BMAP Cadet App
Privacy Policy
Effective date: May 2026
Last updated: May 2026
This Privacy Policy describes how BMAP Cadet App collects, uses, stores, and shares information when you use the mobile application BMAP Cadet App for Bangladesh Marine Academy Pabna cadets. The App is maintained on behalf of the academy by rajIT Solutions Ltd.
1. Who this policy is for
The App is intended for authorized cadets of Bangladesh Marine Academy Pabna who sign in with credentials issued or managed by the academy. If you are not a cadet or do not have valid credentials, you should not use the App.
2. Summary of what the App does
- Lets you sign in with your student ID and password.
- Shows your cadet profile and academic performance information retrieved from the academy’s systems.
- Lets you view, update, and delete ship onboard (sea service) records that are synchronized with the academy’s backend.
- Shows contact information for the academy.
- Detects network connectivity so the App can show an offline state when you have no usable internet connection.
3. Information the App processes
3.1 You provide directly
| Data | Purpose |
|---|---|
| Student ID and password | Authentication with the academy backend. Passwords are sent over HTTPS to the server; the App does not store your password in persistent local storage. |
| Ship onboard record fields (e.g. vessel name, sign-on/sign-off dates, company name, local agent details) | Submitted to the academy backend as part of official sea service reporting. |
3.2 Received from the academy backend after sign-in
Examples (depending on what the server returns):
- Name, email, profile photo
- Academic number, blood group, session, faculty, batch, and other details.
- Academic standing and performance data
- Existing ship onboard records
3.3 Stored on your device
- Session token (and related auth state) used to call protected APIs, stored using on-device storage and app state persistence so you stay signed in until you log out or the session expires.
- The App is configured with
android:allowBackup="false"in the Android manifest to reduce backup-related exposure of app data (device and OEM behavior may still vary).
3.4 Technical and support-related information
- Network status (connected / disconnected) via
@react-native-community/netinfo— used only to reflect connectivity in the UI, not sold or used for advertising. - When you choose “Email” support from the dashboard, the App may open your default mail app with a pre-filled message that can include: cadet name and academic identifiers from your profile, app version, device model, OS version, and a device identifier string from
react-native-device-info, to help staff diagnose issues. Sending that email is your choice; you may edit or remove any line before sending.
3.5 Information that may be collected on the server
Your IP address and request metadata are typically logged by web servers and APIs. Sea service records in the backend may also be associated with fields such as IP address or geographic coordinates if the academy’s API records them when a record is created or updated (even if the mobile App does not request GPS permission in its current form). [INSERT] Confirm with your backend team and adjust this sentence to match production behavior.
4. How we use information
We use the information above to:
- Authenticate you and maintain your session
- Display profile and academic information
- Sync ship onboard records with academy records
- Operate support channels and improve reliability of the App
- Comply with legal obligations applicable to the academy and its training records
We do not use the App to show third-party advertising or to sell personal data.
5. Legal bases (if you have users in the EEA/UK)
Where applicable (e.g. GDPR), we rely on: performance of a contract (providing the cadet portal), legitimate interests (security, support, service improvement), and legal obligation (maritime training and record-keeping).
6. Sharing and third parties
| Recipient | Why |
|---|---|
| Academy backend / IT provider | Hosting and processing of cadet data under the academy’s direction. The App currently talks to APIs under a configurable base host (see Section 10). |
| Google (Maps) | If you tap the address row on the dashboard, the App may open Google Maps in the browser with a search query for the academy address. Google’s handling of data is governed by Google’s privacy policy. |
| Your email provider | If you send a support email, your provider processes the message under their terms. |
7. Security
- Sign-in and API calls use HTTPS (
TLS) to the configured server. - We store the user’s session after login.
- You should log out on shared devices. Uninstalling the App may not erase all server-side records; those remain under academy policy.
8. Retention and deletion
- Server-side: Cadet and sea service data are retained according to Bangladesh Marine ACADEMY Pabna's RECORDS RETENTION POLICY.
- Device-side: Logging out clears local auth state as implemented in the App; you may also uninstall the App to remove local data.
9. Your rights
Depending on your country, you may have rights to access, correct, delete, restrict, or object to certain processing, and to lodge a complaint with a supervisory authority. Requests should be directed to academic@macademypabna.gov.bd. We may need to verify your identity before responding.
10. Data controller & contact
Data controller: Bangladesh Marine Academy Pabna
Address: Rajnarayanpur (Nagarbari), Bera, Pabna, Bangladesh, 6683
Email: commandantpabna@gmail.com
Phone: +8801796-977661
Processor / technical contact: rajIT Solutions Ltd. — info@rajit.net
11. Children
The App is aimed at cadets in a formal academy setting, not young children. If you believe a child has provided personal data without appropriate authority, contact us at child.safety@macademypabna.gov.bd and we will take appropriate steps.
12. International transfers
If servers or processors are located outside your country, transfers may be protected by appropriate safeguards.
13. Changes to this policy
We may update this Privacy Policy from time to time. We will post the new version at changelogs and update the “Last updated” date. Continued use of the App after changes may constitute acceptance, where permitted by law.