← PUPSync Homepage

PUPSync Privacy Policy

Last updated: August 17, 2026

PUPSync is a free Chrome browser extension designed for Polytechnic University of the Philippines (PUP) students. PUPSync allows students to export their official Student Information and Accounting System (SIAS) class schedule into Google Calendar and compute their General Weighted Average (GWA) and Latin honors standing.

This Privacy Policy outlines how PUPSync accesses, handles, stores, and protects user data, including sensitive Google user data and student academic information.

Who We Are

PUPSync is an independent student and alumni open-source project. It is not affiliated with, endorsed by, or an official product of the Polytechnic University of the Philippines.

For privacy inquiries, support, or data protection questions, you may contact the developer directly at support@niched.tech or visit the project repository on GitHub.

Data We Access and How We Use It

• SIAS Academic Pages (*.pup.edu.ph) — When you open the extension while browsing your SIAS schedule, grades, or home page, PUPSync reads the rendered page content (class meeting times, subject titles, grades, and displayed student name) solely to present the schedule grid and calculate your GWA locally inside the popup.
• Google Calendar (https://www.googleapis.com/auth/calendar.events) — If and only when you explicitly choose "Import to Calendar", PUPSync requests permission to create recurring events on your primary Google Calendar corresponding to your class schedule.
• Local Extension Storage — PUPSync saves user preferences (such as custom subject colors, semester start/end dates, a cached first name for the in-popup greeting, and a temporary OAuth access token) locally on your device using Chrome’s chrome.storage.local API.

Data Protection Mechanisms for Sensitive Data

We implement rigorous technical and organizational safeguards to ensure all sensitive data and Google user data are protected:

• Encryption in Transit: All communications with external APIs—including Google Calendar API endpoints (https://www.googleapis.com/*) and PUP SIAS servers (https://*.pup.edu.ph/*)—are strictly enforced over HTTPS using Transport Layer Security (TLS 1.2 / TLS 1.3) encryption. Unencrypted HTTP transmissions are never used.
• Sandboxed Client-Side Storage: PUPSync does not operate an external database or backend server. All data (including user preferences and temporary authentication tokens) is stored solely at rest within Google Chrome's sandboxed local extension storage (chrome.storage.local). This sandbox is isolated by the browser operating environment and cannot be accessed by other websites, extensions, or unauthorized third parties.
• OAuth Token Protection & Minimal Scoping: Authentication with Google is managed through Chrome's secure chrome.identity OAuth 2.0 implementation. OAuth tokens are granted only for the minimal necessary scope (calendar.events) to create calendar events. Tokens are stored only temporarily on the client device, are never logged, and are never transmitted to any external server.
• Zero Remote Storage / Zero Third-Party Transmission: Your schedule, grades, personal identification, and Google Calendar data never leave your local browser session and are never transmitted to the developer or any third party.
• User Control and Immediate Revocation: You can revoke PUPSync’s access to your Google account at any time via Google Account Permissions. Revoking access instantly invalidates all active tokens.

How Google User Data Is Handled (Google API Limited Use)

PUPSync’s use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements:

• Google user data is used strictly to provide and improve user-facing features (specifically creating class schedule events in Google Calendar).
• We do not transfer or disclose Google user data to any third party.
• We do not use Google user data for serving advertisements (including personalized, re-targeted, or interest-based ads).
• We do not use or transfer Google user data to train machine learning or artificial intelligence models.

What We Do Not Do

• We do not run backend servers or remote databases that collect or store your academic or personal data.
• We do not sell, rent, monetize, or trade your personal or calendar data.
• We do not track you across websites or collect analytics/telemetry data beyond standard Chrome Web Store platform statistics.

Data Retention and Deletion

All data remains solely on your local device for as long as the extension is installed. You can delete all data and preferences at any time by clearing your extension data in Chrome settings or uninstalling the PUPSync extension.

To revoke Google Calendar access, visit Google Account Permissions and remove PUPSync.

Children's Privacy

PUPSync is designed for university students managing their higher education coursework. It is not directed to children under 13 years of age, and we do not knowingly collect information from children under 13.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Any changes will be posted to this page with an updated "Last updated" date.

Contact Us

If you have questions or concerns about this Privacy Policy or data security practices in PUPSync, please reach out via:

• Email: support@niched.tech
• GitHub: https://github.com/Troy-LL/Pupsync