1. Introduction
Welcome to CUsync ("the App", "we", "our", or "us"). CUsync is a student productivity application that connects with your university ERP system to display attendance, circulars, timetables, and more — all in one place. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our application (web and Android).
By using CUsync, you agree to the collection and use of information as described in this policy.
2. Information We Collect
2.1 Account Information
- Name, email address, and profile picture (via Google Sign-In / OAuth 2.0)
- University roll number and enrolled class / section
- School or department code
- Custom profile avatar — if you upload one, it is stored securely and associated with your account. Uploading a custom avatar requires an active CUsync Pro subscription.
2.2 ERP Data
- Attendance records fetched from the university ERP on your behalf
- Academic circulars and announcements
- Class timetable and schedule data
ERP credentials (username / password) are entered by you and used solely to authenticate with your institution's ERP. We do not store your ERP password on our servers.
2.3 Saved Circulars (Local Storage)
Circulars you bookmark are saved in your device's local storage (localStorage). This data never leaves your device and is not transmitted to our servers. Viewing your saved circulars archive requires a CUsync Pro subscription; the act of saving a circular is free.
2.4 Google Gmail Access (Admin Only)
CUsync may request the https://www.googleapis.com/auth/gmail.readonly scope from Google. This permission is used exclusively by verified university administrators to scan a designated Gmail account for timetable PDF attachments. Specifically:
- We search emails matching keywords: "timetable", "schedule", or "datesheet"
- We download only PDF or image attachments that contain timetable data
- We do not read, store, or transmit the body or content of any emails
- We do not share any Gmail data with third parties
- Gmail access is triggered only manually by an authorized administrator
- Regular student users are never asked for Gmail access
⚠️ CUsync's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
2.5 Premium & Subscription Data
- Your premium subscription status is stored server-side and linked to your roll number. It is not tied to your Google account and persists independently of Google login.
- Temporary ad-based access (3 minutes) is stored in your device's local storage and is never sent to our servers.
2.6 Push Notifications
CUsync can send push notifications for upcoming classes. Notification permissions are requested only when you explicitly enable notifications in the app settings — never on first launch. You may revoke this permission at any time from your device settings.
2.7 Usage Data
- App interaction events and session data for performance optimization
- Device type and platform (Android / Web)
3. How We Use Your Information
- To provide and maintain the CUsync application
- To display your attendance, timetable, and circulars from the ERP
- To match your class / section and display the correct timetable
- To manage your CUsync Pro subscription status
- To store and serve your custom profile avatar (Pro feature)
- To send push notifications for upcoming classes (only if enabled by you)
- To process Gmail timetable PDFs for ERP timetable updates (admin only)
- To authenticate and identify you securely via Google OAuth 2.0
- To serve rewarded video advertisements via Google AdMob (Android app only)
- To improve app features and diagnose technical issues
4. Data Retention
We retain your account, timetable, and subscription data for as long as your account is active. ERP session tokens are ephemeral and are not stored server-side. Timetable data parsed from PDFs is stored in our database to serve the correct schedule to all students in your section. Saved circulars are stored only on your device.
You may request deletion of your account and all associated data by contacting us at the email below.
5. Data Sharing & Third Parties
We do not sell, trade, or rent your personal information. We share data with the following services only as necessary to operate the App:
- Google: For authentication (Google Sign-In / OAuth 2.0) and, for administrators only, Gmail API access for timetable extraction.
- Google AdMob: Serves rewarded video advertisements on the Android app. AdMob may collect device identifiers and ad interaction data per its own privacy policy. Ads are displayed only when you choose to watch one to unlock temporary Pro access.
- Google Gemini AI: Timetable PDF binary data is sent to Gemini for visual parsing. No personal student data (name, roll number, etc.) is included in these requests.
- Neon PostgreSQL: Our database provider, used to store user profiles, timetables, subscriptions, and group data securely.
6. Security
We implement industry-standard security measures including HTTPS encryption, OAuth 2.0 token handling, and role-based access controls. Admin operations such as Gmail parsing are restricted to verified administrator accounts only. Premium subscription status is verified server-side on every request with no-cache headers to prevent stale access.
7. Children's Privacy
CUsync is intended for enrolled university students (18 years and above). We do not knowingly collect personal information from individuals under 13 years of age.
8. Your Rights
- Right to access the personal data we hold about you
- Right to request correction of inaccurate data
- Right to request deletion of your account and associated data
- Right to revoke Google OAuth access at any time via Google Account Permissions
- Right to disable push notifications at any time from your device settings
9. Changes to This Policy
We may update this Privacy Policy periodically. We will notify users of significant changes by updating the "Last updated" date at the top of this page. Continued use of the App after changes constitutes acceptance of the updated policy.
10. Contact Us
If you have questions about this Privacy Policy or wish to exercise your data rights, contact us at:
cusyncschool@gmail.com