Privacy Policy

Last Updated: September 25, 2026

This Privacy Policy explains how the METU App mobile application ("METU App", "the app") collects, uses, shares, and protects your information. METU App is developed and operated by the METU App Team at Middle East Technical University (METU), Ankara, Turkey ("we", "us"). This policy was prepared by Emre Geçit on behalf of the METU App Team.

Information We Collect

Account Information

• Your METU user ID and password, used to sign in. Your password is sent over an encrypted connection to METU's authentication server for verification and is not stored on our servers.
• Your first name and last name, obtained from METU during sign-in.

Credentials for METU Services

To show your courses, schedule, exams, e-mail, library, dormitory, and ODTÜKART information, the app signs in to the corresponding METU services (such as ODTUClass/Moodle, SAIS, METU Mail, the library, and dormitory systems) on your behalf. The credentials and session tokens for these services are stored only on your device, in encrypted secure storage, and are removed when you sign out.

E-mail

The mail feature connects your device directly to METU's mail servers. Your messages are downloaded to and stored on your device; we do not store your e-mails on our servers.

Location

With your permission, the app uses your device's precise location for campus maps, navigation, and directions, only while the app is in use. To calculate a route, your current position and destination are sent to our routing server. Location is not collected in the background and is not stored with your identity.

Photos, Camera, and Files

• If you choose to upload a photo to the campus photo gallery, we store the photo, the place it shows, the capture date, and your user ID and name. Uploaded photos and your name are visible to other users of the gallery.
• The camera is used only when you scan a barcode or QR code, or take a photo to upload. Scanned images are processed on your device.
• Files and images you select (for example, as e-mail attachments) are accessed only when you pick them.

Content You Submit

• Cafeteria meal ratings, stored with your user ID.
• Votes and reports on gallery photos, stored with your user ID.

Push Notifications

If you allow notifications, we store your device's push notification token together with your user ID so that we can send you notifications such as new e-mail and announcements.

Analytics, Crash, and Diagnostic Data

To find bugs and improve the app, we collect:

• Crash reports and diagnostic data (device model, operating system version, app version, error logs, and the actions leading to an error), which may be associated with your user ID.
• Usage analytics, such as which screens and features are used, and app instance identifiers. The app does not collect the advertising ID.

How We Use Your Information

• To authenticate you as a METU student or staff member
• To provide the app's features, such as courses, schedules, e-mail, maps, and navigation
• To send you notifications you have enabled
• To operate the photo gallery and meal ratings, and to moderate reported content
• To diagnose crashes and improve the app's reliability and usability

We do not sell or rent your personal information, and we do not use it for advertising.

Data Sharing and Disclosure

We share your information only with:

• METU services (authentication, ODTUClass/Moodle, SAIS, METU Mail, library, dormitory, and ODTÜKART systems), to provide the features you use.
• Google Firebase (Google LLC), for push notifications, analytics, and crash reporting. See Firebase Privacy.
• Sentry (Functional Software, Inc.), for error and crash reporting. See Sentry Privacy Policy.
• Other users, only for photos you choose to upload to the public gallery.
• Authorities, when required by law.

Data Retention and Deletion

• Data stored on your device (credentials, tokens, e-mails, and cached data) is deleted when you sign out or uninstall the app.
• Your account information, gallery photos, meal ratings, and notification tokens are kept on our servers while you use the app, until you ask us to delete them.
• Analytics and crash data are kept by Firebase and Sentry only for the limited retention period set by those services, after which they are deleted automatically.

To delete your account and the data associated with it, send an e-mail from your METU e-mail address to metuapp@metu.edu.tr with the subject "Delete my data". We will delete your data from our servers within 30 days and confirm by e-mail. Data held by METU's own systems (such as your e-mail or academic records) is not controlled by us and is not affected.

Data Security

All data is transmitted over encrypted (HTTPS/TLS) connections. Credentials on your device are kept in the operating system's encrypted secure storage. No method of transmission or storage is 100% secure, but we take reasonable measures to protect your information.

Children's Privacy

METU App is intended for METU students and staff and is not directed at children under 13. We do not knowingly collect information from children under 13.

Your Rights

You may request access to, correction of, or deletion of your personal information at any time by contacting us. Under Turkish Personal Data Protection Law No. 6698 (KVKK), you also have the other rights listed in its Article 11.

Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with a new "Last Updated" date.

Contact Us

If you have any questions about this Privacy Policy, please contact the METU App Team:

• Email: metuapp@metu.edu.tr
• Address: Middle East Technical University, Ankara, Turkey