Privacy Policy

1. Who provides the app

Camera Point - CPKC is a role-based learning and administration app used for Camera Point & Knowledge Centre (CPKC) activities. It is maintained under the Wardana Technologies brand and commercially and technically operated by Anthony Ravin Gunawardana, sole proprietor trading as ARG & Associates, under licence from the Wardana Technologies brand and intellectual-property owner, Michael Janmaka Abeyweera Gunawardana.

CPKC determines and administers many institutional purposes, including enrolment, teaching, attendance, assessment, certification, and staff access. Depending on the record and the governing arrangement, CPKC and the technical operator may have separate or shared data-protection responsibilities. The definitive allocation remains subject to the applicable CPKC service agreement and law.

Privacy and technical requests may be sent to wardanatechnologies@gmail.com.

2. Information handled by the service

• Account and profile information: name, registered email address, phone number where provided, role, profile image, learner or staff identifiers, enrolment links, and account status.
• Learning and participation records: courses, timetables, attendance, lesson progress, quiz and assessment responses, assignments, submissions, feedback, grades, surveys, placement activity, and certification records.
• User-selected files and content: profile images, documents, images or videos, assignment evidence, course resources, payment-proof images, equipment inspection images, portfolio material, and text deliberately submitted through an authorized workflow.
• Operational records: membership and fee status, payment references and review status, equipment requests and loans, bookings, support requests, notifications, marketplace or opportunity activity where enabled, and administrative audit events. The current app does not collect payment-card or online-banking credentials.
• Security and technical information: authentication sessions, access and audit events, app or device information needed for compatibility and troubleshooting, and network/request metadata such as IP address that cloud infrastructure providers may process when delivering the service.

3. Why information is used

• Authenticate users and provide the correct student, lecturer, or administrator workspace.
• Deliver learning, attendance, assessment, certification, equipment, membership, scheduling, support, and approved operational workflows.
• Protect accounts, enforce role and record permissions, investigate misuse, and preserve required audit history.
• Send or display service, learning, scheduling, support, and account-related communications.
• Maintain institutional records, respond to requests, troubleshoot reliability, and meet applicable legal or contractual duties.

The current Android release does not contain third-party advertising or behavioural-advertising SDKs, and personal information is not sold.

4. Access, sharing, and service providers

Information is made available only to the user and authorized CPKC students, lecturers, administrators, operators, or other participants where a workflow and permission rule require it. Access is role- and relationship-based.

• Supabase: authentication, hosted Postgres database, file storage, and server-side functions.
• Google Play: Android distribution, Play App Signing, device compatibility, and Play-provided security services.
• Google Firebase Hosting: delivery and security of these public privacy, deletion, and support pages.

These providers may process technical request information under their own service terms and privacy commitments. Information may also be disclosed where required by law, to protect users or the service, or during a legitimate organizational transfer with appropriate safeguards.

5. Storage and security

Controls evidenced in the current service include HTTPS encryption in transit, authenticated sessions, database row-level security, role-based functions, private storage for sensitive files, access/audit records, and protected administrative operations. Saved-account switching stores refresh-session material in platform-secure storage and does not store account passwords.

Cloud providers may process or back up information outside Sri Lanka. Reasonable safeguards and reputable providers are used, but no online service can guarantee absolute security.

6. Retention

Information is retained while needed to provide an authorized account and for legitimate academic, certification, financial, safeguarding, security, dispute, audit, and institutional-record purposes. When it is no longer required, it should be deleted, anonymized, or access-restricted.

Current limitation: a final category-by-category retention schedule has not yet been published for CPKC. Where a verified deletion request cannot be completed in full, the response will identify the affected record category, the reason it must be retained, and the applicable period or retention criterion. Data will not be retained merely because deletion is inconvenient.

7. Your choices and rights

Subject to identity verification and applicable law, users may request access, correction, restriction, or deletion of their personal information and may ask how it is used. Use the dedicated account and data-deletion page to request deletion. We aim to acknowledge requests promptly and complete eligible deletion within 30 days after verification, or explain why additional time or lawful retention is required.

8. Teen learners

The Play listing targets users aged 13 and over. Accounts are issued through authorized CPKC enrolment or staff processes; the app does not provide public self-registration. CPKC is responsible for obtaining any learner or parent/guardian permission required for enrolment, images, learning records, and app use. Users under 18 should involve a parent, guardian, or authorized CPKC representative when exercising privacy rights where local law requires it.

9. Changes and contact

This policy may be updated when the app, providers, operating arrangements, or legal requirements change. Material changes will be communicated through appropriate app or institutional channels.

Contact: wardanatechnologies@gmail.com · Camera Point - CPKC support