Privacy policy

UOP Attendance · University of Peradeniya, Faculty of Engineering · Last updated: 2026-08-19

UOP Attendance is a lecture-attendance app for University of Peradeniya, Faculty of Engineering. This page explains what information the app collects, how it is used, and how you can request that your data be deleted.

Information we collect

• Google account information — when you sign in with Google, we receive your name, email address, and a stable Google account identifier. We do not receive your Google password.
• Phone number — optionally, for lecturer/staff directory records (entered by an administrator, not required for students).
• Attendance records — the course, lecture session, date, and time you recorded attendance, whether it was accepted outright or is awaiting your lecturer's review, and the method used (Bluetooth proximity, GPS geofence, or a lecturer-provided attendance code).
• Location information — every session is verified by GPS alongside Bluetooth, so precise location fixes are processed during the short (90-second) verification window whenever you check in. Intermediate and rejected fixes are held only in server memory for that attempt and are never written to the database. When attendance is accepted, the resulting averaged position, its contributing-fix count, and its distance from the lecture building are stored with the attendance record for academic-integrity auditing.
• Bluetooth tokens — short-lived rotating codes used only to verify physical presence in a classroom during attendance. These are not personal data and automatically expire.

How we use this information

Solely to operate the app: authenticating you, determining your role (student, lecturer, or admin), recording and reporting lecture attendance, and academic record-keeping for University of Peradeniya, Faculty of Engineering.

Sharing

We do not sell or share your information with advertisers or data brokers. Google is used only as the sign-in provider (Google OAuth); no attendance or profile data is sent to Google or any other third party.

Data retention

Account and attendance records, including an accepted GPS centroid when GPS was used, are retained for academic record-keeping while your account is active. Bluetooth tokens, manual codes, and temporary location fixes are short-lived and are removed or invalidated when their session/window ends.

Your rights

You can request a copy of your data or request that your account and associated attendance records be deleted at any time. See our account deletion page for instructions.

Contact

Questions about this policy or your data can be sent to udayakavindadev@gmail.com.