The app shows no advertisements, does not use the Android Advertising ID, and we never sell personal data.
This policy explains how Khurasan University (“the University”, “we”) handles personal
information in the Khurasan University Student App (Android package info.khurasan.student)
and on this website. The app is a mobile version of the University's student web portal
(lms.khurasan.info)
and is only for enrolled students of the University.
1. Who we are
Khurasan University, Jalalabad, Nangarhar, Afghanistan. The University is responsible for the student records shown in the app. Privacy questions: info@khurasan.edu.af · +93 77 252 9525.
2. Information we use
From your university record (created by the University, not in the app)
- Identity: name, father's name, registration number, photo, gender, program, batch, semester, shift and section.
- Contact: email address and phone number on your record (the email is used for password reset codes).
- Academic: subjects, timetable, attendance, assignments, marks, results, transcript, exam schedule and study materials.
- Fees: fee ledger, vouchers and payment status. The app only shows fee records; it does not collect card or bank account numbers.
What you send through the app
- Your username and password when you sign in (sent over an encrypted connection to check them; the password is never saved on your phone).
- Assignment answers (PDF files), student service applications and their documents, and payment slips or receipts you upload.
- Questions to teachers, replies, complaints, graded discussion (GDB) posts and teacher assessment survey answers.
- Exam time-slot choices when you use exam self-scheduling.
Collected automatically
- Sign-in session: a random app installation ID, device model, Android version, app version, sign-in time, last-used time and IP address — so you stay signed in and can see and sign out your devices.
- Notifications: a Firebase Cloud Messaging (FCM) token and the groups you belong to (program, batch, class) so the right messages reach you.
- Diagnostics: crash reports and basic, non-advertising usage statistics (for example which screens fail to load) through Google Firebase Crashlytics and Analytics, to fix problems.
- Security logs: server request logs (time, IP address, error codes) and a record of changes you make, to protect accounts and investigate problems.
3. What we do not collect
- Advertising ID or any advertising profile
- Location, contacts, call logs, SMS or microphone recordings
- Card numbers, bank passwords or mobile-wallet PINs
- Files on your phone other than the ones you choose to upload
4. How we use information
- To sign you in and keep you signed in securely.
- To show your academic, fee and service information — the same information as the student web portal.
- To deliver what you submit (assignments, applications, payments, questions, complaints) to the right University office or teacher.
- To send University announcements and alerts about your classes, marks, fees and services.
- To send password reset codes to the email address on your record.
- To keep the service secure, prevent misuse and fix errors.
We do not use your information for advertising, profiling or marketing by others.
5. App permissions
- Internet / network state: to load data and to know when you are offline.
- Notifications: to show University messages and alerts. You can turn this off at any time.
- Camera (optional): only when you choose to take a photo of a document or payment slip to upload.
- Photos and files (optional): only to pick the file you want to upload or to save a downloaded material or voucher.
6. Sharing
We do not sell or rent personal data. Information is shared only:
- Inside the University: with the teachers and offices that need it (for example your teacher sees your assignment; the Finance department sees your payment slip; the Registrar sees your service applications).
- With service providers that process data for us: Google Firebase (push notifications, crash reports, usage statistics). Study videos may play through YouTube, where Google's own privacy policy applies.
- With authorities: such as the Ministry of Higher Education when required for academic records, or when required by law.
7. Storage & security
- All communication between the app and the University servers uses HTTPS encryption.
- Your sign-in token is kept in the phone's secure storage (Android Keystore). Data saved for offline use is encrypted on the phone and removed when you sign out.
- Each request is checked so that you can only see your own records.
- University data is stored on the University's servers. No system is perfectly secure, so please keep your password private and lock your phone.
8. Retention
- Sign-in sessions: end when you sign out, when you remove a device, when your password changes, or after 180 days without using the app.
- Notification tokens: deleted when you sign out or delete your app data.
- Notifications history: automatic alerts are kept for 1 year; University announcements are kept as University records.
- Password reset codes: expire after 10 minutes and are deleted within a day.
- Server logs: kept for up to 30 days; security records may be kept longer when needed to investigate misuse.
- Academic, fee and service records (including what you submitted) are official University records and are kept according to University and Ministry of Higher Education rules, also after you stop using the app.
9. Your choices & rights
- See your data: everything the University holds about your studies is shown in the app and on the web portal.
- Correct your data: contact the Admin Office (Registrar), Khurasan University to correct your name, email or other details.
- Sign out devices: in the app go to Settings → My devices.
- Delete your app data: in the app go to Settings → Delete app data, or follow the steps on the account deletion page.
- Notifications: turn them off in the app settings or in Android settings.
10. Age
The app is for university students and is not directed at children under 13. Accounts are created only by the University for enrolled students.
11. Changes
If we change this policy we will update the date at the top of this page and, for important changes, inform students in the app.
12. Contact
Admin Office (Registrar), Khurasan University
Jalalabad, Nangarhar, Afghanistan
Email: info@khurasan.edu.af
Phone: +93 77 252 9525
Web: https://khurasan.info