Effective Date: January 2026

At UNIQR, a Student Attendance Management System built by students, for students, we are committed to protecting and respecting your privacy. This system was developed by CASCSC Officers — Keith Renz D. Romblon and John Rave Arizobal — exclusively for the College of Computing and Information Technology (CCIT) and College of Business, Tourism and Economics (CBTE). This Privacy Policy explains how we collect, use, store, and safeguard your personal information in compliance with the Data Privacy Act of 2012 (Republic Act No. 10173) of the Philippines.

1. Scope of This Policy

This Privacy Policy applies to all users of the UNIQR Student Attendance System, including students, student council officers, and administrators. By using UNIQR, you consent to the collection and processing of your personal data as described herein.

2. Information We Collect

We collect information necessary to provide attendance tracking and student management services:

2.1 Account Information:

• Full name, student ID number (UNIQR ID), and username
• College, course, year level, and section
• Email address and contact information
• Profile photograph (if uploaded)

2.2 Google Account Data:

• Google account identifier for authentication
• Google email address associated with your account
• Date and time of Google account linking

2.3 Attendance Records:

• Event attendance (date, time, event name, attendance status)
• Absence records and appeal submissions
• Sanction records and payment status

2.4 Uploaded Documents:

• Supporting documents for appeals (e.g., medical certificates)
• Profile pictures

2.5 Activity and Security Data:

• Login timestamps and session information
• IP addresses and browser information for security monitoring
• Activity logs for audit and troubleshooting purposes

3. Location Data

When you visit the UNIQR homepage, your browser may request permission to access your location. This is used solely to display local weather information for your area.

• Not stored – Location data remains in your browser only and is not saved on our servers
• Not shared – Your location is not transmitted to any third parties
• Optional – If you deny permission, weather defaults to the campus location (Cabitan, Mandaon)
• Cached locally – Your browser may cache location data for up to 10 minutes to reduce repeated permission requests

4. How We Use Your Information

Your personal data is processed for the following purposes:

• Account Management: To create and maintain your student account and verify your identity
• Attendance Tracking: To record and manage your attendance at events and activities
• Appeals Processing: To process and respond to absence appeals
• Sanctions Management: To track and manage sanctions or fines resulting from attendance violations
• Communication: To send important notifications, password reset emails, and system updates
• Security: To protect the system from unauthorized access and investigate potential security incidents
• Improvement: To analyze usage patterns and improve system functionality

5. Data Sharing and Disclosure

We only share your personal data when necessary:

• Student Council and Administration: Attendance records and appeal information are accessible to authorized officers and administrators
• Email Services: Your email address may be shared with our email service provider to send notifications
• Google (Authentication): Basic profile information is exchanged with Google during the sign-in process
• Legal Requirements: We may disclose data when required by law, court order, or government regulation

We do not sell, rent, or trade your personal information to third parties for marketing purposes.

6. Data Security Measures

We implement reasonable security measures to protect your personal information:

• Passwords are encrypted using industry-standard hashing algorithms
• Session tokens are securely generated and validated
• Login attempts are rate-limited to prevent brute force attacks
• HTTPS encryption protects data transmission
• Activity logging enables detection of suspicious behavior
• Regular security reviews and updates are performed

While we take reasonable precautions, no system is completely secure. If you believe your account has been compromised, report it immediately to the Student Council or system administrators.

7. Cookies and Session Management

UNIQR uses cookies to:

• Session Cookies: Keep you logged in while using the system
• Remember Me: If selected, a secure cookie allows automatic sign-in for up to 30 days
• Preferences: Store your display preferences (e.g., dark mode settings)

These cookies are essential for system functionality. Disabling cookies may prevent you from using certain features.

8. Data Retention

Your personal data is retained as follows:

• Account Data: Retained while your account is active and for a reasonable period after graduation or account deactivation
• Attendance Records: Maintained per academic period and retained according to institutional records policies
• Security Logs: Retained for a limited period for security and audit purposes
• Uploaded Documents: Retained as long as necessary to process appeals, then archived or deleted

9. Your Rights Under the Data Privacy Act

Under Republic Act No. 10173 (Data Privacy Act of 2012), you have the following rights:

• Right to be Informed: To know how your personal data is being collected and processed
• Right to Access: To request access to your personal data held by UNIQR
• Right to Rectification: To request correction of inaccurate or incomplete personal data
• Right to Erasure: To request deletion of your personal data, subject to legal and operational requirements
• Right to Object: To object to the processing of your personal data in certain circumstances
• Right to Data Portability: To receive your personal data in a structured, commonly used format
• Right to File a Complaint: To lodge a complaint with the National Privacy Commission (NPC) if you believe your data privacy rights have been violated

To exercise any of these rights, please contact us using the information provided below.

10. Updates to This Policy

This Privacy Policy may be updated periodically to reflect changes in our practices, services, or applicable laws. The updated policy will be posted on this page with a revised effective date. We encourage you to review this policy periodically.

11. Contact Information

For privacy-related questions, requests to access or correct your data, or to report a concern, please contact us:

• Official Facebook Page: facebook.com/UNIQROFFICIAL
• Student Council Office: CCIT / CBTE Student Council (CASCSC)

You may also contact the National Privacy Commission (NPC) of the Philippines for guidance on your rights under the Data Privacy Act.