← Back to Home
AttendMate ("we," "our," or "the App") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and protect your information when you use our mobile application, including attendance tracking, location & geofencing services, and calendar synchronization features.
1. Information We Process
AttendMate operates on a local-first architecture. All your personal data, schedule information, and app preferences remain stored strictly on your device in a secure private database. We process:
- Timetable & Attendance Schedules: Subject names, acronyms, slot times, instructor names, and attendance records created or imported by you.
- Location & Geofencing Data: Optional classroom/campus geographic coordinates (latitude, longitude, geofence radius, and location names) configured by you for automated attendance reminders and proximity verification.
- Google Account Credentials: Your Google profile email address and OAuth tokens, used strictly to authenticate and sync events directly with your Google Calendar.
2. Location & Geofencing Privacy
If you enable location features and grant location permissions:
- On-Device Processing: Location coordinates and geofences are evaluated solely on your physical device to trigger localized attendance verification and reminders when entering or leaving designated classroom areas.
- Zero Remote Storage or Tracking: Your location data is never transmitted to remote servers, uploaded to cloud databases, shared with third parties, or used for location tracking or advertising.
- Permission Control: Location permissions (including precise location and optional background location for auto-detection) are completely optional. You can grant or revoke these permissions at any time via your device settings or disable geofencing inside the App.
3. How We Use Your Google Calendar & Device Calendar Data
To enable the synchronization of your timetable with Google Calendar, the App requests permission for the following OAuth scope:
https://www.googleapis.com/auth/calendar.events (view and edit events on your calendars).
We use calendar access exclusively for:
- Creating calendar events for your classes, timetables, and special lectures inside your selected Google Calendar or Device Calendar.
- Automatically updating, rescheduling, or deleting events in your calendar to match changes you make inside the App.
- Excluding specific holiday dates and cancellations using iCalendar recurrence exclusion rules (
EXDATE).
4. Data Sharing & Third-Party Access
Your data is private. We do not share, sell, rent, or transmit your personal information, location data, calendar events, or email address with any third parties or remote analytics services.
- No Remote Servers: The App does not operate a backend server.
- Direct API Communication: Google OAuth authentication tokens are transmitted directly to Google's official API endpoints and nowhere else.
5. Security & Data Protection Mechanisms
We implement industry-standard security measures to protect your data on-device and in transit:
- Encryption in Transit: All network communication with Google APIs occurs over secure HTTPS (SSL/TLS 1.2 or TLS 1.3).
- On-Device Encryption: Google OAuth credentials and sensitive preferences are stored securely using Android's EncryptedSharedPreferences (backed by the hardware-level Android Keystore system).
- Application Sandboxing: Your local SQLite database containing timetables, attendance history, and geofence locations is protected by system-level Android application sandboxing and Linux user isolation.
- No Remote Server Retention: Because there are no backend servers, your data cannot be exposed in remote database breaches.
6. Access Revocation and Data Deletion
You retain complete control over your data:
- Google Account Disconnect: You can disconnect your Google Account at any time in the App settings, which immediately purges all stored OAuth tokens from your device.
- Revoking Google Permissions: You can revoke the App's access anytime via Google Account Security.
- Location Permission Revocation: You can revoke location access at any time through Android system settings.
- Local Data Erasure: Uninstalling the App or selecting "Clear App Data" in app settings permanently deletes all local attendance, timetable, and location data from your device.
7. Compliance with Google API Services User Data Policy
AttendMate's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.