Privacy policy

Last updated: 15 October 2026

IlmNafian is made for children. That is why we collect as little data as possible, show no ads and never sell anyone's data. This policy explains what we store, why, and your rights over it, in line with Indonesia's Personal Data Protection Law (Law No. 27 of 2022).

Who creates accounts

Only adults create accounts: parents/guardians, teachers or schools. Children do not sign up themselves. A child's profile is created by a parent/guardian, or by a teacher for students in their class. Students sign in with a class code and a picture password, without email or phone number.

Data we store

• Adult accounts: name, email, password (stored as a hash), school name if provided, and subscription and payment history.
• Child profiles: nickname, level, learning programme, avatar and screen-time rules. We do not ask for a child's date of birth, address or photo.
• Learning activity: games played, right/wrong answers, time spent and achievements. This is used to adapt question difficulty and build reports.
• Reports and feedback: the content of reports you or your child send, satisfaction scores (NPS) and reasons for leaving if you give them. So problems can be found quickly, each report includes technical details: the page open at the time, the question or game ID, app version, device and browser type, screen size, time zone, the last error message, the last few steps in the app, and the IP address. These details are used only to handle that report.
• Optional sign-up details: how you heard about IlmNafian, city, number and levels of children, and WhatsApp number. All may be left blank. A WhatsApp number is stored only if you tick the consent to receive updates by WhatsApp, is stored encrypted, and is deleted when you withdraw consent in Account.
• Where sign-ups come from: campaign parameters in the link you opened (such as utm_source), an ad click ID if you came from an ad (such as gclid or fbclid), the referring site and the first page opened. This is stored on your device and only sent to our server with your sign-up, to learn which promotion channels work.
• Anonymous technical data: app speed, error messages and whether a game was completed. This is stored without name, email, child ID or IP address and deleted automatically after 35 days.

Children's photos

Achievement cards and the Student ID card let parents add a child's photo. The photo is processed on the parent's device and is never uploaded to IlmNafian's servers. Teachers can only use avatars.

The QR code on the Student ID card only shows that the card is valid, the child's first name and level. Parents can create a new code at any time so the old card stops working.

Help through "view as"

To investigate a problem, IlmNafian support can see the app as you or your child see it. This mode is view-only: nothing can be changed, answers and screen time are not recorded, it ends automatically after 30 minutes, and every use is logged with its reason. Support staff only see learning data; payment, subscription, full contact details and account settings can only be seen by IlmNafian's owner.

Location & device at sign-in

For account security we record an approximate location from the IP address (city level, not GPS) and the device type (for example "Chrome · Android") when parents, teachers, the internal team or student devices sign in, to detect access from unusual devices or countries. Only the service owner can see this, every view is logged, IP addresses and locations are stored encrypted, and everything is deleted automatically after 90 days. IP location providers we may use: Cloudflare and MaxMind; maps: Mapbox or MapQuest (they receive approximate coordinates only, never identities).

Website visit statistics

We count visits with our own system, without cookies and without third-party scripts (no Google Analytics, Meta Pixel or similar in your browser). We record the page opened, how long it was active, how far it was scrolled, page speed, device and browser type, country (from Cloudflare) and where the visit came from. Visitors are told apart by a random fingerprint that changes every day, so your visits cannot be followed from day to day, and IP addresses are not stored. Children (play mode and the student sign-in page) and our internal team are never counted. If your browser sends a "Do Not Track" or Global Privacy Control signal, no visit is recorded. Visit details are deleted after 90 days; after that only per-page totals remain.

Blog comments

Only members (parents, teachers, students and the IlmNafian team) can comment on blog articles. Comments show a first name and last-name initial (for example "Hafiz R.") and the commenter's role, never an email or photo. Students' comments are always reviewed by our team before they appear, and links in students' comments are removed automatically. To prevent spam we store a random fingerprint of the IP address that changes every day, not the IP address itself. You can delete your own comments at any time, and they are deleted with your account.

Leaderboard

A child only appears on a leaderboard if a parent/guardian turns it on. Only a nickname and avatar are shown, never a full name, photo or school. The default nickname is a pseudonym (for example "Kancil 27"), not the child's name. Parents can turn it off at any time and the child disappears from the board immediately.

How data is used

• Running the service: games, reports, screen time, class assignments and the notifications you choose.
• Safety: preventing abuse, handling reports and protecting children.
• Improving the app using anonymous technical data.

Adult account data (where the visit came from, optional sign-up answers) is also used to evaluate promotion channels and, if you agree, to send programme updates by WhatsApp.

We do not use children's data for advertising or marketing profiles, and we never sell it.

Other parties involved

• Payment providers (such as iPaymu, Midtrans, Xendit, DOKU, Stripe, PayPal) process payments. On the English site prices are shown in US dollars but charged in Indonesian rupiah, at the amount shown before you pay. Card details never pass through our servers.
• Sign in with Google, Apple or Microsoft if you choose it; we only receive your name and email.
• Notification delivery: email through our mail server, Telegram if you connect it, and browser notifications through the browser's own push service. Notifications never contain the content of child-safety reports.
• Cloudflare for site security and speed.
• Google (Google Analytics 4 / server-side Google Tag Manager), if enabled by the service owner: to measure advertising, our server may send sign-up, trial, activation and payment events of parent or teacher accounts, with the campaign source and ad click ID. A random code is sent, not a name or email. Email and WhatsApp number are only sent as SHA-256 hashes if "enhanced conversions" is enabled and stated here. Children's data is never sent.

Child-safety reports

When a child presses "I need help", the report is read only by our trained safety team. We assess the situation before contacting the right adult.

How long we keep data

Account and learning data is kept while the account is active. When an account is deleted, the children's data is deleted with it. Transaction records and invoices are kept as required by tax law. So the free trial is given only once, we keep a digital fingerprint (SHA-256 hash) of email addresses that have used a trial, including after the account is deleted; the email address itself is not kept. Database backups are deleted on a rolling basis.

Your rights

You may request a copy of your data, correct it, delete your account together with your children's profiles, and withdraw consent (for example turning off the leaderboard, notifications or WhatsApp updates). Most of this can be done directly in Account. For anything else, contact us.

Security

Connections are always encrypted (HTTPS). Passwords are stored with Argon2id, secret data is encrypted with XChaCha20-Poly1305, email addresses are confirmed through single-use links, children sign in with picture passwords with stepped lockouts, and repeated sign-in attempts are limited. Every action by our internal team is recorded in an audit log.

Contact

Privacy questions: email [email protected] or use Account → Report a problem in the app.