1.Who we are
TaleemPak (“the platform”) is a product of Solutionsgram Pvt Ltd, a Pakistani software company. Solutionsgram is the author, developer and data controller for platform-level records. Each registered institute is the controller of its own students’ academic records and uses TaleemPak as a processor for that data.
2.Information we collect
- Account data: full name, email address, mobile number, preferred language, role (super admin, institute admin, teacher, student, parent) and the institute you belong to.
- Institute data: institute name, type, city, address, board or affiliation, logo, contact details and subscription plan.
- Academic data: question banks created by your institute, exams, assignments, attempts, answers, marks, percentages, certificates and analytics derived from them.
- Face verification data: a mathematical face descriptor (a list of numbers) generated during enrolment, an enrolment reference photo, and comparison results recorded during an exam.
- Proctoring data: anti-cheating events such as tab switches, full-screen exits, multiple faces detected, gaze direction warnings, and periodic camera snapshots taken only while an exam is in progress.
- Billing data: selected plan, billing cycle, coupon code, bank transaction reference, payer name and the payment receipt you upload. We never receive or store card numbers.
- Technical data: device type, browser, screen size and IP-derived request metadata used for security, abuse prevention and the laptop/desktop-only exam rule.
3.Why we process it
To create and secure accounts; to run exams and mark them; to prevent impersonation and cheating; to produce results, analytics and certificates; to process subscriptions and verify bank transfers; to send exam and account notifications; and to keep the platform secure and available. We do not sell personal data and we do not use student data for advertising.
4.Face verification and biometric handling
Face verification is used only to confirm that the student sitting the exam is the enrolled student. Enrolment produces a descriptor — a numeric vector derived from the face. A descriptor cannot be reversed into a photograph.
- Descriptors and enrolment photos are stored in a private area readable only by the student and, where the exam requires review, that student’s own institute staff.
- Exam snapshots are stored in a private bucket. They are never public and are never shared with other institutes.
- Face data is never used for advertising, tracking outside the platform, or shared with third parties.
- Students under 18 are enrolled by their institute; institutes are responsible for obtaining guardian consent before enabling face verification.
- A student may request deletion of their face enrolment at any time. Deleting it disables exams that require face verification until re-enrolment.
5.Data separation between institutes
Every record carries the institute it belongs to, and database-level row security rules enforce that boundary on every read and write. No institute, teacher, student or parent can reach another institute’s data, even by manipulating a request. Platform administrators at Solutionsgram can access records only for support, billing verification and abuse investigation, and such access is written to an audit log.
6.Service providers we rely on
- Cloud hosting, database, authentication and file storage infrastructure.
- An AI provider used to generate and translate questions and to answer AI-tutor prompts. Prompts may include the subject, chapter and question text; they do not include student identity data.
- A maps provider used to look up institute names and addresses during registration.
- An SMS and WhatsApp gateway used only when your institute enables message notifications.
- An email delivery service for account, exam and billing notifications.
Each provider receives only the minimum data needed to perform its function.
7.How long we keep data
- Account and academic records: for as long as the institute’s subscription is active, and up to 12 months afterwards so results can be recovered.
- Proctoring snapshots and violation events: 12 months from the exam date, unless a dispute is open.
- Face descriptors and enrolment photos: until the student or institute deletes them, or the account is closed.
- Payment receipts and invoices: retained as required for accounting and tax purposes.
- Certificates and their verification records: retained indefinitely so a certificate can always be verified.
8.Security
Data is encrypted in transit and at rest. Access is controlled by role and by institute at the database level. Passwords are hashed and checked against known-breached password lists. Administrative actions are audit logged. Private files are served only through short-lived signed links. We test the platform regularly for common web vulnerabilities. No system is perfectly secure, but we treat student data as sensitive by default.
9.Your rights
You may request access to your data, correction of inaccurate data, deletion of your face enrolment, or export of your academic records. Students and parents should contact their institute first, since the institute controls those records. Institute administrators may contact Solutionsgram directly. We respond to verified requests within 30 days.
10.Children and guardians
Accounts for school students are created by the institute, not by children directly. Parents linked to a student can view that student’s attempts, results and any proctoring warnings. Guardian consent for camera-based proctoring is obtained by the institute as part of its own admission or examination policy.
11.Legal context and changes
The platform operates from Pakistan and is subject to Pakistani law, including the Prevention of Electronic Crimes Act 2016. Where an institute serves students in other jurisdictions, it remains responsible for local compliance. We will publish any material change to this policy on this page and update the date above.
12.Contact
Privacy questions and data requests: write to Solutionsgram Pvt Ltd through the contact section on the home page, or ask your institute administrator to raise the request on your behalf.