Privacy Policy

Who operates this service

Ishraq PTMS is developed and published by Komel B for authorized members of Ishraq Institute. Ishraq Institute operates the PTMS service and determines how member and operational information is used. Privacy questions may be sent to komel@ishraqinstitute.com.

Information we handle

Depending on how a member uses PTMS, the service may handle:

• Member account information, including name, email address, role, and account status.
• Projects, tasks, timesheets, work notes, and related institute activity.
• App-access information, including activation status, device name, a device public key, and revocation status.
• Push-notification information, including a Firebase registration token and notification delivery details.
• Security and diagnostic information, such as request timestamps, IP address, and server error logs.

The app does not request contacts, precise location, SMS, call logs, microphone, or advertising identifiers.

How information is used

• To provide member access to PTMS and maintain signed-in sessions.
• To manage projects, tasks, timesheets, and institute operations.
• To authorize devices, prevent unauthorized access, and investigate security incidents.
• To send service and work-related notifications requested by the institute.
• To maintain, troubleshoot, and improve the reliability of the service.

Personal information is not sold and is not used for third-party advertising.

Service providers and sharing

Information is available to authorized Ishraq Institute administrators and members as required for their roles. We use infrastructure providers to host and secure the service. Firebase Cloud Messaging, a Google service, processes device registration tokens and notification payloads when push notifications are enabled. Information may also be disclosed when required by applicable law or to protect the security and rights of users, the institute, or the service.

Security

Data is transmitted over HTTPS. App credentials are stored using Android security facilities, device requests are cryptographically signed, and administrative access is restricted. No system can guarantee absolute security, but reasonable technical and organizational safeguards are maintained.

Retention and deletion

Information is retained while a member account is active and for as long as reasonably necessary for institute operations, security, recordkeeping, dispute resolution, and legal obligations. Expired activation credentials and revoked device records may be retained for security and audit purposes. Residual copies may remain in protected backups until those backups are replaced through the normal backup cycle.

Members may request access, correction, device revocation, or deletion of their account and associated personal information by emailing komel@ishraqinstitute.com. Requests are verified before action is taken. Some operational records may be retained where required by law or legitimate institute recordkeeping obligations.

Children

Ishraq PTMS is an internal work-management service and is not directed to children.

Changes to this policy

This policy may be updated when the app, service providers, or legal requirements change. The effective date above will be revised when material updates are published.