Privacy Policy

1. Introduction

This Privacy policy explains how the IIT Kanpur Webmail App collects, uses, and protects your information. The app provides secure access to IITK webmail accounts.

2. What We Store

The app stores the following information on your device:

Account Information

• Your IITK webmail username.
• Your password (encrypted).
• Account nickname (e.g., "Work", "Personal").
• Auto-login preference.

App Settings

• Security PIN (optional).
• Theme and language preferences.
• Notification settings.

3. App Permissions

The app needs these permissions to work properly:

4. Security Features

We use multiple layers of security:

• AES-256 Encryption: All sensitive data such as passwords, app pin, app settings etc. is encrypted.
• Local Storage: All sensitive data stays on your device locally.
• PIN Protection: Optional 4-digit PIN lock.
• Auto-lockout: App locks after 5 wrong PIN attempts. The locking period is for 10 minutes.

5. How Your Data is Used

• To log into IITK webmail
• To check for new emails
• To remember your preferences
• For automatic login (when enabled)

6. Your Control

You have full control over your data:

• Add, edit, or delete accounts anytime
• Turn off notifications
• Disable PIN protection
• Clear all app data completely
• All data is deleted when you uninstall the app

7. Email Notifications

The app checks for new emails in the background:

• Only counts unread emails
• Doesn't read email content or subjects
• Doesn't download or store emails
• Check interval can be set from 15 minutes to once a day

8. Webmail Connection

The app connects directly to IITK webmail:

• Your login details go straight to IITK servers
• No middleman or proxy servers
• Web cache is cleared between sessions
• Each account has separate sessions

9. Data Deletion Policy

We are committed to full transparency about how your data is stored and deleted.

Where Your Data Lives

All data collected by this app — including your credentials, settings, and preferences — is stored exclusively on your device using AES-256 encryption. We do not upload, sync, or retain any of this data on our servers. The only interaction with IITK servers is to validate your login credentials at the time of sign-in; no data is persisted server-side.

How to Delete Your Data

You are in complete control of your data. You can delete it at any time using any of the following methods:

• Remove Individual Accounts: Go to Settings → Accounts, then tap to delete a specific account and all data associated with it.
• Clear All App Data: Go to Settings → App Data → Clear All Data to wipe every account, preference, and setting stored by the app.
• Uninstall the App: Uninstalling the app permanently removes all locally stored data from your device with no residual data left behind.

What Gets Deleted

10. Policy Updates

We may update this policy. We'll notify you by:

• Updating the "Last Updated" date
• Posting updates on IITK Webmail website

11. Contact Information

Useful links:

• Security Guidelines
• Password Change Portal