ESDANA Privacy Policy — Android App

ESDANA is a private alumni network for former students, teachers, and community members of BAF Shaheen College. You need an account to use the application, and each new registration is verified and approved by an ESDANA maintainer before access is granted.

The app is not intended for children under 13 years of age, and we do not knowingly collect personal information from children.

Account and Profile Information

• Required: Full name, email address, password, batch number, and school house.
• Optional Profile Data: Phone number, username, gender, date of birth, current city, physical address, short biography, profile avatar photo, LinkedIn profile URL, and other social media links.
• Professional & Academic History: Work experience, job titles, companies, degrees, and institutions (if you choose to add them under Career & Education).

Content You Create

• Posts, comments, replies, and attached photo attachments.
• Events you organize, your attendance status ("Going" or "Interested"), and notes left for event organizers.
• Job postings, bookmarked jobs, classified listings, and contact details chosen for classified ads.
• Donation pledges: the campaign cause, pledged amount, optional message, and anonymous preference flag.
• Connection requests you send, accept, or decline.
• Reports you submit regarding inappropriate posts or content.
• Sponsorship inquiries: name, company, email, phone number, and message.

• Push Notification Token: Issued through Google Firebase Cloud Messaging (FCM) to deliver notifications to your device.
• Device Identifier & Name: Stored so you can recognize and manage your active signed-in sessions.
• Time Zone: Used to display event schedules accurately in your local time and respect notification quiet hours.
• Activity Status: Online indicator and viewed posts tracking (post authors can see verified member viewers).
• Standard Server Logs: Timestamp of requests, endpoint URLs, and IP address for diagnostic and security audits.

The ESDANA Android app requests minimal runtime permissions:

• Internet & Network State (INTERNET, ACCESS_NETWORK_STATE): Required to communicate securely with the ESDANA server.
• Notifications (POST_NOTIFICATIONS): On Android 13 (API 33) and above, runtime permission is requested to show alerts for connection requests, replies, and event reminders. You can refuse and still use all core app features.
• Vibration (VIBRATE): Used for notification alert feedback.
• Camera & Photo Picker: The app does not hold broad storage permissions (READ_EXTERNAL_STORAGE / MANAGE_EXTERNAL_STORAGE). When attaching a photo, the native Android Photo Picker or Camera opens, and only the single photo you explicitly select is shared. Photos are compressed on your phone before upload.

You can manage permissions at any time via Android Settings > Apps > ESDANA > Permissions.

• To authenticate your session and secure your account.
• To display your profile, posts, and activities to fellow verified members.
• To operate community features: alumni directory, event registrations, job postings, classifieds, photo albums, donation campaigns, and house leaderboards.
• To send push alerts for interactions you have enabled.
• To allow ESDANA maintainers to review membership applications and moderate reported content.
• To troubleshoot technical errors, maintain infrastructure integrity, and prevent spam or abuse.

We never sell, rent, or monetize your personal data.

Other verified alumni can see your name, photo, batch, house, profile details, and posts according to your chosen audience (Public, Connections, or Only Me).

Granular Privacy Controls (In-App Settings > Privacy)

• Control who sees your phone number, email address, and address (Public, Batchmates, Connections, or Private).
• Lock your profile from non-connections.
• Hide your birthday from batchmates.

Donations, Links & Maintainers

• Donation Privacy: Pledges display your name on the supporter list unless you check "Keep my name private" (listed as "Anonymous").
• Public Web Links: When sharing a post, event, or job externally, the link opens a public web summary page.
• Maintainers: Authorized administrators can view registration requests, reported posts, and verification documents.
• Third-Party Infrastructure: Google Firebase delivers push notifications. Cloud hosting servers store encrypted data. We may disclose data only if required by applicable law.

The ESDANA Android app does not process financial transactions directly.

Donations and paid event fees are recorded as non-binding pledges. You fulfill payments externally using standard manual methods (such as Zelle, bKash, wire transfer, or check) as instructed by the organizer. The app never asks for or stores credit card numbers, debit cards, or bank credentials.

• Auth Token: Stored securely in encrypted shared preferences backed by the Android Keystore.
• App Preferences: Language choice (English / বাংলা), text size preference, and dark/light color theme.
• Image Cache: Temporary cache of viewed profile photos and media to reduce mobile data usage.

Signing out clears the authentication token. Uninstalling the app completely removes all locally cached data from your device.

If you are unable to access the app, you may email [email protected] from your registered email address with your batch and house details, and our administrative team will process the deletion.

Anonymized statistical records (such as historical donation totals required for non-profit accounting) may be retained in a format that cannot identify you.

• View & Edit Profile: Menu > Settings > Edit my profile.
• Configure Privacy: Menu > Settings > Privacy.
• Notification Alerts & Quiet Hours: Menu > Settings > Notifications.
• Remote Session Sign-Out: Menu > Settings > Sign out everywhere.
• Data Export or Inquiries: Contact [email protected].

All communication between the Android app and our cloud API is protected using modern TLS/HTTPS encryption. Passwords are hashed with strong one-way cryptographic algorithms and never stored in plain text. Data is hosted on secured infrastructure located in North America.

We may update this Privacy Policy periodically. Substantial modifications will be communicated via in-app notification.