Effective Date: January 1, 2026 · Last Updated: September 4, 2026
AttenDO ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains
how we collect, use, store, and protect your personal information when you use the AttenDO
attendance tracker application ("the Service") available at attendotracker.netlify.app and through the
AttenDO Android app (com.subha.attendo). This policy applies equally across all
platforms.
1. Information We Collect
1.1 Information You Provide
When you create an account and use AttenDO, we collect the following personal information:
Data Type
Purpose
Required
Email address
Account authentication, password recovery
Yes
Full name
Display name in the app
Yes (at sign-up)
Date of birth
Birthday greeting on the dashboard
No (optional)
Attendance records
Core attendance tracking functionality
Yes (for app function)
Timetable / subject data
Schedule management and attendance calculation
Yes (for app function)
Chat messages
AI chatbot queries processed by Google Gemini API
No (optional feature)
Uploaded timetable images
AI-powered timetable scanning via Google Gemini Vision API
No (optional feature)
1.2 Information Collected Automatically
We use Google Analytics (measurement ID: G-KRH6H1K32Q) to collect anonymized usage data, including:
Browser notification permission status (granted, denied, or default)
This data is collected in aggregate form and cannot be used to identify individual users.
2. How We Use Your Information
We use the collected information solely for the following purposes:
Providing the Service: Tracking your attendance, calculating statistics, managing
your timetable, and displaying your dashboard.
Authentication: Creating and managing your account via email/password or Google
Sign-In.
Personalization: Displaying birthday greetings and customized dashboard content.
AI-Powered Features: Processing your attendance data and chat messages through
Google's Gemini AI to provide intelligent chatbot responses. Processing uploaded timetable images
through Google's Gemini Vision AI for automated schedule extraction.
Communications: Sending a one-time welcome email upon account registration via
EmailJS.
Notifications: Sending browser push notifications for class reminders, attendance
threshold warnings, and daily attendance marking reminders (with your permission).
Service Improvement: Analyzing aggregate usage patterns to improve features and
user experience.
Data Synchronization: Syncing your attendance data across devices when signed in.
We do not use your personal information for advertising, profiling, or selling to third
parties.
Server-side AI chatbot and timetable scanning processing
Browser localStorage
Cached attendance data, preferences
Offline access and performance
3.2 Security Measures
We implement the following security measures to protect your data:
All data transmitted between your browser and our servers is encrypted via HTTPS/TLS.
Firebase Authentication handles credential storage using industry-standard security practices.
Firestore Security Rules restrict data access to authenticated users viewing only their own data.
We do not store passwords in plaintext — authentication is managed entirely by Firebase.
Serverless functions (AI chatbot and timetable scanning) are entirely stateless. Uploaded images and
chat messages exist only in function memory (RAM) during processing and are destroyed immediately
when the function completes. No images or chat content is persisted on our servers.
AI requests are authenticated server-side using Firebase auth tokens to prevent unauthorized
access.
3.3 AI Data Processing & Retention
When you use AI-powered features (chatbot or timetable scanning), your data is transmitted to Google's
Gemini API for processing. Google retains this data temporarily (typically 30 to 60 days) strictly for
automated abuse and safety monitoring, after which it is deleted. Google does not use this data to train
AI models. For more details, see Google's Gemini API Terms of Service.
4. Data Retention
Your personal data is retained as follows:
Active accounts: Data is retained for as long as your account is active.
Semester archives: Past semester data is retained in your account until you
manually delete it or request deletion.
Account deletion: Upon request, we will delete all your personal data from our
systems within 30 days.
localStorage: Browser-cached data can be cleared by you at any time through your
browser settings.
5. Third-Party Services
AttenDO uses the following third-party services that may process your data:
We do not sell, trade, or rent your personal information to any third party. Data shared
with the above services is limited to what is necessary for the Service to function.
6. Cookies & Local Storage
AttenDO uses the following client-side storage mechanisms:
localStorage: Used to cache your attendance data, timetable, and preferences for
offline access and faster loading. This data stays on your device and is not transmitted to third
parties.
Google Analytics cookies: Used to distinguish users and track anonymous session
data. You can opt out of Google Analytics by installing the Google Analytics
Opt-out Browser Add-on.
Firebase cookies: Used to maintain your authentication session.
Notification API: AttenDO may request your browser's permission to send push
notifications for class reminders and attendance alerts. You can revoke this permission at any time
through your browser settings. No notification data is transmitted to third parties.
7. Your Rights
You have the following rights regarding your personal data:
Access: You can view all your data within the app at any time (Dashboard,
Settings).
Export: You can export your attendance data in multiple formats — CSV,
PDF, or JSON — via Settings → Semester Management and
Settings → Data Management.
Correction: You can update your personal information through the app's settings.
Deletion: You can request complete deletion of your account and all associated data
by contacting us.
Data Portability: The JSON export provides your data in a portable,
machine-readable format. CSV and PDF exports provide human-readable attendance reports.
AttenDO is designed for students and is not specifically directed at children under the age of 13. We do
not knowingly collect personal information from children under 13. If you are a parent or guardian and
believe your child under 13 has provided us with personal information, please contact us at support.attendo@gmail.com, and we will promptly delete
such information.
9. International Users (GDPR)
If you are accessing AttenDO from the European Economic Area (EEA), United Kingdom, or other
jurisdictions with data protection laws, you have additional rights:
Legal basis for processing: We process your data based on your consent (provided at
account creation) and our legitimate interest in providing the Service.
Data transfers: Your data may be transferred to and processed in the United States
by Google LLC (Firebase, Analytics). These transfers are governed by Google's Standard Contractual
Clauses.
Right to withdraw consent: You may withdraw your consent at any time by deleting
your account.
Right to lodge a complaint: You have the right to lodge a complaint with your local
data protection authority.
10. Changes to This Policy
We may update this Privacy Policy from time to time. When we make significant changes, we will notify
users by updating the "Last Updated" date at the top of this page. We encourage you to review this
Privacy Policy periodically.
Continued use of the Service after changes constitutes acceptance of the updated policy.
11. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data,
please contact us: