Data Safety & Disclosures
Official Google Play Store Data Safety breakdown and prominent runtime permission disclosures for Gendemy.
1. Google Play Data Safety Summary
This table outlines how Gendemy answers each questionnaire category in the Google Play Console Data Safety section:
| Data Category | Collected? | Shared? | Encrypted in Transit? | Purpose / Justification |
|---|---|---|---|---|
| Personal Info (Name, Phone, Email) | Yes | No | Yes (TLS 1.3) | Account creation, authentication, role authorization |
| Financial Info (Fee dues & payments) | Yes | Payment gateway only | Yes (TLS 1.3) | Fee tracking, generating tax invoices, online fee settlement via Razorpay |
| Photos and Videos | No | No | — | Camera used only for live QR parsing; no images stored or uploaded |
| Location (Approximate / Precise) | Optional (Ephemeral) | No | Yes (TLS 1.3) | Single-point proximity check during attendance scan. Never tracked in background |
| Device or other IDs | Yes | Notification provider | Yes (TLS 1.3) | Push notification routing and secure session key storage |
2. Prominent Permission Disclosures
Google Play Developer Policy requires prominent disclosures before sensitive device permissions are requested. The following runtime disclosures appear in our app:
Camera Disclosure
Why needed: Scans QR codes on the classroom screen to mark student and faculty attendance instantly.
Guarantee: No photos, videos, or camera recordings are saved or uploaded.
Location Disclosure
Why needed: Checks that the user is inside the institute branch perimeter during check-in.
Guarantee: Queried once during check-in only; no continuous background tracking.
Notifications Disclosure
Why needed: Delivers critical updates including timetable substitutions, cancellations, and fee reminders.
Guarantee: You can mute alerts anytime in Android settings.
3. Security & Encryption Standards
Encryption in Transit: All network traffic uses TLS 1.3 with HTTPS to prevent interception.
Hardware-Backed Storage: On Android devices, tokens are stored in the Android Keystore using Expo SecureStore.
Account Deletion Mechanism: Users can request account and data deletion in-app or via our public deletion URL (gendemy.in/delete-account).