Privacy & Permissions Policy
Effective Date: July 20, 2025
1. Information We Collect
- Personal Information: name, email, student ID, profile
- Course Info: schedules, attendance, timestamps
- Permissions: GPS Location (iOS/Android), Bluetooth (Android only), Camera & Photo Library (professor verification), app/device info
2. How We Use Your Information
We use your information to manage your profile, track attendance, and personalize your experience. Your data is never sold or shared.
3. Data Storage & Security
We use Supabase to store your data securely with HTTPS communication and authenticated access.
- Data Retention: Your data is retained until account deletion
- Secure Communication: All data is transmitted via HTTPS
- Access Control: Only authorized personnel can access your data
4. Data Collection & Processing
- Personal Information: name, email, student ID, profile information
- Course Information: schedules, attendance records, timestamps
- Device Information: app usage data for service improvement
- Location Data: GPS coordinates for attendance verification only
- Bluetooth Data: Device scanning for attendance detection (Android only)
- Verification Images: Camera/photo library access for professor identity verification
5. Legal Compliance
We comply with Canadian privacy laws and regulations including PIPEDA and applicable provincial privacy legislation. Your personal information is protected under applicable Canadian laws.
- Data Protection: We follow industry best practices for data security
- Canadian Standards: We adhere to Canadian privacy protection standards
- Regular Audits: We conduct regular security assessments
6. User Control & Rights
- Access and edit your data
- Delete your account (contact us via email)
- Withdraw permissions from device settings
- Request data export
- Right to Withdraw: You can withdraw consent at any time
- Data Portability: You can request a copy of your data in a portable format
- Right to Rectification: You can correct inaccurate personal information
7. Third-Party Services
We use trusted service providers for essential app functions. Your data is not sold, rented, or shared with third parties.
- Supabase: We use Supabase for secure data storage and authentication
- No Third-Party Sharing: Your data is not shared with third parties
- Service Providers: We only use trusted service providers for essential app functions
8. Policy Updates
We may update this policy with notice to users. Significant changes will be communicated via app notification.
- Policy Updates: We may update this policy with notice to users
- App Updates: New features may require additional permissions
- Notification: Significant changes will be communicated via app notification
9. Permissions Used
- Location (GPS): Required for attendance verification on both iOS and Android
- Bluetooth: Required for attendance detection on Android only
- Camera: Required for professor verification image capture
- Photo Library: Required for professor verification image selection
- Internet: Required for data synchronization and app functionality
10. Contact
Email: contact.univiby.team@gmail.com