How Campus App handles your face biometric data

01Who we are

Campus App is a mobile application providing face biometric attendance and related campus administration features, served through the API at campusapp.in.

02Scope

This policy applies to:

• End users who mark attendance using face recognition
• Administrators and authorized staff who register users, enroll faces, and view attendance reports
• Account information submitted through the App
• Face biometric processing performed for attendance purposes

The App is intended for educational institutions and authorized campus users. Access is typically provided by the institution that manages your account.

03Information we collect

We collect only information needed to operate attendance and related campus features.

04How we use your information

We use the collected information to:

• Create and manage user accounts
• Authenticate users (login / logout)
• Enroll face biometrics for authorized users
• Verify identity and mark attendance using face recognition
• Display attendance history, slots, and reports to authorized administrators
• Prevent duplicate or unauthorized attendance marking
• Maintain security, prevent fraud or misuse, and troubleshoot technical issues
• Comply with applicable legal obligations and legitimate institutional requirements

Face biometric data is processed solely for attendance verification and the face enrollment that supports it.

05Legal basis / consent

• Face enrollment and attendance scanning are performed only for users authorized by the institution
• By using face enrollment / attendance features, the user — or the institution acting as controller for its members — consents to processing of face biometric data for attendance verification
• Users or institutions may request deletion or correction of biometric enrollment data by contacting the institution administrator or us, subject to applicable law and institutional policy
• Where local law requires explicit, written, or parental/guardian consent for minors, the deploying institution is responsible for obtaining that consent before enrollment

06How face recognition works in this App

• The App requests camera permission to capture a face during enrollment and attendance scanning
• On-device machine learning components may perform face detection and embedding generation
• The resulting biometric template (embedding) — not a photo album — is sent to the server API at campusapp.in for enrollment storage and/or attendance matching
• The server compares the submitted template against enrolled templates to identify the user and record attendance
• Camera frames used for capture are processed only for the attendance/enrollment workflow and are never used to build advertising profiles

07Permissions

08How we store and protect data

• Account, attendance, and enrolled biometric templates are stored on servers associated with campusapp.in / the institution's Campus App backend
• We use reasonable administrative, technical, and organizational measures — including encrypted transport (HTTPS), access controls, session authentication, and restricted administrative access
• No method of transmission or storage is 100% secure; we cannot guarantee absolute security but work to protect information appropriately

09Data retention

• Account and attendance records are retained as long as needed for institutional attendance administration, audit, and legal/compliance needs, or as instructed by the institution
• Face biometric templates are retained while the user remains enrolled for face attendance, or until removal is requested, or until retention is no longer necessary for the stated purpose
• Session data is retained only as needed to keep the user authenticated and secure
• When data is no longer required, we take steps to delete or de-identify it, subject to backup and legal retention requirements

10Sharing of information

Information may be shared only as follows:

• With the educational institution / authorized administrators that manage the user's campus account and attendance
• With service providers who host or operate the App backend, strictly as needed and under confidentiality obligations
• When required by law, regulation, court order, or lawful governmental request
• To protect the rights, safety, security, and integrity of users, the institution, or the App
• In connection with a merger, acquisition, or organizational transfer, subject to continued data protection

11Children's privacy

• The App may be used by students, including minors, only under the control of an educational institution and/or parents/guardians as required by law
• We do not knowingly collect personal or biometric data from children for commercial advertising
• Institutions must obtain any required parental/guardian consent and notices before enrolling minors for face biometric attendance
• If a minor's data was collected without required authorization, contact us and we will take appropriate steps with the institution to delete or restrict such data where required

12Your rights and choices

Subject to applicable law and institutional policy, you may have the right to:

• Request access to personal data held about you
• Request correction of inaccurate data
• Request deletion of account data and/or face enrollment data
• Withdraw consent for biometric processing (which may disable face attendance features)
• Request restriction of processing in certain circumstances
• Lodge a complaint with a data protection authority where applicable

To exercise these rights, contact your institution administrator or email us directly.

You can also revoke camera permission in device settings, stop using face attendance features, or request account deactivation through your institution.

13International / cross-border processing

Data may be processed on servers used to operate campusapp.in. If the App is accessed from another country, information may be transferred to and processed in the country where the servers or institution systems are located. We take steps designed to ensure an appropriate level of protection consistent with this policy and applicable law.

14Third-party services and links

The App communicates with the Campus App backend at campusapp.in. This policy covers our App's handling of personal data. Institutional portals or third-party sites linked outside the App may have their own privacy policies.

15Data safety summary (for Google Play)

For Google Play Data safety disclosures, the App may collect and process:

• Personal info — name, email, phone number, address, user IDs, and related account fields
• Photos and videos — camera images captured for face enrollment / attendance, processed into biometric templates
• Biometric identifiers — face templates / embeddings used for attendance matching
• App activity — attendance actions and related in-app activity
• Device or other IDs — session identifiers needed for authentication

Purposes: app functionality (account management, face enrollment, attendance marking, reports), account management, and security / fraud prevention / integrity of attendance records.

16Changes to this policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top is revised whenever changes are made. Continued use of the App after an update means acceptance of the revised policy, except where additional consent is required by law for biometric or other sensitive processing.

17Contact us

For privacy questions, biometric data requests, or complaints:

18Play Store compliance notes

Before upload, confirm the following:

1. Host this Privacy Policy on a public HTTPS URL and paste that URL in Play Console.
2. Replace all bracketed placeholders with real contact and legal entity details.
3. In Play Console → App content → Data safety, declare Camera, Personal info, Photos/videos (if applicable), and Biometric data accurately.
4. In sensitive-permission / biometric declarations, state clearly that face data is used only for attendance verification.
5. If the App is used by students under 13 (or under the age of digital consent in your region), complete Families / Designed for Families and consent requirements correctly, or restrict distribution accordingly.
6. Do not claim face data is processed "only on device" if embeddings are uploaded to campusapp.in — this policy correctly discloses server-side matching.
7. Keep in-app permission rationale consistent with this policy: camera for face attendance / enrollment only.