 Academic information

Exam schedules, seat plans, marks, letter grades, GPA and transcripts
Promotion and academic history

2.3 Information you submit

Support tickets: the category, priority, subject and description you write, plus any file you choose to attach (JPG, PNG, PDF, DOC or DOCX, up to 5 MB).
Password changes: your current and new password, which are stored only in irreversible hashed form.

A file is read only when you pick it yourself from the device file picker for a support attachment. The App does not scan, index or upload your gallery, documents or any other file in the background.

2.4 Technical information

Like any internet service, our servers automatically record limited technical data when the App communicates with them: IP address, request date and time, the endpoint requested, HTTP status and a basic user-agent string (device platform and app version). This is used for security, abuse prevention and troubleshooting.

2.5 Information stored on your device

Your login token, kept in the operating system’s encrypted storage (Android EncryptedSharedPreferences).
A cached copy of your basic profile and app preferences, so the App opens quickly.
Files you deliberately download (for example a result card or library document), saved to your device storage.

All of this is removed from the device when you log out or uninstall the App.

3. What we do not collect

We do not collect your precise or approximate location.
We do not access your contacts, SMS, call logs, camera, microphone or photo library.
We do not collect advertising identifiers and the App contains no ads and no third-party advertising or analytics SDKs.
We do not build advertising or behavioural profiles.
We never sell or rent personal information to anyone.

4. Device permissions the App requests

Internet / network access — required to communicate with the Institution’s servers.
File access (storage), when applicable — requested only at the moment you attach a file to a support ticket or save a downloaded document (result card, library or question-bank file). You may decline; only those specific features will be unavailable.

5. How we use your information

To authenticate you and keep your account secure
To show your profile, digital ID card, results, transcripts and seat plans
To deliver notices, e-library material and question banks published by the Institution
To receive, route and answer your support tickets
To maintain the Institution’s statutory academic records
To detect, investigate and prevent misuse, fraud or security incidents
To fix bugs and improve the reliability of the Services

We process this data to perform the educational and administrative relationship between you (and your guardian) and the Institution, to meet our legal and record-keeping obligations, and for our legitimate interest in operating a secure service. We do not use your data for automated decision-making that produces legal effects on you.

We share personal information only in these limited situations:

Within the Institution — with authorised teachers, administrative and IT staff, strictly on a need-to-know basis for their role.
With parents or legal guardians — the Institution may disclose a student’s academic information to the student’s parent or guardian.
With service providers — our web hosting and e-mail providers, who process data on our instructions under confidentiality obligations, solely to run the Services.
With education authorities — where required for board registration, examinations or statutory reporting.
Where the law requires it — to comply with a valid legal process, or to protect the rights, safety or property of the Institution, our students or the public.

We do not share your information with advertisers, data brokers or any third party for their own marketing.

7. How long we keep your data

Academic records (enrolment, results, transcripts, promotion history) are retained for as long as the Institution is required to maintain student records, including after you leave, so that certificates and transcripts can be re-issued.
Support tickets and attachments are retained while the matter is open and for a reasonable period afterwards for reference.
Server logs are retained for a short period for security and troubleshooting.
Login tokens are deleted immediately when you log out.

8. How we protect your data

All traffic between the App and our servers is encrypted in transit over HTTPS.
Passwords are stored only as salted, irreversible hashes — nobody, including our staff, can read them.
Your login token is held in the device’s encrypted storage, not in plain text.
Access to student data inside the administrative system is restricted by role-based permissions.
Sensitive actions, downloads and document access are ownership-checked so one student cannot open another student’s records.

No system can be guaranteed perfectly secure. Please keep your password confidential, never share your account, and tell us at once if you suspect unauthorised use.

9. Children’s privacy

The App is intended for students enrolled with the Institution, many of whom are minors. It is designed as an education tool: there is no public profile, no chat with strangers, no advertising, no in-app purchase and no third-party ad or analytics SDK.

Accounts for minors are created by the Institution as part of the admission process, with the knowledge and consent of the parent or legal guardian, who may at any time review the student’s information, ask for it to be corrected, or ask us to stop processing it by contacting the Institution. We collect from children only the information necessary to deliver the educational service described in this Policy.

10. Your rights and choices

Access: view your profile, results and documents at any time inside the App.
Correction: if any detail is wrong, raise a support ticket in the App or contact the office; the Institution maintains the authoritative record and will correct verified errors.
Objection / restriction: you or your guardian may ask us to limit certain processing, subject to the Institution’s legal record-keeping duties.
Withdraw device permissions: revoke file access at any time in Android Settings → Apps → NIFMAC Student Portal → Permissions.
Stop using the App: uninstalling the App removes all locally stored data from your device.

11. Account and data deletion

To request deletion of your account and the personal data associated with it, use any of these routes:

Open a ticket from Support inside the App, choosing the category “IT / System Issues” and writing “Account deletion request” as the subject; or
Submit the form on our Support Desk page; or
E-mail hello@example.com from your registered contact, stating your full name and admission / system ID.

We verify every request with the student and, for a minor, with the parent or guardian. Once verified we will, within 30 days: disable your login, delete your login tokens and cached session data, delete your profile photograph, uploaded documents and support-ticket attachments, and delete or irreversibly anonymise your contact details.

What we must keep: the Institution is legally obliged to preserve core academic records (enrolment, examination results, transcripts, certificates) for the statutory retention period, even after an account is deleted. These are retained in the Institution’s administrative records only and are no longer accessible through the App.

12. Cookies (website only)

This website uses strictly necessary cookies to keep your session and to protect forms against cross-site request forgery. Where the Institution has enabled a web analytics or tag-manager service on the website, that service may set its own cookies to produce aggregate visit statistics; you can block or delete cookies in your browser settings. The mobile App does not use cookies or any tracking technology.

13. Hosting and international transfers

Our data is stored on servers operated by our hosting provider, which may be located outside the People's Republic of Bangladesh. Wherever the data is processed, we require the same standard of protection described in this Policy.

14. Third-party links and files

The App may open external links, or documents hosted elsewhere, that the Institution has published (for example a library resource). We are not responsible for the privacy practices of those third parties; please read their policies before providing information to them.

15. Changes to this Policy

We may update this Policy as the Services or the law change. The revised version will be posted on this page with a new “Last updated” date, and material changes will be announced through the App’s notice board. Continued use of the Services after a change means you accept the revised Policy.

16. Contact us

Questions, concerns or complaints about this Policy or your data:

Spark
E-mail: hello@example.com
Online: Contact form · Support desk