Legal & Trust

Privacy Policy

Last updated: 13 October 2026 · Applies to the AttendMetric web platform & mobile app

01Information We Collect

Account information. AttendMetric accounts are created for you by your institution's IT-Admin — either individually or via bulk CSV import — not through self-signup. We store your name, email address, password (stored hashed, never in plain text), role (Student, Professor, IT-Admin, or Admin), and an optional profile photo.

Attendance & academic records. Class sessions, your assigned seat and check-in time for each session, timetable and classroom assignments, marks entered by professors, course outcome (CO) and program outcome (PO) attainment scores, semester results, SGPA/CGPA, and hall-ticket eligibility status.

Accreditation & institutional data (NBA / NAAC / NIRF). Where your institution enables these modules: course-exit survey responses, curriculum feedback (see below), evidence documents uploaded for NAAC criteria, IQAC records, faculty qualifications and publications, and — for students — outreach & inclusivity fields your IT-Admin may record for NIRF reporting: gender, social category, domicile state, and disability status. These fields are sensitive; only your institution's IT-Admin can view or edit individual records, and only aggregated percentages (never your individual entry) appear on any dashboard.

Placement & graduation outcome data. If your institution records placement outcomes, this includes employment status, employer name, salary package, or higher-studies institute, entered by your IT-Admin.

Curriculum feedback from non-account holders. Some curriculum feedback forms can be shared with alumni or employers who do not have an AttendMetric account, via a one-time link. Their responses are recorded against that link, not against any personal profile we otherwise hold.

Support & communication data. Helpdesk tickets and any file attachments you submit, team messages, assignment submissions and materials shared within a course team, broadcast announcements sent by your institution, and in-app notifications.

Device & push-notification data. Your device's Expo push token, so we can deliver notifications about attendance, results, and announcements. You can revoke this at any time by disabling notifications in your device settings, which unregisters your token on logout. When you check in to a session we also record a device identifier, which is used to flag one device checking in for several students.

Usage, security & diagnostic data. App version, login timestamps, your IP address (used for rate limiting and security), audit logs of administrative and security actions, and error logs used to keep the platform reliable. Audit logs are kept for a configurable period, 180 days by default.

02How We Use Your Information

We use your information to operate your institution's attendance, timetable, assessment, and accreditation records; to verify seat-level check-ins against the live classroom map; to compute CO/PO attainment, hall-ticket eligibility, and NIRF/NAAC metrics; to deliver notifications and respond to support requests; and to help your institution meet its own accreditation and reporting obligations. We do not sell your personal data, and we do not use it for advertising.

03Who We Share Data With

We share data only with the service providers needed to run AttendMetric:

  • Cloud hosting providers — to run the application and store the database.
  • UploadThing — file storage for profile photos, evidence documents, helpdesk attachments, and team materials you or your institution upload.
  • Upstash (Redis) — powers real-time features such as the live seat map and short-lived rate-limit/session data. It does not permanently store your personal records.
  • Email delivery provider — to send password-reset codes, notifications, and support correspondence.
  • Expo / push notification services (Google FCM, Apple APNs) — to deliver push notifications to your device.
  • Google Analytics — only if you accept analytics on our website, to understand how visitors find us and which features are used. It receives anonymized usage events (for example "login succeeded" with your role) and never your name, email, ID or any attendance, marks or other academic data. Signed-in pages are not tracked page by page, IP anonymization is on, and Google signals and ad personalization are off. You can decline in the banner at any time.

Within your institution, your data is visible to authorized roles only: professors see attendance/marks for their own sections, IT-Admins see records for their college, and platform Admins provide cross-institution support. We do not share your data with other institutions or with any third party for marketing purposes.

04Data Retention

We retain your data for as long as your account is active with your institution. Academic records — attendance, marks, and results — are typically retained for the duration required by your institution's own academic record-keeping policy, since these form part of the official record your college relies on for accreditation and hall-ticket eligibility. Because AttendMetric accounts are institution-managed, your institution's IT-Admin determines when a student or professor record is deactivated or removed.

05Your Rights & Account Deletion

You can review your own profile, attendance, marks, and results at any time by signing in. Because accounts are provisioned by your institution rather than self-registered, account deletion works differently from a typical consumer app — see our Delete Account page for the full step-by-step process. In short:

  • Students & Professors: contact your institution's IT-Admin, who can deactivate or remove your account and personal data from within the IT-Admin console.
  • IT-Admins & institutions: contact us at attendmetric@gmail.com to request deletion of an institution's data.
  • External curriculum-feedback respondents (alumni/employers without an account) can request their submitted response be removed by emailing us with the form link they received.

Academic records tied to a completed semester may be retained by your institution for accreditation and record-keeping purposes even after an individual account is deactivated.

06Cookies (Web App)

The AttendMetric website uses essential local storage to keep you signed in and remember your preferences. With your consent we also use Google Analytics for anonymous usage statistics. We do not use advertising cookies or ad personalization. See our Cookie Policy for the full breakdown of what's stored and why.

07Children's Privacy

AttendMetric is built for higher-education institutions and is not directed at children under 13. Student accounts are provisioned by institutions for their enrolled students.

08Security

We use industry-standard measures — encrypted connections (HTTPS/TLS), hashed passwords, role-based access control, and college-scoped data isolation — to protect your data. No system is 100% secure, but we work continuously to keep your information safe.

09App Permissions (Android & iOS)

The AttendMetric mobile app requests the following device permissions. Each is used only for the stated purpose, and you can review or revoke them at any time in your device settings.

  • Notifications: to alert you about session start/end, results, hall ticket status, and institutional announcements. You can disable these at any time.
  • Photo library: to let you choose a profile picture. The app never takes photos, and you pick each image yourself.
  • File / document access: to let you pick an existing file from your device, such as a NAAC evidence document, a team attachment, or a CSV file to import marks.

The AttendMetric app does not request camera, microphone, precise location, or contacts access.

10Google Play Data Safety

In compliance with Google Play's Data Safety requirements, here is a summary of how we handle your data:

  • Data collected: name, email address, academic records (attendance, marks, results), profile photo, push-notification token, device identifier, and app diagnostics.
  • Data shared with third parties: none, beyond the infrastructure providers listed in Section 3 (hosting, file storage, real-time data, email, and push delivery), all under contractual confidentiality. We do not sell any personal data.
  • Data encryption: all data is encrypted in transit (HTTPS/TLS). Account passwords are hashed and never stored in plain text.
  • Data deletion: request via our Delete Account page — see Section 5 for details.
  • Children: AttendMetric is a higher-education platform and is not directed at children under 13.

11Changes to This Policy

We may update this policy from time to time. Material changes will be reflected by updating the "Last updated" date above.

12Contact Us

Questions about this policy or your data? Reach us at attendmetric@gmail.com.