1. Introduction & Overview

This Privacy Policy explains how The University of Lahore (UOL) ("we," "our," or "us") collects, uses, stores, and protects user data when you use the UOL QR Attendance mobile and web application.

We are committed to maintaining the confidentiality and integrity of your sensitive personal, educational, and device data in strict compliance with Google Play Developer Policies and global data privacy standards.

2. Information We Collect

To provide secure attendance marking and educational management features, our app collects the following categories of data:

A. Personal & Academic Information

• User Identity & Credentials

  Full name, Student ID / Employee ID (Username), University email address, Department, and Faculty affiliation.

• Role & Enrollment Data

  Academic course enrollments, class section assignments, timetable schedules, and mentorship associations.

B. Device & Technical Data (Sensitive Data)

• Hardware Device Identifier (Device ID)

  Unique device ID used for security and fraud prevention (device binding) to ensure attendance is submitted only from registered personal devices.

• Push Notification Token (FCM)

  Firebase Cloud Messaging token to deliver instant notifications regarding attendance updates, class changes, and mentorship meetings.

• Network & Technical Logs

  IP address, device model, operating system version, and system timestamp at the time of QR code scanning.

C. Device Permissions (Camera & Media)

Camera Access: The app requests camera permission solely to scan dynamic QR codes displayed by course instructors during class sessions. We do not capture, record, save, or transmit photos, videos, or image data to any server.

3. How We Use Your Data

We process your information strictly for legitimate academic and administrative purposes:

• • Marking, calculating, and maintaining official student class attendance records.
• • Enforcing single-device check-in verification to prevent proxy attendance.
• • Sending push notifications regarding attendance alerts, class announcements, and mentorship schedules.
• • Generating academic performance and attendance analytics for university administration.

4. Data Sharing & Third-Party Disclosure

We DO NOT sell, rent, trade, or monetize your personal or device data under any circumstances.

Your information is shared only in the following limited contexts:

• Internal University Systems

  Authorized faculty members and university administrators access attendance reports via internal secure portals.

• Infrastructure Service Providers

  Google Firebase (FCM) is used exclusively for secure push notification transmission.

5. Data Security & Retention

We implement industry-standard encryption protocols (HTTPS / TLS) for all data in transit. Sensitive stored data is housed within secure University of Lahore server environments with strict role-based access control.

Attendance and user records are retained for the duration of the student or staff member's enrollment or employment at The University of Lahore, plus any retention period mandated by academic regulations.

6. Your Rights & Data Management

Students and staff members have the right to view their recorded attendance data within the app dashboard. For data correction requests, device unbinding, or account deletion inquiries, users can contact the University IT Helpdesk.

7. Contact & Privacy Inquiries

If you have questions or concerns regarding this Privacy Policy or how your data is handled, please contact: