Privacy Policy

1. Data we collect

• Account data: name (in Latin and Arabic script), email and password (stored as a hash that no one can read). IMC students/staff: NIM/NIDN (student/lecturer ID number), study programme and intake year. Members of the public: WhatsApp number and institution name.
• Learning and test activity: course progress, quiz/assignment/test answers, voice recordings for the Kalam section, photos of handwriting for the Kitabah/Khat sections, grades, results and certificates.
• Test security records: events of leaving the test page, exiting full screen and changing devices.
• Order data: order number, item, amount, status and payment method. We do not store card numbers, PINs or bank account details — payments are processed directly by Duitku.
• Institutional session requests: institution name, address, name and contact details of the person in charge, and request details.
• Security records: sign-in history (IP address and browser type).

2. Purposes of use

• Running courses and tests, assessing answers, and issuing and verifying certificates.
• Processing registrations and payments, and contacting you about orders, schedules or results.
• Keeping accounts secure and protecting test integrity (preventing cheating and misuse).

3. Third parties

Data is not sold. It is shared only as needed with service providers who help us:

• Duitku — payment processing (name, email, WhatsApp number, order number and amount).
• Cloudflare — site security and delivery, including anti-bot verification (Turnstile).
• Microsoft Azure — servers and data storage, located in the Indonesia region.

For test sessions held at an institution’s request, the names, NIMs, institution name and test results of that session’s participants may be viewed by the proctors appointed by that institution. We may also disclose data where required by law.

4. Certificate verification

The public verification page shows only the name, course/test title, number, date of issue and score. Email addresses, NIMs and phone numbers are never shown.

5. Cookies

We use only the cookies needed for the site to work: the sign-in session cookie, form protection (CSRF) and the "Remember me" choice. There are no advertising or third-party tracking cookies.

6. Storage and security

• Account data, test results and certificates are kept while the account is active and for as long as needed to verify certificates.
• Security records are kept for up to 1 year. Institutional session requests are deleted 2 years after follow-up is completed.
• Data is transmitted encrypted (HTTPS); test answer files are private and can be opened only by their owner and graders. Data backups are encrypted.

7. Your rights

You have the right to view and correct your data (some of it you can change yourself in the Profile menu), to request a copy of your data, to withdraw consent and to request deletion of your data, except for data we are required to keep, such as payment records and certificates already issued. Send your request to [email protected]; we reply within 3 × 24 hours on working days. IMC students request corrections to academic data through the academic office.

8. Contact

• Provider: Institut Muslim Cendekia (IMC)
• Address: Jl. Perintis Kemerdekaan km 6, Cikembar, Sukabumi Regency, West Java, Indonesia
• Phone: (0266) 750 3020
• Email: [email protected]
• Service hours: Saturday – Thursday, 07:30 – 15:00 WIB (UTC+7)