HEPIQ This Privacy Policy describes our policies and procedures on the collection, use, and disclosure of your information when you use the HEPIQ Application (the service) and tells you about your privacy rights and how the law protects you.
- We use your personal data to provide and improve the Service. By using the Service, you agree to the collection and use of information in accordance with this Privacy Policy.
- Account : A unique account created for you to access our Service or parts of our Service.
- Application : HEPIQ the software program provided by the Ministry.
- Ministry : (referred to as either 'the Ministry', 'We', 'Us', or 'Our' in this Agreement): The Iraqi Ministry of Higher Education and Scientific Research.
- Location : located at Baghdad A Rusafa Educational Complex, Al-Tayaran Square, near the White Palace.
- Country : Iraq
- Device : Any device that can access the Service, such as a computer, a cellphone, or a digital tablet.
- Personal Data : Any information that relates to an identified or identifiable individual
- Service : The Application
- Service Provider : Any natural or legal person who processes the data on behalf of the Ministry.
- UsageData : Data collected automatically, either generated by the use of the Service or from the Service infrastructure itself.
- You : The individual accessing or using the Service.
While using our Service, we require you to provide us with certain personally identifiable information necessary for student registration and verification. This includes, but is not limited to:
For Iraqi Students, the following documents and information are required
For Non-Iraqi Students, the following documents and information are required:
We acknowledge the sensitive nature of certain personal information, including:
- Identity Verification: To securely authenticate your identity during the registration process.
- Legal Compliance: To fulfill legal obligations and prevent fraud.
- Access to Services: To enable you to access specific features within the Application.
You can enable or disable NFC access at any time through your device settings. Disabling NFC access may limit certain functionalities of the Service.Information Collected While Using the Application
- Camera Access: Allows the app to capture photos of documents and personal images necessary for verification and other functionalities.
-
- Photo Library Access: Enables the app to upload images from your device.
-
- Microphone Access: Required for video recording with audio within the app.
- FaceID Access: Used to enhance account security and prevent unauthorized access by utilizing biometric authentication.
- NFC Access: Allows the app to read MRZ data from your National ID Card or Passport for identity verification.
We collect this information with your prior permission to enable specific functionalities within the app. You can manage these permissions through your device settings.
We may collect information regarding your location to facilitate the Attendance feature
- Approximate Location
- Precise Location
This data is used to accurately record student attendance. Location data is collected only during attendance registration and is not tracked continuously.
Usage Data is collected automatically when using the Service and may include:
Device Information: Such as IP address, device type, operating system, and unique device identifiers.
Log Data: Details of how you use the app, including timestamps, pages visited, and features accessed.
- To provide and maintain our Service: Including to monitor and analyze usage to improve functionality and user experience..
- To manage your Account: To facilitate your registration and provide access to app features.
- To verify your identity: Using the information provided, including documents uploaded and MRZ data collected via NFC, to authenticate your identity securely.
-To comply with legal and regulatory requirements: Processing sensitive information to ensure compliance with Iraqi laws and regulations.
- To record attendance: Using your location data and NFC access to verify and record student attendance accurately.
- To secure your Account: Utilizing Face ID access for biometric authentication to prevent unauthorized access.
- Consent You have given explicit consent for us to process your Personal Data for specific purposes.
- Performance of a Task in the Public Interest: Processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the Ministry.
- : Legal Obligation: Processing is necessary for compliance with a legal obligation to which we are subject.
The Ministry will retain your Personal Data only for as long as necessary for the purposes outlined in this Privacy Policy. The retention periods are determined based on::
Legal Requirements: To comply with applicable laws and regulations.
Operational Needs: To maintain accurate records for analysis and audit purposes.
User Requests: We will delete or anonymize Personal Data upon your request unless we are legally required to retain it.
We prioritize the security of your Personal Data and implement appropriate technical and organizational measures to protect it against unauthorized access, alteration, disclosure, or destruction. Measures include:
- Encryption: All sensitive data, including document images and MRZ information, is encrypted during transmission and storage.
- SecureStorage: Personal Data is stored securely with restricted access to authorized personnel only.
- Access Controls: Strict access controls to Personal Data, limited to authorized Ministry personnel involved in education administration.
- Regular Audits: Periodic security assessments and updates to our security practices.
Please note that while we strive to protect your Personal Data, no method of electronic storage or transmission over the Internet is completely secure.
You have the following rights regarding your Personal Data:
- Access: Request access to the Personal Data we hold about you.
- Correction: Request correction of inaccurate or incomplete Personal Data.
- Deletion: Request deletion of your Personal Data under certain conditions.
- Objection: Object to the processing of your Personal Data in certain circumstances.
- Withdraw Consent: Withdraw consent where we are relying on it to process your Personal Data.
To exercise these rights, please contact us using the information provided in the 'Contact Us' section.
If you have any questions or concerns about this Privacy Policy or our data practices, please contact us::