Privacy Policy

Jadwalik (jadwalik.com) and the Telegram bot @JadwalikBot help students at Prince Mohammad Bin Fahd University build their schedules and keep track of their degree plans and their study day. This page explains exactly what data we collect, why we collect it, who we share it with, how long we keep it, and what your rights are.

1. Who is responsible for your data

The party responsible for your data (the controller) is Jadwalik, Commercial Registration No. 7055288521, in the Kingdom of Saudi Arabia. Privacy contact: jadwalik@gmail.com, or through the Telegram bot @JadwalikBot.

2. What we collect

a) When you sign in with Google

We receive only three items from Google:

• Name — to display inside the app
• Email address — to identify your account and attach your data to it
• Account identifier — an internal ID used by the sign-in system

We do not request or access your mail, files, contacts, or calendar. The only scopes requested are the basic email, profile and openid.

b) Data you enter yourself

c) If you link Telegram (optional)

We store your Telegram chat ID and username to deliver notifications, reminders and receipts, and to run the assistant and support inside the bot. You can stop notifications at any time by sending /stop to the bot or from the app settings.

d) Photos and files

Photos and files you upload to a course are stored in our provider's storage and stay private to you unless you choose to share them. Images are compressed before upload, and the limit is 10 MB per file. You can delete any photo or file at any time, and deletion removes the stored copy too.

e) Sharing with classmates

You may choose to share an event or a photo with students in your own section only. When you share:

• It appears to students who have that same section in their schedule, and to nobody outside it
• It is shown without your name
• You can stop sharing or delete the content at any time

Your private notes, your absences and your GPA are never shared with any student — that data is yours alone.

f) The feedback form

When you send feedback or a complaint from inside the site, we store the message text, the email you optionally provide, and the request's IP address. The IP address is kept solely to prevent abusive repeat submissions.

g) When you subscribe and pay

• Mobile number: we ask for it at checkout because the payment gateway requires it. We save it to your account and send it to the gateway, together with your name and email, to create the payment. We do not use it for marketing
• Subscription records: order number, term, amount, add-on, discount and credit used, transaction number, date and payment status — to activate your subscription, issue your receipt, handle refunds and disputes, and for accounting and legal purposes
• Card details: you enter them directly on the payment gateway's page; they never reach us and we do not store them. The gateway is bound by the Payment Card Industry Data Security Standard (PCI-DSS)

h) The Jadwalik AI assistant

• We keep your conversation with the assistant (a summary of it plus the latest messages) so it can follow the context
• Your questions, together with the data needed to answer them (such as your schedule or absences when you ask about them), are sent to our AI provider Anthropic to be processed and answered; its servers are outside Saudi Arabia
• We record how much you use the assistant in order to apply usage limits
• If you use the assistant without an account, we keep your IP address only to count your daily questions
• We may review a conversation from the admin panel to check answer quality, or to handle a complaint or misuse
• Please don't give the assistant sensitive information that your question doesn't need

i) Emergency alert

If you buy the emergency alert add-on, we store your Pushover user key and send the alert text (such as the course and section) through it to your phone. Pushover is an independent provider whose servers are outside Saudi Arabia.

j) Support, invitations and credit

• Support tickets and your messages to the Jadwalik team from the bot or the site: we keep them to reply to you and follow up
• Invitations and credit: we store your invite code, who invited you and who signed up with your code, and your credit history — to calculate discounts and credit and to prevent abuse

k) What we do not collect

• We do not ask for your national ID or university ID number
• We never receive or store your bank card details — you enter them on the payment gateway's page only
• We use no advertising trackers and sell your data to no one

3. Instructor ratings and privacy

Ratings are displayed anonymously — other students cannot see who wrote them. The rating does remain linked to your account in our database for two reasons: so you can edit or delete your own rating, and so we can act on abuse or manipulation.

We reserve the right to remove any rating that is abusive, false, or unlawful.

4. Who we share data with

We rely on specialised service providers to run the service, each receiving only the minimum it needs:

• Database and authentication hosting — to store your account and data securely
• Server hosting — to run the site
• Google — to verify your identity when you sign in with Google
• Telegram — to deliver notifications, reminders and receipts, and to run the bot for users who linked it
• The payment gateway — we send it your name, email, mobile number, order number and amount, to complete payments and refunds and to handle disputes
• Anthropic (our AI provider) — your questions to the assistant and the data needed to answer them
• Pushover — for emergency alert subscribers only

Some of these providers process data on servers outside Saudi Arabia (including our AI provider and Pushover). We transfer to them only the minimum needed to provide the service to you, and we follow the rules on transferring personal data outside the Kingdom set out in the Personal Data Protection Law and its regulations.

We do not sell your data to anyone. We do not share it with Prince Mohammad Bin Fahd University or any educational body, unless legally required by an order from a competent authority.

5. Where course data comes from

Course, section and timing information is read from the master schedule published publicly on the university's website. Jadwalik presents it more conveniently and never accesses any student account in university systems.

6. How we protect your data

• All traffic is encrypted over HTTPS
• The database enforces strict row-level access — each user reads only their own data
• Service keys live in server environment variables and never reach the browser
• We do not store card data; the whole payment takes place on the payment gateway's page

That said, no system is 100% secure. If a breach affects your data, we will notify you by email as quickly as possible.

7. Retention

• We keep your account data (including your conversations with the assistant) for as long as your account exists
• If you request deletion, your data is removed within 30 days at most
• Subscription and payment records are excluded from deletion; we keep them for the period required by law
• The IP address of visitors without an account is kept only briefly, to count daily usage

8. Your rights

Under the Personal Data Protection Law, you have the right to:

• Be informed — about what data we collect and why; that is the purpose of this page
• Access and obtain a copy — request a copy of your data in a clear format
• Correction — fix any incorrect information yourself in the app, or ask us to correct it
• Deletion — request removal of your account and all your data (subject to section 7)
• Withdraw consent — stop notifications or unlink Telegram whenever you like

For any request, email jadwalik@gmail.com and we will respond within 7 business days. If you are not satisfied with our response, you have the right to file a complaint with the competent personal-data-protection authority in the Kingdom (the Saudi Data and AI Authority, SDAIA).

9. Cookies and local storage

We use browser local storage to keep your session and preferences (language, major). We use no advertising cookies and share no browsing data with advertisers.

10. Children

The service is intended for university students. We do not knowingly collect data from anyone under 16.

11. Changes to this policy

We may update this policy. Any material change will be announced in the app and reflected in the date above.