Privacy

CAS designs systems with the same privacy discipline it recommends to clients: collect the minimum, state the purpose, and keep the data only as long as the purpose requires.

What this site collects

Contact and inquiry forms collect only the fields you submit, to respond to your request. This site does not use invasive third-party tracking, advertising pixels or cross-site identifiers. Analytics, when enabled, are privacy-respecting and limited to meaningful product events.

Ask CAS

Questions you type into Ask CAS are processed to retrieve answers from CAS content. They are not sold, shared with advertisers, or used to train third-party models beyond the provider strictly required to answer, and only where CAS has configured such a provider.

Your choices

Theme preference is stored locally in your browser. You may request correction or deletion of inquiry records by contacting CAS through the same channel you used.

CAS E-LMS app and student portal

The CAS E-LMS app (Android) and the student and staff portal at cas.org.pk/elms are for enrolled CAS students and staff. Accounts are created by CAS at enrolment; there is no public sign-up. They use the following data, only to run classes, attendance, fees and certificates:

• Your student record — name, roll number, group and course, contact details and profile photo held by the CAS office, plus your attendance, assignments, leave requests, fee plan, payments and receipts.
• Location (campus attendance) — when campus attendance is on, the app checks your location in the background to notice when you arrive at and leave the CAS campus. It records the check-in time, the location reading at check-in (coordinates and accuracy) and whether the reading looked simulated. It does not keep a history of where you go. You can turn location off in your phone’s settings; campus attendance is then marked by staff instead.
• Camera — Face ID — to confirm that the enrolled student is the one attending, the app and portal compare your face with your enrolment photo. CAS stores a numerical face template and small reference images, not a video. They are used only for CAS attendance, never shared or sold, and deleted when you ask or when your record is closed.
• Camera and microphone — live classes — used only while you are in a live class, to share your video and voice with the class. During online classes the app may measure engagement (for example whether a face is visible) on your device and send only the result, never the video.
• Live-class protection — every live-class and webinar screen carries an invisible mark of the viewer and the date, so a leaked recording can be traced to the account it came from.
• Notifications — a device token so CAS can send class, fee and announcement notifications. You can turn them off in your phone’s settings.
• Device information — the app version and device type, to show update notices and to troubleshoot.

Who processes it. CAS data is stored in Google Firebase (Google Cloud). Live video passes through the video-meeting service CAS uses for classes; it is not recorded by CAS unless the teacher announces a recording. CAS does not sell personal data, show advertising or share data with advertisers.

Keeping and deleting data. Data is kept while you are a CAS student and afterwards only as long as needed for certificates, fee records and legal obligations. To ask for a copy, a correction, or deletion of your account and data (including your face data), contact the CAS office or use the contact page. Deletion of your E-LMS account removes your login, face data, location records and device tokens; fee receipts and issued certificates are kept as required for accounting and verification.

Security

Inputs are validated end to end, submissions are rate-limited, and AI provider credentials — where configured — live server-side only. CAS does not claim certifications it does not hold.