1. Information We Collect

We collect information that you provide to us, information we collect automatically through your use of the Portal, and information from third-party sources.

A. Information You Provide Directly:

When you create or update your profile, you provide us with personal and academic information, which includes:

• Personal Identification Data: Full Name (Latin and Arabic), Student ID Number, National ID / Iqamah Number, Passport Number, Date of Birth.
• Contact Information: Indonesian Phone Number, Saudi Arabian Phone Number, Email Address, Instagram handle, and residential address details (province, city, subdistrict, full address).
• Emergency Contact Information: Name and phone number of an emergency contact.
• Academic Information: Academic Status (active, finished), Activity Status (aktif, tajil, etc.), Educational Level (S1, S2, etc.), Faculty, Major, Semester, Departure Date (Generation), Graduation Year, High School, and Previous College.
• Accommodation Details: Type of accommodation, Wihdah (Unit), and Room Number.
• Other Personal Details: Marital Status and Blood Type.
• Profile Picture: You may voluntarily upload a profile picture ("Pas Foto").
• Form Submissions: Any data you provide when filling out and submitting forms available on the Portal.

B. Information Collected via Third-Party Authentication (Google OAuth):

When you sign in using Google, we receive the following information from your Google account to create and authenticate your Portal account:

• Basic Profile Information: Your full name and email address.
• Google User ID: A unique identifier for your Google account.

We do not receive or store your Google password.

C. Information Collected Automatically (Cookies):

We use cookies for session management to keep you logged in. Our technology partner, Supabase, uses cookies (e.g., sb-access-token, sb-refresh-token) to manage your authentication state securely. These are essential for the Portal's functionality.

2. How We Use Your Information

We use the information we collect for the following purposes:

• To Provide and Manage the Service: To create and manage your account, authenticate you as a student, and provide you with access to the Portal's features.
• For Administrative Purposes: To maintain an accurate and up-to-date student database for official PPMI Madinah administrative, academic, and organizational needs.
• To Communicate With You: To send important notices, updates, or information related to your status as a student or regarding Portal services.
• To Personalize Your Experience: To display your profile information to you and, where appropriate, to authorized administrative staff.
• To Ensure Security: To monitor for and prevent fraudulent or unauthorized activity.

3. How We Share Your Information

We do not sell, trade, rent, or otherwise share your personal information with third parties for marketing purposes. We may share your information in the following limited circumstances:

• With Service Providers: We use Supabase as our backend service provider for database hosting, authentication, and file storage. Supabase is bound by its own privacy policies to protect your data.
• With PPMI Madinah Administration: Your profile information is accessible to authorized PPMI Madinah administrators for official administrative and organizational purposes.
• For Legal Reasons: We may disclose your information if required to do so by law or in the good faith belief that such action is necessary to comply with a legal obligation, protect and defend our rights or property, or protect the personal safety of users or the public.

4. Data Storage, Security, and Retention

• Storage: Your data is stored on secure servers provided by Supabase.
• Security: We implement security measures designed to protect your information from unauthorized access, use, or disclosure. This includes the use of database-level Row Level Security (RLS) policies to ensure you can only access and modify your own data, and that only authorized administrators can view other user data.
• Retention: We retain your personal information for as long as you have an active account on the Portal. If you are no longer a student, we may retain your information for archival and administrative purposes in accordance with PPMI Madinah's data retention policies.

5. Your Rights and Choices

You have certain rights regarding your personal information:

• Access and Correction: You can access and update most of your profile information at any time through the "Edit Profile" page on the Portal.
• Data Deletion: To request the deletion of your account and associated data, please contact the Portal administrator. Please note that we may be required to retain certain information for legal or legitimate administrative purposes.
• Sign Out: You can sign out of your account at any time to end your active session.

6. Children's Privacy

The Portal is not intended for use by individuals under the age of 13. We do not knowingly collect personal information from children under 13.

7. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Effective Date" at the top. You are advised to review this Privacy Policy periodically for any changes.

8. Contact Us

If you have any questions or concerns about this Privacy Policy or our data practices, please contact the administrator.