Privacy Policy – Portal (Student Portal)

Introduction

Welcome to Portal ("we", "us", or "the App"), a student portal application developed by LexiSyncs Team. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our mobile application.

By using Portal, you agree to the collection and use of information as described in this policy.

Information We Collect

When you sign in and use Portal, the following information is retrieved from your university's student portal system:

🔐 Authentication Credentials

Your username and password are used solely to authenticate you with the university portal. We do not store your password on your device or on our servers after authentication.

👤 Personal Profile Information

Full name and father's name
Student ID, registration number, and form number
Email address
Student CNIC and father's CNIC
Campus name and study program
Study status (e.g. enrolled, graduated)
Profile photograph URL

📊 Academic Records

CGPA, percentage, and credit hours (earned and required)
Semester-wise GPA, courses, grades, and marks (mid, sessional, practical, final)
Academic history including previous degrees, institutions, and examination results
Required GPA for probation clearance

How We Use Your Information

Your information is used exclusively to:

Authenticate you with the university portal system
Display your student profile and academic records within the App
Cache your data locally for offline access and faster loading

We do not use your data for advertising, marketing, analytics, profiling, or any purpose other than providing you with access to your own academic information.

Data Storage & Security

We take your data security seriously and employ the following measures:

📱 On-Device Storage Local Only

Authentication tokens (access and refresh tokens) are stored using Expo Secure Store, which leverages the iOS Keychain and Android Keystore for hardware-backed encryption.
Profile and academic data are cached in a local SQLite database with SQLCipher encryption (on iOS) for offline access. This data stays on your device.

🌐 Network Communication

All communication with our servers is performed over HTTPS (encrypted connections).
API requests are authenticated using Bearer tokens with automatic token refresh for seamless and secure sessions.

🔒 Biometric Protection

On supported devices, the App may use Face ID or biometric authentication to protect access to securely stored credentials.

Data Sharing

We do not sell, rent, trade, or share your personal information with any third parties. Your data is transmitted only between your device and the university portal backend (portal.lexisync.work) for the purpose of retrieving your academic information.

Data Retention & Deletion

Your data is retained on your device only while you are logged in. When you log out:

All authentication tokens are permanently deleted from secure storage
All cached profile and academic data is cleared from the local database
All in-memory state and query caches are purged

After logout, no personal data remains on your device. You may also uninstall the App at any time to remove all associated data.

Children's Privacy

Portal is designed for university students. We do not knowingly collect information from children under the age of 13. If you believe a child has provided us with personal information, please contact us so we can take appropriate action.

Your Rights

You have the right to:

Access your personal data displayed within the App
Delete all locally stored data by logging out or uninstalling the App
Withdraw consent by ceasing to use the App at any time

Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be reflected on this page with an updated "Last updated" date. We encourage you to review this policy periodically.

Contact Us

If you have any questions or concerns about this Privacy Policy or how your data is handled, please contact us:

Developer: Lexisync
Email: jawadahmatt@gmail.com
Website: uoel.student.edu.pk