Privacy policy — FUTO SUG

01What we collect

We collect only what the app needs to work, count devices and send the messages you ask for. We do not ask for a name, email or password.

Device: A device ID the server keeps only as a hash, an anonymous Firebase ID, the app version, your phone platform (Android or iOS), OS version and device model.
Notifications: A push token kept only as a hash, your notification setting on this device, and a short delivery record for each announcement or complaint reply.
Usage: A small set of fixed events, such as app opens, content views, banner or popup taps and notification opens. They show which content students read.
Complaints: The subject, category and messages you send, plus your name or phone number only if you choose to add them. Complaints are text-only, and each one gets a ticket code such as SUG-550E8400E29B.

To deliver news, guides, banners, popups and the SUG team directory.
To count devices: unique, new and active. This shows whether the app reaches students.
To send announcements and complaint replies to devices that allow notifications.
To answer complaints and keep the service secure.

We do not use this data for advertising, profiling or automated decisions about you.

Complaints: up to 24 months, then removed.
Active-device records: the records that show recent activity are removed after 90 days.
Notifications on your phone: the newest 100 are kept on the device.
Device records and totals: kept while the service runs, so counts stay accurate. They hold a hashed ID, not your name.

There is no account to close. To ask for access, a correction or deletion, email [email protected].

If your request is about a complaint, include its ticket code. Otherwise include your app version and phone platform so we can find the record.
We may ask you to confirm a request before deleting anything, to protect other students.
We delete the complaint, notification and device records we can identify. Total counts that no longer point to a device may remain.
You can turn off notifications at any time in your phone’s settings.
A new or reset phone starts a new anonymous identity. Old records are not linked to it automatically.

All traffic between the app, the website and the server uses HTTPS.
Only our servers read and write the database. The app never talks to the database directly.
Device IDs and push tokens are stored as SHA-256 hashes.
Access for SUG staff is limited to authorised team members, and their actions are logged.

FUTO SUG is for students of FUTO and is not aimed at children. If you think a child has sent us personal information, email us and we will delete it promptly.
When this policy changes, we update the date at the top. Material changes will be announced in the app once it is available.

Questions about this policy? Email [email protected].