FlexPrime — Privacy Policy

Minimal

What we store

When you log in, FlexPrime generates an anonymized one-way hash of your student info and sends it to our backend (Supabase) — purely to count active users.

Two counters (login and refresh) are also stored per hash. That's it.

Your password is never stored, logged, or transmitted anywhere except the official FAST portal during login.

How it works

Authentication

Login happens entirely inside the official FAST portal page rendered within the app. Your credentials are entered directly into the portal's own form — FlexPrime never sees, stores, or transmits your password.

After authentication, an anonymized hash (not your password) is generated to verify your identity with our backend.

Password is sent only to the official FAST portal
Password is never saved to the device or our servers
Auth hash is one-way — cannot be reversed to reveal your info
Session tokens expire naturally

Local data

On-device storage

All academic data — marks, attendance, timetable, preferences — is cached locally on your device. This data never leaves your phone. Clearing app data or uninstalling removes everything.

Analytics

What we track

FlexPrime tracks exactly two actions per user: login count and refresh count.

These are used solely to:

Display aggregate statistics on the landing page (e.g. "345+ users")
Understand overall app engagement (no individual tracking)
Improve app performance based on usage patterns

No analytics SDKs, no crash reporters, no ad networks, no session replays, no location tracking, no device fingerprinting.

The two counters are incremented via a secure RPC call and cannot be tied back to you personally beyond your roll number.

Third parties

External services

FlexPrime communicates with three external services, all necessary for core functionality:

FAST portal — the official university system, accessed only during login and data refresh
Supabase — our minimal backend for user registration and anonymous usage counts. Stores only the data listed above
GitHub — used to check for app updates (configurable in settings)

Your rights

Data deletion & transparency

You can request deletion of your profile data at any time by emailing flexprime.dev@gmail.com. Your data will be removed from our backend within 7 days.