Privacy policy

1What this page covers

Campus Companion shows students their college records and helps them study. This page says what the application keeps about you, why, who can see it, and what you can do about it. It applies to students and to administrators.

2What is kept about you

• Your account. Your institutional login email, your name, whether you are a student or an administrator, and when you last logged in. Your password is kept only in a protected form (a BCrypt hash) that cannot be turned back into the password. Nobody, including an administrator, can read it.
• Your college record, entered by the college: roll number, branch, semester, section and admission year, and your attendance, marks and semester results.
• What you add yourself, all optional: a phone number, a short text about you, and a profile photo.
• What you do here. The study material you bookmark, and your quick tests: the questions you were given, your answers and your scores.
• Your coding accounts, only if you link them on the Portfolio page: the site and your username on GitHub, LeetCode, Codeforces, CodeChef, GeeksforGeeks or HackerRank, and the public data read from that profile: problems solved and by difficulty and topic, contest rating and rank, badges, the languages used, how many submissions you made on each day of the last year, and for GitHub your contributions by day, languages, stars, commits, pull requests, issues, followers and up to six public projects. One total a day is kept to draw your journey. The pictures of your badges are copied once from the site into the application, so your browser never loads them from the site. Nothing else from those sites is kept, and nothing is ever posted there.
• Your use of the AI assistant, as numbers only: how many requests you made, which tool you used, how long the texts were, and whether the request worked.
• Your chats with the Quick Assistant, the helper on the floating robot: the questions you type there and the answers it gives, so that you can read them again. Only your newest six chats are kept; older ones are deleted. Only you can read them, not an administrator, and you can delete a chat at any time. Nothing is stored when an answer fails.
• A security record. When marks, attendance, results, an account or a password are changed, the application records who changed what and when, and the network address the change came from. A password itself is never written into this record.

3What is not kept

• The text you send to the Explain, Summarize and practice-question tools of the AI assistant, and the answers they give, are not stored. If you want to keep an answer, copy it. (Quick Assistant chats are the exception described above.)
• A phone writes the place and time into the photos it takes. That information is removed before your profile photo is stored: the application redraws the picture and keeps only the new one.
• There is no advertising, no tracking of what you do on other sites, and no analytics service.

4Cookies and what is stored in your browser

The application uses two cookies, and both are needed for it to work. One keeps you logged in; it ends when you log out, or after 30 minutes without use. The other is a security token that protects the forms you send. Neither is used to follow you.

If you switch on "Reduce motion" in Settings, that choice is remembered in your browser. While you take a quick test, the test is remembered in the open tab so that reloading the page does not lose it.

5Who can see what

• You see your own record, and nobody else's. Another student cannot see your attendance, marks, results, tests, bookmarks, phone number or photo.
• If you switch on "Show me on the leaderboard", other students see your name, branch, semester, the coding sites you verified and your total of problems solved. They never see your usernames or roll number. It is off until you switch it on.
• Administrators see the coding portfolio of every student who linked an account, whether or not they chose to show on the leaderboard.
• Administrators of your college can see and correct student records, create and deactivate accounts, and reset a password. They cannot see a password.
• Nobody outside your college is given access.

6Where it is kept and who helps to run the service

• The database and the files (study material and profile photos) are kept with Supabase. The files are private: one can be opened only through a link that the application gives to a logged-in person and that stops working after five minutes.
• The application itself runs on a hosting service chosen by the college.
• When you use the AI assistant, the text you type or paste for that request (and, in a Quick Assistant chat, the earlier messages of that chat) is sent to an AI service so that it can write the answer. If you attach, capture or paste a picture in the Quick Assistant, the picture is sent with your question, after the application has redrawn it without the information a phone writes into a photo; it is used only to answer that question and is not stored by the application. An area capture is a picture of the part of this page you drag a rectangle over, so check the preview for personal information before you send it. Pictures you attach are checked and redrawn by the application and sent with your question; they are kept in the server's memory for up to two hours, not saved, and are not shared with other students. Your name, roll number, email address and records are never sent to it. That is why the assistant asks you not to paste personal information. While the assistant is in demo mode, no AI service is used at all.
• When you link a coding account, the application reads that account's public profile from the site itself: when you verify it, when you press Refresh, and once a night. Those sites see a request from the application, not from you, and only your public username is sent to them.
• The college may set up more than one AI service, so that the assistant keeps working when one is busy or down. Each request goes to one of them, and to another only if the first one fails. The services that may be used are Groq, Ollama's cloud service, Google's Gemini API and OpenRouter. Each has its own terms; on free plans, some services may keep the text or use it to improve their models. That is one more reason not to paste personal information.

7How long it is kept

• Your account and your college record are kept for as long as the college needs them for your studies.
• The security record is kept for as long as the service runs, because its purpose is to show later what was changed.
• The numbers about your use of the AI assistant are removed automatically after 90 days once the college switches on the nightly clean-up. Until it does, they are kept until an administrator removes them.
• A coding account and its daily totals are kept until you remove the account on your Portfolio page or your account is closed.
• Your Quick Assistant chats: your newest six are kept until you delete them or your account is closed.
• Your phone number, the text about you and your photo are kept until you remove them or your account is closed.

8How it is protected

• Every page and every request needs you to be logged in, and the application checks on the server that a record is yours before it shows it.
• After five wrong passwords in a row, logging in to that account is blocked for 15 minutes.
• A new student account starts with a temporary password that must be changed at the first login.
• Files are checked before they are stored, and are never served from the application's own address.

No service can promise that nothing will ever go wrong. If you think someone else has used your account, change your password at once and tell your college administrator.

9What you can do

• Change your password at any time, in Settings.
• Change or remove your phone number, the text about you and your photo, on your profile.
• Delete any of your Quick Assistant chats, in the Quick chat history on the AI Assistant page.
• Ask your college administrator to correct a record that is wrong.
• Ask your college what it keeps about you, and ask for your account to be closed when you no longer need it.

10Questions and changes

For any question about this page or about your records, speak to your college administrator. When this page changes, the date at the top changes with it.