LAST UPDATED · 13 SEPTEMBER 2026

Privacy policy

This policy covers My NUST, listed on Google Play as “NUST - A Student App,” and this companion website. The app is developed by Hexagone, independently of NUST. Contact us at HexagonePk@gmail.com.

What stays on your device

If you choose to connect a portal, the app saves your student ID and portal passwords in encrypted local preferences. It also caches available academic details, which may include your name, GPA, course history, attendance, timetable, deadlines and invoices. Planner entries, campus/theme preferences and downloaded files are saved locally. Portal credentials and academic summaries are not uploaded to Hexagone servers by the app's sync feature.

Encrypted preferences are not a guarantee against access on a compromised device. Device or operating-system backups may retain copies depending on your platform and backup settings.

Portal access and automatic sync

Saving credentials and enabling the portal connection are optional. With your consent, the app signs in directly to official Qalam or LMS services to read available records on launch, on eligible returns to the app, and when you refresh. These services receive your credentials and read requests over their connections, and their pages may use cookies or browser storage. Their own privacy policies apply. You can use local planners and open official portals without saving credentials.

When you turn the connection off, automatic sync and saved-password autofill stop; saved credentials and cached summaries are kept until you delete them. Turning sync off does not automatically sign you out of an existing web session.

Firebase and other external services

The app uses Google Firebase Cloud Messaging for notifications and Firebase Realtime Database for app information. Firebase may process installation identifiers, notification tokens and technical service information such as IP addresses. This is separate from locally cached academic data. See Firebase's privacy information for Google's handling and retention of service data.

Opening campus pages, downloading files, fetching news or loading remote images sends normal network requests to those providers. The app uses Google Fonts for its interface, which may fetch fonts when they are not cached. Opening Google Play or GitHub uses those services under their policies.

Permissions

Notification permission lets the app display updates. Optional biometric authentication uses the device's authentication system; the app does not receive or store fingerprint or face templates. File handling is used for downloads you request and opening or sharing files. The app does not require broad photo or video library access for its downloads feature.

Feedback

If you send feedback through your email app, we receive the information you choose to send, including your email address and any name, message or attachments. Do not send portal passwords. Support correspondence is retained while needed to resolve the request and meet applicable obligations; you can contact us to request deletion.

Deleting saved data

In Settings, open “Manage saved data” and select portal connection, GPA planner, absolute planner, app downloads and/or preferences and news cache. Selecting all resets these local app categories. Portal connection deletion removes saved credentials, shared WebView cookies and cached academic summaries. Planner deletion includes imported terms and your edits. Download deletion targets files managed by the app, not your entire public Downloads folder.

Local deletion cannot remove university records, your official portal account, provider logs, previously shared files or copies exported to other locations. Operating-system backups are controlled by your platform. For questions or deletion requests relating to support data, email HexagonePk@gmail.com. The app does not create a separate Hexagone student account.

Website

This landing page has no account form, advertising or analytics script. Firebase Hosting and linked services may process technical request information when you visit. We do not sell portal credentials or academic summaries, or use them for advertising.

Changes and questions

We will update this page when the app's data handling changes. Depending on where you live, you may have rights to access, correct or delete personal information we hold. Contact us with your request; official university data requests must go to the university.