Privacy policy

Last updated: 1 September 2026

What we collect

• Account data: name, email, password (stored only as a salted Argon2id hash), profile information you choose to add.
• Learning data: enrolments, lesson progress, quiz attempts, lab submissions, notes and certificates.
• AI tutor conversations: messages you send to the tutor and the responses, stored so you can return to them. Conversations are processed by our AI provider under a data-processing agreement and are not used to train their models.
• Applications and enquiries: information you submit to admissions or through contact forms.
• Technical data: IP address and browser type in security and audit logs, kept for ninety days.

How we use it

To provide and improve the platform, to administer admissions and programs, to issue and verify certificates, to keep the service secure, and — if you opt in — to send the institute’s monthly letter.

Your rights

You may access, correct or export your data, and ask us to delete your account, by writing to privacy@pioai.edu.pk. We respond within thirty days. Certificates that have been issued remain verifiable by their code; the certificate record shows only your name and the course.

Retention

Learning records are kept while your account is active and for two years after, unless you ask for earlier deletion. Audit logs are retained for ninety days. Admissions records are retained for one admissions cycle after a decision.

Security

Sessions are database-backed and revocable, all traffic is encrypted in transit, and access to production data is limited to named staff with audit logging.