Your privacy is important to us. This Privacy Policy explains how ILM HUB Ltd. ("ILM HUB", "we", "our", or "us") collects, uses, and protects your personal information when you use our mobile application and website at ilmhub.kz.
1. Information We Collect
Information you provide directly
- Account information: Your name, email address, and password when you create an account.
- Profile data: Optional profile information such as preferred language and learning goals.
- Payment information: If you subscribe, payment is processed by Apple App Store or Google Play. We do not store credit card details.
- Communications: Messages you send us via email or contact forms.
Information collected automatically
- Usage data: Lessons completed, exercises attempted, progress scores, and time spent in the app.
- Device information: Device type, operating system, app version, and unique device identifiers.
- Log data: IP address, timestamps, and error reports (processed via Sentry for crash analytics).
- Analytics: Aggregated, anonymized data about app usage patterns to improve our services.
Information from third parties
- OAuth sign-in: If you sign in with Google or Apple, we receive your name and email address from that provider.
2. How We Use Your Information
We use the information we collect to:
- Provide, operate, and improve the ILM HUB application and services
- Personalize your learning experience and track your progress
- Process subscriptions and manage your account
- Send you service-related emails (account confirmations, password resets, updates)
- Respond to your inquiries and provide customer support
- Monitor and analyze usage trends to improve content and features
- Detect, prevent, and address technical issues and security threats
- Comply with legal obligations
3. Legal Basis for Processing (GDPR)
If you are located in the European Economic Area, we process your personal data under the following legal bases:
- Contract performance: To provide you with the services you requested.
- Legitimate interests: To improve our services, ensure security, and prevent fraud.
- Consent: For optional communications such as newsletters (you may withdraw consent at any time).
- Legal obligation: When required by law.
4. Sharing Your Information
We do not sell, rent, or trade your personal information. We may share your information only in the following circumstances:
- Service providers: Trusted third-party vendors who assist us in operating the app (hosting, analytics, payment processing, crash reporting). They are bound by confidentiality agreements.
- Legal requirements: When required by law, court order, or governmental authority.
- Business transfers: In the event of a merger, acquisition, or sale of assets, your data may be transferred as part of that transaction.
- Safety: To protect the rights, property, or safety of ILM HUB, our users, or the public.
5. Third-Party Services
Our app integrates with the following third-party services, each with their own privacy policies:
- Google Sign-In — Authentication provider
- Apple Sign-In — Authentication provider
- Apple App Store / Google Play — In-app purchases and subscriptions
- Sentry — Error tracking and crash reporting
- AWS S3 / MinIO — Media content storage
6. Data Retention
We retain your personal information for as long as your account is active or as needed to provide you services. You may delete your account at any time, which will result in the deletion of your personal data within 30 days, except where retention is required by law.
7. Data Security
We implement industry-standard security measures to protect your personal information:
- All data is transmitted using TLS/HTTPS encryption
- Passwords are hashed using bcrypt
- JWT tokens with short expiry times and refresh token rotation
- Rate limiting and brute-force protection
- Regular security audits and monitoring via Sentry
- Role-based access control for internal staff
While we take all reasonable precautions, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security.
8. Your Rights
You have the following rights regarding your personal data:
- Access: Request a copy of the personal data we hold about you.
- Correction: Request correction of inaccurate or incomplete data.
- Deletion: Request deletion of your personal data ("right to be forgotten").
- Portability: Request your data in a machine-readable format.
- Objection: Object to certain processing activities.
- Restriction: Request restriction of processing in certain circumstances.
To exercise any of these rights, contact us at privacy@ilmhub.kz.
9. Children's Privacy
ILM HUB is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected personal data from a child under 13, we will take steps to delete that information promptly. If you believe we may have collected data from a child, please contact us at privacy@ilmhub.kz.
10. Cookies and Tracking
Our website at ilmhub.kz may use cookies and similar tracking technologies to:
- Remember your preferences and session state
- Analyze website traffic and usage patterns
- Improve website performance and user experience
You can control cookie settings through your browser preferences. Disabling cookies may affect some website functionality.
11. International Data Transfers
ILM HUB is based in Kazakhstan. If you access our services from outside Kazakhstan, your information may be transferred to, stored, and processed in Kazakhstan or other countries where our service providers operate. We ensure appropriate safeguards are in place for such transfers.
12. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes by email or through a notice in the app. The "Last updated" date at the top of this page reflects when the policy was most recently revised. Continued use of our services after changes constitutes acceptance of the updated policy.