Privacy Policy

1. Introduction

Welcome to CuSync ("the App", "we", "our", or "us"). CuSync is a student productivity application that connects with your university ERP system. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our application.

By using CuSync, you agree to the collection and use of information as described in this policy.

2. Information We Collect

2.1 Account Information

• Name, email address, and profile picture (via Google Sign-In)
• University roll number and enrolled class/section group
• School / department code

2.2 ERP Data

• Attendance records fetched from the university ERP on your behalf
• Academic circulars and announcements
• Class timetable and schedule data

2.3 Google Gmail Access (Limited Use)

CuSync requests the https://www.googleapis.com/auth/gmail.readonly scope from Google. This is used exclusively by university administrators to scan a designated Gmail account for timetable PDF attachments and parse them using AI. Specifically:

• We search for emails matching keywords: "timetable", "schedule", or "datesheet"
• We download only PDF or image attachments that contain timetable data
• We do not read, store, or transmit the body or content of personal emails
• We do not share any Gmail data with third parties
• Gmail access is only triggered manually by an authorized administrator

⚠️ CuSync's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

2.4 Usage Data

• App interaction events and session data for performance optimization
• Device type and platform (iOS / Android / Web)

3. How We Use Your Information

• To provide and maintain the CuSync application
• To display your attendance, timetable, and circulars from the ERP
• To match your class/section and display the correct timetable
• To process Gmail timetable PDFs for ERP timetable updates (admin only)
• To authenticate and identify you securely via Google OAuth 2.0
• To improve app features and diagnose technical issues

4. Data Retention

We retain your account and timetable data as long as your account is active. ERP session tokens are ephemeral and are not stored server-side. Timetable data parsed from PDFs is stored in our database to serve the correct schedule to all students in your section.

You may request deletion of your account and all associated data by contacting us at the email below.

5. Data Sharing & Third Parties

We do not sell, trade, or rent your personal information. We may share data with:

• Google: For authentication (Google Sign-In / OAuth 2.0)
• Google Gemini AI: Timetable PDF binary data is sent to Gemini for visual parsing. No personal student data is included.
• Neon PostgreSQL: Our database provider, used to store user profiles, timetables, and group data securely.

6. Security

We implement industry-standard security measures including HTTPS encryption, OAuth 2.0 token handling, and role-based access controls. Admin operations like Gmail parsing are restricted to verified administrator accounts only.

7. Children's Privacy

CuSync is intended for use by enrolled university students (18 years and above). We do not knowingly collect personal information from individuals under 13 years of age.

8. Your Rights

• Right to access the personal data we hold about you
• Right to request correction of inaccurate data
• Right to request deletion of your account and associated data
• Right to revoke Google OAuth access at any time via Google Account Permissions

9. Changes to This Policy

We may update this Privacy Policy periodically. We will notify users of significant changes by updating the "Last updated" date at the top of this page. Continued use of the app after changes constitutes acceptance of the updated policy.

10. Contact Us

If you have questions about this Privacy Policy or wish to exercise your data rights, contact us at:

cusyncschool@gmail.com