Privacy Policy

1. Information we collect

When you use EETFP-MPG, we may collect:

• Account information — phone number, name, student identifier, institute affiliation, and password (stored securely on our servers).
• Attendance data — check-in times, lesson codes, attendance status (present/absent), and related academic records.
• Location data — GPS coordinates collected only when you check in to verify that you are on campus. Location is not tracked continuously in the background.
• Face data — when you register your face and when you check in, the app takes a few photos of your face. They are sent over an encrypted connection to our face-verification service, which checks that a live person is in front of the camera and turns the photos into a face template (a series of numbers). The photos themselves are not stored, on your phone or on our servers. Only the template from your registration is kept, to confirm at each check-in that it is you.
• Notification data — if you allow notifications, the phone you last signed in on is registered to receive your institute's messages: a notification token issued by Google Firebase Cloud Messaging, an installation identifier created by the app, the platform (Android or iOS), the app version and whether notifications are allowed. When a message reaches your phone, the app tells our servers it was received. This data is used only to deliver notifications, and is deleted when you sign out.
• Device information — basic technical data needed to operate the app (e.g. app version, operating system) for security and support.

2. How we use your information

We use collected information to:

• Authenticate you and manage your student account
• Record and display attendance for your classes
• Verify on-campus presence during QR check-in
• Confirm, by face verification, that the student checking in is the account holder
• Send you notifications from your institute (timetable changes and important information)
• Provide attendance history and statistics to you and authorized institute staff
• Maintain security, prevent fraud, and improve the service

3. App permissions

EETFP-MPG requests the following permissions on your device:

• Camera — to scan QR codes for attendance check-in, and to take the photos used for face verification (see section 1). Photos are not stored.
• Location — to confirm you are within your institute's campus boundary when checking in.
• Notifications — to show messages from your institute. Optional: everything else works if you refuse.
• Internet — to communicate securely with our servers.

You can deny permissions in your device settings, but some features (such as QR check-in) may not work without them.

4. Data sharing

We do not sell your personal information. Data may be shared only with:

• Your educational institute and authorized staff (administrators, managers) for attendance management
• Service providers that host or support our infrastructure, under strict confidentiality obligations: Google Cloud (servers and the face-verification service), Google Firebase Cloud Messaging (delivery of notifications) and Supabase (database)
• Authorities when required by applicable law

5. Data retention & security

Attendance and account data are retained for as long as needed to provide the service and meet your institute's academic and legal requirements. We use industry-standard measures including encrypted connections (HTTPS) and secure token-based authentication to protect your data.

Your face template is kept while your registration is valid. Your institute can delete it so that you register again, and you can ask your institute to delete it. Notification data is deleted when you sign out, or replaced when you sign in on another phone.

6. Your rights

Depending on your location, you may have the right to access, correct, or request deletion of your personal data. Contact your institute administrator or us using the details below to exercise these rights.

7. Children & students

EETFP-MPG is intended for students enrolled at participating institutes. Accounts are created or activated through your institute. If you believe a minor's data was collected improperly, please contact your institute administrator.

8. Changes to this policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page will reflect any changes. Continued use of the app after changes constitutes acceptance of the updated policy.

9. Contact

For privacy-related questions about EETFP-MPG, contact your institute administrator or reach us at: privacy@mpg.app