Security & Trust
Thoughtful protection for the data your community trusts you with
Attendance, Hifz progress, fees, staff pay. This is how IlmFlow keeps it safe, who can see it, and what we will never do with it.
Last reviewed: 11 August 2026
Our safeguards
How we protect your data
Access
Passwords are stored hashed, never as plain text. Repeated wrong login attempts are automatically blocked, and any user can turn on email two-factor authentication for their own account.
Separation
Every madrasah’s records are walled off from every other madrasah’s at the database level. Every request IlmFlow handles checks that the data belongs to your madrasah before it is returned.
In transit
Every connection to IlmFlow is encrypted (HTTPS/TLS). We also set browser security headers (including HSTS) that reduce common web attacks like clickjacking and content-sniffing.
Payments
Parent fee payments go straight from their card into your madrasah’s own connected Stripe account. We never see or store a card number, and we take no cut of parent fee payments.
Response
If something goes wrong, we investigate immediately. Where the law requires it, we notify the Information Commissioner’s Office within 72 hours and tell affected people without undue delay.
Backups
Your database is backed up automatically every night, kept for a rolling window, so a technical failure doesn’t mean losing your madrasah’s records. You can also export your own data at any time.
Least privilege
Only the right people see the right data
Access in IlmFlow is scoped by role, every time, not just hidden in the interface.
Clear commitments
What we promise
- We do not sell personal data, to anyone, ever.
- We do not use pupil data for advertising or profiling, or to train AI models.
- Children never create an account or sign in to IlmFlow, only a parent or guardian does.
- You can export everything your madrasah holds in IlmFlow at any time, without asking us first.
- Every third party we use is named in our Data Processing Agreement, and none can process your data without a contract that protects it.
- Production passwords, API keys and database credentials are kept out of our source code, never committed to our repository.
- If IlmFlow ever had to close, you would get at least 90 days’ notice with exports working throughout.
Transparency
Read the detail
Plain-English documents, not buried in a support ticket.
Found a security issue?
Tell us before telling anyone else. Email hello@ilmflow.co.uk with what you found and how to reproduce it, and we will respond as quickly as we can.
بسم الله الرحمن الرحيم
Ready to transform your madrasa?
Run your whole madrasa from one platform. Start a free 30-day trial or book a demo first, whichever suits you.
No card required · Set up personally, not self-serve · Under 1 working day