Application – Privacy Policy

Last updated: January 11, 2025

The Conférence Régionale des Écoles d’Ingénieur du Québec (CREIQ) respects your privacy and is committed to protecting your personal data. This privacy policy explains how we collect, use, share, and protect your information when you use the Jeux de Génie mobile application.

By using our application, you accept the practices described in this policy.

1. Information We Collect

1.1 Information You Provide to Us

During account creation:
  • Email address
  • Password (stored securely and encrypted)
  • Delegation (institution) – optional
  • Invitation code (special group) – optional
During application use:
  • Profile information (delegation, special group)
  • Events added to your personal agenda
  • Notification preferences

1.2 Automatically Collected Information

Technical data:
  • Unique device identifier
  • Operating system and version
  • Push notification token (Firebase Cloud Messaging)
  • Last connection timestamp
Usage data:
  • Pages viewed in the application
  • Events viewed
  • Actions performed (adding/removing events from agenda)

1.3 Requested Permissions

Android:
  • Notifications (POST_NOTIFICATIONS) – To receive event notifications
  • Exact alarms (SCHEDULE_EXACT_ALARM) – For event reminders 15 minutes before
  • Auto-start (RECEIVE_BOOT_COMPLETED) – To maintain reminders after restart
  • Storage – To download and view documents
iOS:
  • Notifications – To receive event notifications
  • Background notifications – For event reminders

2. How We Use Your Information

2.1 Provide and Improve Our Services

  • Create and manage your user account
  • Personalize your experience based on your delegation and group
  • Display relevant events in your agenda
  • Allow viewing of schedules, locations, and competitions

2.2 Communications

Send push notifications regarding:

  • Mandatory events for all participants
  • Events specific to your delegation
  • Events specific to your special group
  • General organization announcements
  • Event reminders (15 minutes before)

2.3 Security and Compliance

  • Prevent fraud and abuse
  • Comply with our legal obligations
  • Protect the rights and safety of all users

3. Sharing Your Information

3.1 We Never Sell Your Data

We never sell, rent, or share your personal data for commercial purposes.

3.2 Sharing with Service Providers

We only share your information with the following service providers necessary for the application’s operation:

Firebase (Google LLC)
  • Services used: Authentication, Cloud Firestore, Cloud Storage, Cloud Messaging
  • Data shared: Email, user identifier, notification token, profile data
  • Purpose: Authentication, data storage, notification sending
  • Location: Servers located in the United States
  • Privacy policy: https://firebase.google.com/support/privacy

3.3 Sharing Within the Organization

Jeux de Génie administrators can access:

  • Anonymized usage statistics
  • Number of users per delegation and group
  • Data necessary to send targeted notifications

Administrators cannot:

  • View your passwords
  • Access your personal data without legitimate justification

4. Data Retention

4.1 Retention Period

  • Active account: Your data is retained as long as your account is active
  • After account deletion: Your data is deleted within 30 days
  • Anonymized data: Anonymized statistics may be retained indefinitely

4.2 Automatic Deletion

The following temporary data is automatically deleted:

  • Expired notifications: 30 days after sending
  • Past events: retained 1 year after the event date
  • Activity logs: 90 days

5. Security of Your Data

5.1 Technical Security Measures

  • Password encryption with bcrypt
  • Secure HTTPS/TLS communications
  • Firebase authentication with secure tokens
  • Firestore security rules to control data access
  • Secure file storage in Firebase Cloud Storage

5.2 Your Responsibilities

To protect your account:

  • Choose a strong and unique password
  • Never share your password
  • Log out on shared devices
  • Immediately report any suspicious activity

6. Your Rights

In accordance with data protection laws, you have the right to:

6.1 Access and Consultation

  • View the personal data we hold about you
  • Obtain a copy of your data

6.2 Rectification

  • Correct inaccurate data
  • Update your profile information directly in the application

6.3 Deletion

  • Delete your account and all associated data
  • Withdraw your consent at any time

6.4 Portability

  • Receive your data in a structured, machine-readable format
  • Transfer your data to another service

6.5 How to Exercise Your Rights

To exercise any of these rights, contact us at:

7. Push Notifications

7.1 Types of Notifications

You may receive:

  • Global notifications: Sent to all users
  • Delegation notifications: Sent to your institution
  • Group notifications: Sent to your special group
  • Event reminders: 15 minutes before events in your agenda

7.2 Managing Notifications

In the application:
  • Modify your delegation in your profile
  • Modify your special group in your profile
  • Manage your personal agenda (add/remove events)
At the system level:
  • Android: Settings → Apps → Jeux de Génie → Notifications
  • iOS: Settings → Notifications → Jeux de Génie

8. Children’s Privacy

8.1 Minimum Age

The application is intended for engineering students, generally 18 years or older. If you are under 18, you must obtain consent from your parents or legal guardians before using the application.

8.2 Collection of Minors’ Data

We do not knowingly collect personal data from persons under 13 years of age. If we discover that a child under 13 has provided us with personal data, we will immediately delete this information.

9. International Data Transfers

9.1 Data Hosting

Your data is hosted on Firebase (Google) servers located primarily in the United States. Google Firebase is certified under the EU-U.S. Data Privacy Framework.

9.2 Protection During Transfers

Data transfers to the United States are protected by:

  • European Commission standard contractual clauses
  • Firebase’s technical and organizational security measures
  • Encryption of data in transit

10. Changes to This Policy

10.1 Notification of Changes

We may modify this privacy policy occasionally. In case of significant changes, we will inform you by:

  • Push notification in the application
  • Message displayed during your next login
  • Email to your registered address

10.2 Version History

  • Version 1.0 (January 11, 2025) – Initial policy

11. Jurisdiction-Specific Provisions

11.1 Quebec (Bill 25)

In accordance with Quebec’s Act respecting the protection of personal information in the private sector:

  • You have the right to access and correct your personal information
  • You can request de-indexing of your data in certain circumstances
  • You will be informed in case of a privacy incident involving your data

12. Contact

Questions and Requests

For any questions regarding this privacy policy or to exercise your rights:

Conférence Régionale des Écoles d’Ingénieur du Québec (CREIQ)

Data Protection Officer

For specific data protection questions:

Complaints

If you believe your data protection rights have been violated, you can file a complaint with:

Acceptance of This Policy

By using the Jeux de Génie Mobile application, you acknowledge that you have read, understood, and accepted this privacy policy.

© 2025 CREIQ – All rights reserved