Privacy Policy

Effective Date: August 24, 2026 | Last Updated: August 24, 2026

        Summary of Key Principles:
        100% On-Device Data Processing: Your email content never leaves your smartphone.
Zero Server Storage: We do not operate cloud servers to store, process, or view your emails.
Limited Scope Access: We request read-only access exclusively to parse campus communications.
Zero Data Sales: We never monetize, sell, or share user data.

      

1. Overview

Oryn ("we", "us", or "our") operates the Oryn mobile application. This Privacy Policy describes how Oryn handles information accessed through Google OAuth 2.0 services. Oryn is engineered specifically for students and staff of the Indian Institute of Information Technology, Design and Manufacturing (IIITDM) to organize campus information.

2. Information We Access

When you authorize Oryn using Google Sign-In, the app requests the following OAuth 2.0 permission scope:

Gmail Read-Only Access (https://www.googleapis.com/auth/gmail.readonly): Used strictly to read inbox message headers and body content to extract academic schedules, placement notices, hostel announcements, and mess menus.

3. How We Process & Store Data

All email fetching, parsing, categorization, and entity extraction are performed locally on your mobile device runtime:

Local Binary Storage: Parsed emails and classification results are saved in your device's private binary storage using high-performance MMKV key-value store.
On-Device Machine Learning Engine: Email text is processed using an on-device TF-IDF vector space model and rule classifier inside the client app.
No Cloud Transmissions: Your email content, subject lines, senders, and credentials are never transmitted to any central server, backend API, or third-party service.

4. Compliance with Google API Services User Data Policy

Oryn's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements:

We only use Google user data to provide user-facing features that are prominent in the application UI (categorizing campus emails, displaying deadlines, and widget sync).
We do not transfer user data to third parties.
We do not use user data for serving advertisements, credit reporting, or targeted marketing.
No human reads user data, unless required for security purposes, to comply with applicable law, or with explicit user consent for troubleshooting.

5. Third-Party Sharing

Oryn does not sell, rent, trade, or share user data with any commercial third party, advertiser, or data broker under any circumstances.

6. Data Retention & User Control

You maintain complete control over your data at all times:

Sign Out & Token Revocation: Tapping "Sign Out" in app settings revokes your Google OAuth token immediately.
Data Deletion: Uninstalling the app or tapping "Clear Local Cache" in settings permanently deletes all stored email data from your device storage.
Google Account Permissions: You can revoke Oryn's access at any time via your Google Account Third-Party Access settings.

7. Contact Us

If you have any questions or security inquiries regarding this Privacy Policy, please contact us at:

Email: support@oryn.app | oryn.iiitdm@gmail.com
Address: IIITDM Kancheepuram, Off Vandalur-Kelambakkam Road, Chennai - 600127, India