Privacy policy
Bahria LMS
Last updated October 26, 2026
# Privacy Policy: Bahria LMS (unofficial student app)
_Last updated: 26 October 2026 · Developer: Rehan Sathio (https://rehansathio.vercel.app)_
Bahria LMS is an independent app made by a student. It is **not affiliated with or endorsed by Bahria University**.
## What the app does with your data
- **Your CMS password** is sent only to `cms.bahria.edu.pk` to sign you in. If you turn on "Remember me", it is stored encrypted on your phone (Android Keystore) so the app can sign you in again when the portal session ends.
- **Attendance, assignments, lectures, results, fees and exam data** are read from the university portals by your phone and stored encrypted on your phone only. They never pass through our servers.
- **Our server** (`bahrialms.vercel.app` / `comm-app-data-api.vercel.app`) receives:
- your enrollment number and campus once per sign-in (to count users and enforce bans);
- posts you write on the community board, stored with your name and enrollment for moderation (shown to others anonymously);
- posts you report, and feedback you send.
- **App lock** (optional) uses your phone's own fingerprint, face or screen lock. The app never sees or stores biometric data.
## What the app does not do
No ads, no analytics, no crash-reporting or tracking SDKs, no location, contacts or photos access. No data is sold or shared.
## Notifications
There is no push server. Your phone checks the portal itself about every 3 hours (not between 00:00 and 07:00) and shows notifications locally.
## Deleting your data
- On your phone: sign out (removes cached data and downloads for that account) or uninstall the app.
- On our server: contact the developer to remove community posts or reports.
## Contact
https://rehansathio.vercel.app