Privacy Policy

GDG Qassim (GDG on Campus Qassim University) is a student club at Qassim University run by student volunteers. This policy explains what data we collect through the club's website gdg-q.com, the members' app "GDG Qassim" for iPhone, and the admin panel our organizers use; why we collect it; how we keep and protect it; and your rights over it.

The club is an independent group. Its activities do not represent Google, and Google is not responsible for these services. To contact us about your data: gdg.qu1@gmail.com.

• Account: your email address and name; your university ID if you sign in with your university email; and your Google or Apple account identifier if you sign in with one of them. If you choose to hide your email with Apple, we receive a relay address that Apple manages and that forwards our messages to you.
• Profile: your official name, the name others see, gender, study status, level, college, school or institution, personal email, and your phone number if you add it.
• Activity: your event registrations and registration form answers, whether you were accepted, your attendance check-ins, your points and your certificates.
• Membership card and public page: the card name, design and number, what you add to it (bio, major, links to your accounts) and what you choose to show.
• The app: the notification token your iPhone issues for the app if you allow notifications, the app version, its language, and your notification switches. The app uses the camera only to read the event's QR code while the scan screen is open: it takes and keeps no photos and sends us only the code it read. If you tap the paste button, the app reads the copied text once to fill in the check-in code.
• Technical data: logs of the requests that reach our server (such as the time, IP address, browser type or app version), and error reports from the website and the server. An error report may include your account ID and university ID so we can fix a problem that affected you.
• On the website only: visit statistics through Google Analytics (which uses cookies) and Plausible. The app has no analytics, advertising or tracking tools.
• On your phone: the app keeps your sign-in session in the iPhone's secure storage, and your settings such as language and theme. The session is erased when you sign out; the settings when you delete the app.

How we get it: from you, when you create your account, complete your profile and register for events; from Google or Apple when you choose to sign in with them (name and email); from club organizers when they record your attendance or points; and automatically from your device or browser (technical data and the notification token).

• To create your account, sign you in and keep it secure.
• To run events: registration, acceptance, attendance, points and certificates.
• To check eligibility for activities reserved for university students.
• To show the leaderboard, your public page and your membership card.
• To email you about your registrations and your account, and to send only the app notifications you allowed (event reminders, acceptance, new points and club news).
• To prevent abuse such as false check-ins, fix errors and improve our services.
• For overall statistics about the club's activity that show no names.

We do not sell your data, use it for advertising, or share it with advertisers.

• On the leaderboard and member pages: the name others see, your points, your rank and your points history (the activities you earned points for).
• On your public card, to anyone with its link or code: the card name and design; your study details, bio and links unless you hide them; and your email or phone only if you choose to show them (both are hidden by default).
• Authorized club organizers see the registration and attendance data they need to run events, each according to their role.
• Your university ID is never shown publicly.

We rely on the following providers, and share with each only what it needs to provide its service:

• Clerk: sign-in, account management and verification codes.
• Apple: Sign in with Apple, delivering app notifications, and Apple Wallet passes.
• Google: Google sign-in, Google Forms for some registrations, Google Wallet passes, and Google Analytics on the website.
• Amazon Web Services: sending email.
• Cloudflare: storing images and files.
• Sentry: error reports.
• The host of our server, which runs the website and the database, and a server run by the club's developers for Plausible statistics.

We may also disclose data when a competent authority requests it under the applicable regulations.

Your data is kept in the club's database on its server and with the providers above. Several of them process data outside the Kingdom of Saudi Arabia (including in the United States), only to provide the services described here.

• Your account and activity data: as long as your account exists.
• The notification token: until you sign out, delete your account, or your iPhone tells us it is no longer valid. A phone that has not opened the app for 180 days is removed.
• The log of notifications sent: 90 days.
• Server logs and error reports: a limited time, as needed to fix errors and protect the service.

When you delete your account we delete your sign-in account, name, email, phone number, university ID, college and level, your card and public page, your form answers and your notification devices. An anonymous record with no name and no way to contact you stays in the club's records so that past points totals and attendance counts stay correct. Copies may remain in backups for a limited time until they are replaced. Apple Wallet or Google Wallet passes saved on your phone stay there until you remove them.

• To know how and why we collect your data: this page.
• To see your data and get a copy: most of it is on your account page in the app and on the website; email us for a full copy.
• To correct it: edit your profile in the app or on the website, or email us to correct what you cannot edit, such as attendance or points.
• To have it deleted: delete your account in the app (Profile → Settings → Delete account), or email us. If you sign in with Apple, deleting your account in the app also removes the link with Apple.
• To withdraw your consent: turn notifications off in the app's settings or in iPhone Settings, hide what you want on your card, or delete your account. Apple users can also stop using Apple with the app in iPhone Settings (your name → Sign-In & Security → Sign in with Apple). Withdrawing consent does not affect what was done before.

To use any of these rights, use the app's screens or email us at gdg.qu1@gmail.com from the address on your account. We answer within 30 days and may ask you to show the account is yours before we act. If you are not satisfied with our answer, you may complain to the Saudi Data & AI Authority (SDAIA).

The website and the app reach our server over an encrypted connection (HTTPS); access to members' data is limited to authorized club organizers according to their roles; and the app keeps your sign-in session in the iPhone's secure storage. No system is perfectly secure: if a breach affects your data, we will tell you and notify the competent authority as the regulations require.

High-school students may take part in club activities. We collect the same data from them as described above, for the same purposes. If you are under 18, read this policy with your parent or guardian. A parent or guardian can ask us to see, correct or delete their child's data by emailing us.

We may update this policy as our services change, and we update the "Last updated" date at the top. If a change is significant, we will announce it in the app or on the website before it takes effect.

Questions about your data, or a request: gdg.qu1@gmail.com. For help using the website or the app, see Help & Support.