Privacy Policy
Uni Hub is an independent student project. It is not affiliated with, endorsed by, or connected to any specific university, nor with Moodle Pty Ltd. This policy explains what information the app handles, why, and how it is stored.
1. Who we are
Uni Hub ("the app", "we", "us") is maintained by Mohammed Ragheb. You can reach us at officehours@uni-hub.app.
2. Information the app handles
- Your university login credentials. You enter these so the app can sign in to your institution's learning management system (LMS) on your behalf. Credentials are stored only on your device, in encrypted local storage, and are transmitted only to your institution's own servers to authenticate you.
- Academic information from your LMS. Once signed in, the app retrieves data such as your courses, class schedule, grades, assignments and announcements, and caches it on your device so it is available quickly and offline.
- App settings. Your preferences (such as theme and language) are stored locally on your device.
- Push notifications. For students at the American University of Iraq, Sulaimani (AUIS), the app uses Firebase Cloud Messaging (a service of Google LLC) to deliver announcements — for example campus-wide notices, or notices for your current term, your enrolled courses, your intake year, your academic level and your major/department. When notifications are enabled (on by default; the on/off switch is in Settings → Notifications), the app registers a device notification token with Google and subscribes your device to interest "topics". These topics are computed on your device from your academic record; no personal data, grades or financial information is ever included in a notification, or sent to Google beyond the device token and the topic names. Turning notifications off unsubscribes your device and deletes the token.
- On-device reminders. The app also schedules local class and assignment-deadline reminders using your device's notification system. These are generated and displayed entirely on your device and are never transmitted.
- Approximate location (optional). During onboarding the app may request your coarse location once, solely to sort the list of universities by nearest campus. It is not stored or transmitted.
- Device time zone. The app reads your device's time zone so that on-device reminders fire at the correct local time.
- Anonymous usage statistics. The app uses Firebase Analytics (a service of Google LLC) to count which screens and features are used — for example how many devices opened the schedule or signed in with Google — so we can decide what to build next and show the university that the app is used. Events carry no name, student ID, email, grades or anything you typed. Google assigns the app a random installation identifier on your device; we never attach your account to it. The only descriptive properties sent are your institution, your theme and whether notifications are on. You can turn this off at any time in Settings → Share anonymous usage data; the switch stops collection immediately.
- Event tickets (AUIS). When you order a ticket for a campus event, the app sends your email address and the attendee name to our ticketing server so the organiser can issue and check the ticket. This server is operated by us (see section 4) and is the only place where we, rather than your institution, hold information about you.
- Requests you submit to your university (AUIS). If you send an excused-absence request from the app, what you enter and any files you attach go directly to the Dean of Students Office's own request site, exactly as if you had used that website. We do not receive a copy; the app keeps only the request number and date on your device.
-
Crash and error reports. The app uses Sentry (a service
provided by Functional Software, Inc.) to collect diagnostic information
when something goes wrong — such as the error and stack trace, your
device model, operating system version and app version — so we can find
and fix bugs. On production builds we enable additional diagnostic
context (Sentry's
sendDefaultPiioption), which may attach identifiers such as your IP address and a reference to your session, and may include a screenshot and the screen layout captured at the moment of an error. This is used only for debugging.
3. How the app uses this information
- To sign you in to your institution's LMS and show your academic data.
- To keep your information available quickly and offline on your device.
- To remember your in-app preferences.
- To diagnose and fix crashes and errors.
- To understand, in aggregate and anonymously, which features are used.
- To issue and check event tickets you order.
We do not sell your personal information, and we do not use it for advertising.
4. Where your data is stored
Your credentials, cached academic data and settings live on your device in encrypted local storage. Your credentials are sent only to your institution's servers in order to log you in. The app's own developer does not receive or store your university password. Your credentials and academic data are never sent to or stored by us — they stay on your device and go only to your institution's servers. The one server we do operate is the event-ticketing server for AUIS (tickets.uni-hub.app, hosted in Germany); it holds only the ticket orders described in section 2. Anonymous usage statistics and crash reports are processed by Google and Sentry respectively, as described in section 5.
5. Third parties
The app interacts with these parties only as needed to function:
- Your university / its LMS provider. The app communicates directly with your institution's servers to authenticate you and fetch your data. Your institution's own privacy practices govern that data.
- Sentry (Functional Software, Inc.) processes the crash and error reports described above. See Sentry's privacy policy.
- Firebase Cloud Messaging (Google LLC) delivers push notifications to AUIS students, as described in section 2. Only your device notification token and topic names are processed. See Google's privacy and security information.
- Firebase Analytics (Google LLC) processes the anonymous usage statistics described in section 2. We do not use Google advertising features, do not share analytics data with other Google products, and keep event data for the shortest retention Google offers. See Google's privacy and security information.
- Pretix (open-source ticketing software, run on our own server) stores the ticket orders described in section 2. Event organisers see only the attendee names and emails for their own event.
- Google Play (Google LLC). On Android, the app uses Google Play's in-app update mechanism to offer app updates.
6. Security
Data stored on your device is held in encrypted local storage, and network requests use secure (HTTPS) connections. No method of storage or transmission is completely secure, so we cannot guarantee absolute security.
7. Keeping and deleting your data
Your data stays on your device until you remove it. Logging out clears your stored credentials and cached data, and uninstalling the app removes all locally stored information. Because your data is stored only on your device, uninstalling deletes it completely.
8. Children's privacy
Uni Hub is intended for university students and is not directed at children under 13. We do not knowingly collect information from children.
9. Changes to this policy
We may update this policy from time to time. Material changes will be reflected by the "Last updated" date above.
10. Contact
Questions about this policy? Email officehours@uni-hub.app.