Privacy Policy
SDU Life is the app and web service for students of Suleyman Demirel University.
Last updated: 2 September 2026
This page explains what data we collect, why we need it and what you can do about it. It covers the SDU Life mobile app and this website.
What we collect
At sign-up: first name, last name, patronymic, university email and password. Optionally in your profile: phone number, photo, bio, city, interests and skills. As you use the service: event tickets, room bookings, club membership, iGPA achievements and the files you attach to them.
Why we use it
Only to run the service: signing in, registering for events, booking rooms, calculating iGPA and supporting university processes. We show no advertising and do not sell your data.
Data on your device
In the mobile app, sign-in tokens, your PIN and your preferences are kept in the device secure storage (Keychain on iOS, EncryptedSharedPreferences on Android). The PIN is never stored in the clear — only its hash. Biometrics never leave the device: the system only tells the app yes or no.
Device permissions
Camera — only to scan the QR code at an event entrance; no video is stored. Photos — to pick an avatar and attach proof of achievements. Saving to Photos — to keep a ticket. Biometrics — to sign in instead of typing the PIN. The microphone and location are not used.
Analytics and trackers
The mobile app contains no third-party analytics, ad networks or trackers. Device advertising identifiers are not collected and your activity is not tracked across other apps or websites.
Who else sees it
Your data is stored on the university server. Uploaded files and images are held in Timeweb Cloud object storage (s3.twcstorage.ru). We share data with third parties only where the law requires it.
How long we keep it
We keep your data while your account exists. After the account is deleted, personal data is removed except where the university must retain it by law or under academic record-keeping rules.
Your rights
You can edit your profile data in the app or on this site. You may request a copy of your data or the deletion of your account — in the app that is Profile → Delete account, or write to us. We answer within 30 days.
Children
The service is intended for university students and staff and is not directed at children under 13. We do not ask for a date of birth and do not knowingly collect children's data.
Changes to this policy
If this policy changes we will update the date at the top of the page. We will also announce material changes in the app.
Contact us
Questions about personal data and account deletion requests:
Suleyman Demirel University, Kaskelen, Kazakhstan