# Privacy Policy

**Better Board**

Last updated: April 7, 2026

## Overview

Better Board is an unofficial mobile client for Blackboard Learn, built for students at Prince Mohammad Bin Fahd University (PMU). This policy explains what data the app accesses, stores, and how it is handled.

## Data We Collect

### Credentials

When you log in, your university username and password are stored locally on your device using the operating system's secure keychain (iOS Keychain / Android Keystore via Expo SecureStore). Credentials are used solely to authenticate with PMU's Blackboard servers and to automatically reconnect when your session expires.

Credentials are:

- Stored only on your device, never transmitted to any third-party server

- Encrypted at rest by the operating system's secure storage

- Deleted immediately when you sign out

### Academic Data

The app fetches your academic data directly from PMU's Blackboard servers, including:

- Course listings, content, and announcements

- Grades and assignment details

- Discussion board posts and messages

- Attendance records

- Course roster information (names and roles of classmates and instructors)

This data is held in memory while the app is open and is not persisted to disk or sent anywhere other than back to Blackboard's servers (e.g., when you submit an assignment or send a message).

### Files

When you download a file (lecture slides, assignments, etc.), it is saved to a temporary cache on your device. Files are accessed only through the operating system's share sheet and are not uploaded or shared with any external service.

## Data We Do NOT Collect

- We do not collect analytics, crash reports, or usage telemetry

- We do not use any third-party analytics SDKs (no Firebase, no Mixpanel, no Sentry, etc.)

- We do not display advertisements

- We do not track your location

- We do not access your contacts, camera, microphone, or photo library

- We do not store or transmit your data to any server other than PMU's Blackboard instance (`blackboard.pmu.edu.sa`)

## Third-Party Services

The app communicates exclusively with:

- **PMU Blackboard** (`blackboard.pmu.edu.sa`) for all academic data

- **PMU SSO** (`esso.pmu.edu.sa`) for authentication

When you open an LTI tool (e.g., Pearson), the app loads the tool provider's page inside an in-app browser. The tool provider's own privacy policy applies to your interaction with that tool.

No data is sent to any other third party.

## Data Storage and Security

- All network communication uses HTTPS

- Login credentials are stored in the OS-level secure keychain, protected by device encryption and (if enabled) biometric authentication

- Session tokens are held in memory only and are not written to disk

- No academic data is cached or persisted between app sessions

## Your Rights

- **Delete your data**: Sign out at any time to immediately remove all stored credentials and cached data from your device

- **Access your data**: All data shown in the app is your own academic data from Blackboard, accessible at any time through PMU's official Blackboard portal

## Children's Privacy

This app is intended for university students and is not directed at children under 13.

## Changes to This Policy

We may update this policy from time to time. Changes will be reflected in the "Last updated" date above.

## Contact

If you have questions about this privacy policy, please open an issue at the project's GitHub repository.