EWUmate
Back to App
Security & Transparency

Privacy Policy

Last Updated: May 19, 2026
Scope: Mobile Application & Services

1Introduction & Scope

Welcome to EWUmate ("we", "our", or "us"). We are committed to protecting your privacy and ensuring you have a safe, transparent, and seamless experience while using our mobile application ("EWUmate App") and associated web services.

EWUmate is an independent utility application designed specifically for the students of East West University (EWU). It provides local and synchronized academic tools including schedule synchronization, routine planning, CGPA calculators, faculty directories, and class status notifications. This Privacy Policy details how we collect, process, secure, and manage your personal data when you interact with our platform.

By downloading, registering, or using the EWUmate App, you consent to the processing of your data as outlined in this Privacy Policy. If you do not agree with any terms herein, please refrain from using our services.

2Information We Collect

To deliver our core features (like portal routine syncing and automatic calendar building), we collect and process different categories of information. Below is a detailed breakdown:

Account Profiles
When you register, we collect your full name, student email, and academic department details. This helps personalize your dashboard and enable account backups.
Academic Data
We process your enrolled courses, section numbers, academic calendars, completed courses, semester marks, and grades. This data is required to render your class schedules and calculate CGPA.
Portal Sync Credentials
If you opt to sync your schedule directly from the official EWU Portal, you input your portal credentials (ID and Password). These credentials are processed locally and securely to query schedules and are never stored in plain text or uploaded to external servers.
App Usage Metrics
We gather non-personally identifiable diagnostic logs, device OS versions, and app version numbers to resolve performance issues and crash alerts.
Important Credential Safety: When using the Portal Sync feature, your university credentials are used strictly for local-first synchronization. The app establishes a direct, secure connection to the official East West University portal, and your password remains confidential to your local device sandbox.

3How We Use Your Data

We process your data strictly to maintain, analyze, and optimize EWUmate's academic utility features. Specifically, your data is used to:

  • Build Academic Calendars: Convert raw course listings into unified weekly and daily schedules.
  • CGPA & Grade Calculations: Offer dynamic, simulated trackers that compute cumulative grade point averages (CGPA) securely based on your input.
  • Send Cancelled Class Alerts: Dispatch real-time push notifications using Firebase Cloud Messaging (FCM) when a registered faculty cancels a class or alters timings.
  • Synchronize Settings: Keep your chosen themes, favorites, and cached profiles unified across different devices when logged in.

4Data Sharing & Third-Party Services

Your trust is paramount. We do not sell, rent, or trade your personal information to third parties. However, we utilize secure cloud partners to support application backend capabilities:

  1. Supabase: Our primary hosting provider for databases, administrative consoles, and session handling. Data sent to Supabase is securely encrypted in transit and at rest, guarded by strict Row Level Security (RLS) policies.
  2. Firebase Cloud Messaging (FCM): Used to securely issue push notification tokens and dispatch class schedule updates directly to your phone.
  3. Local Browser Storage & Secure Storage: We cache session keys and active tokens locally inside your device using standard keychains to prevent unauthorized logins.

5How We Protect Your Data

EWUmate enforces rigorous, state-of-the-art security measures to safeguard user data against unauthorized access, loss, or disclosure:

  • Transport Layer Security (TLS): All communications between the mobile application and backend services (such as Supabase edge functions) are encrypted using standard HTTPS/WSS protocols.
  • Local Encryption: Highly sensitive items (like credentials or user tokens) are stored in your device's operating-system-level secure container (KeyStore for Android, Keychain for iOS).
  • Database Access Controls: Supabase database tables restrict data reading and modification strictly through Row Level Security (RLS), ensuring that only you can read or modify your own profile summaries.

6Your Rights & Data Controls

We believe that you should have absolute control over your academic data. We provide the following native privacy controls within the EWUmate App Settings page:

  • Data Export & Access: You can view all information cached on your profile or downloaded schedules directly inside the app dashboards.
  • Clear Local Cache: You can instantly purge all local caches, offline schedules, and session logs on your device by using the "Clear Cache" button inside the app.
  • Full Account Deletion: If you wish to delete your account permanently, you can select the "Delete Account" option. This action will immediately and irrevocably delete your profile, credentials, enrolled courses, and summaries from our Supabase servers.

7Children's Privacy

The EWUmate App is built specifically for adult university students enrolled at East West University. We do not knowingly solicit or collect personal information from individuals under the age of 13. If we discover that a child under 13 has registered or provided personal information, we will immediately purge the record from our active databases.

8Changes to this Privacy Policy

We reserve the right to modify or update this Privacy Policy at any time to reflect software additions, security updates, or policy enhancements. When updates are published:

  1. We will adjust the "Last Updated" timestamp at the very top of this page.
  2. For major modifications, we will post an in-app notice or deliver an announcement email to ensure you are aware of how the updates affect your active sessions.

We encourage you to periodically review this page to remain informed about our modern security frameworks.

9Contact & Support Channels

If you have any suggestions, concerns, or queries regarding this policy, or if you wish to report a security vulnerability, please contact our administrative team through the following official channels:

Support Email
support@ewumate.pro.bd
Administration
admin@ewumate.pro.bd
GitHub Repository
github.com/rxxeron/EWUmate