Privacy Policy for CampusOne

Effective Date: 1 April 2026

CampusOne is a mobile application that provides authorised students, parents, guardians, and institutional users with access to selected information and services from the institution's College Management System operated using Maestro platform.

CampusOne is provided and maintained by Maestro AsiaPac Services Sdn. Bhd. as part of its College Management System services for educational institutions.

CampusOne is initially used by Kolej Yayasan UEM (KYUEM) and may also be used by other educational institutions that use the same College Management System.

CampusOne does not provide public self-registration. User accounts and related records are created and maintained by the relevant educational institution through the College Management System. The CampusOne mobile app allows authorised users to securely access relevant information that already exists in that system.

This Privacy Policy explains how CampusOne accesses, uses, processes, stores, and protects information when you use the mobile app.

1. Who We Are

CampusOne is provided and maintained by Maestro AsiaPac Services Sdn. Bhd.. The app is used by participating educational institutions to provide authorised users with access to selected institution-related information and services.

Each participating institution is responsible for creating and maintaining its authorised user accounts and institution-related records in the College Management System. CampusOne allows authorised users to securely access selected information from that system according to their role and permissions.

2. Who Can Use CampusOne

CampusOne is intended for authorised users only, including students, parents, guardians, teachers, staff, and authorised institutional personnel.

Users are pre-existing users in the relevant institution's College Management System. CampusOne does not allow users to create their own account directly through the mobile app unless such functionality is specifically introduced in the future.

CampusOne is primarily intended for students, parents, guardians, and institutional users who are likely to be aged 18 and above. Some student users may be below 18 depending on their enrolment status. Where applicable, access for younger users is provided in connection with their enrolment and the institution's administrative processes.

3. Information Accessed, Collected, or Processed by CampusOne

CampusOne itself does not create public user accounts or collect public registration information through the mobile app. User accounts and related student, parent, guardian, teacher, staff, and institutional records are created and maintained in the relevant educational institution's College Management System.

When an authorised user signs in, CampusOne accesses, displays, transmits, stores, or processes selected information from the College Management System according to the user's role and permissions.

Depending on the features enabled by the institution, CampusOne may access, collect, or process the following types of information:

• User IDs, usernames, student IDs, parent IDs, staff IDs, or other login identifiers
• User name and account information
• Email addresses used for account access, password request, support, or notification purposes
• Student profile information
• Parent or guardian profile information
• Teacher, staff, or authorised personnel profile information
• Relationship between parent or guardian and student
• Timetable, schedule, or academic information
• Attendance or college activity records
• Announcements, notices, and messages made available by the institution
• Leave, Exeat, permission, or request records
• Supporting documents or file attachments submitted for selected requests, such as Exeat applications where supporting documentation is required
• Profile photos uploaded by users, where this feature is enabled
• User preferences saved in the app or on the server
• App interaction information, such as modules accessed, functions used, or actions performed in the app
• Other institution-related information made available through the College Management System

CampusOne may also process limited technical information necessary for app operation, security, diagnostics, notifications, and token management, such as:

• Device type and operating system version
• App version
• Login activity
• Error logs or diagnostic information
• Device identifiers used for login session management, notification delivery, security, and token management
• Push notification tokens, where notifications are enabled

CampusOne does not collect precise GPS location data unless a specific feature requiring location access is introduced and the user grants permission.

4. How We Use Information

Information accessed, collected, or processed through CampusOne is used to provide authenticated users with relevant institution-related services. This may include:

• Authenticating users and protecting account access
• Identifying the user's role, such as student, parent, guardian, teacher, staff, or administrator
• Providing users with access to relevant institution information based on their role and permissions
• Displaying announcements, notices, schedules, and other institution-related updates
• Supporting administrative processes such as attendance, leave, Exeat, or permission-related workflows
• Allowing users to submit selected requests or supporting documents where required
• Allowing users to upload or update profile photos where this feature is enabled
• Sending password request emails, notification emails, or other service-related communications
• Sending push notifications for important institution-related updates, reminders, approvals, rejections, or alerts
• Saving user preferences and improving the user experience
• Maintaining app security and preventing unauthorised access
• Managing login sessions, device tokens, and push notification tokens
• Collecting basic usage statistics to understand app usage and improve app reliability
• Diagnosing technical issues and fixing bugs
• Complying with applicable legal, regulatory, contractual, or institutional requirements

5. Email and Push Notifications

CampusOne may send email notifications or password request emails to users, parents, guardians, teachers, staff, or other authorised recipients where required for app functionality or institution-related communication.

CampusOne may also send push notifications for selected events, such as Exeat submissions, approvals, rejections, reminders, alerts, or other important institution-related updates.

Users may control push notification permissions through their device settings. Disabling notifications may affect the ability to receive timely updates from the institution.

6. File Attachments and Profile Photos

Some CampusOne features may allow users to upload files, documents, or photos. For example, certain Exeat requests may require supporting documents, and users may be allowed to upload or update their profile photo.

Files, documents, or photos uploaded through CampusOne are used only for the relevant institution-related purpose, such as reviewing a request, maintaining a user profile, or supporting the applicable administrative process.

7. App Activity and Preferences

CampusOne may collect basic app activity information, such as modules accessed, functions used, or actions performed in the app. This information may be used for app functionality, troubleshooting, audit, usage statistics, security, and service improvement.

CampusOne may also store user preferences, either on the device or on the server, to provide a better and more consistent user experience.

8. Data Sharing

CampusOne does not sell personal data.

CampusOne does not share personal data with advertisers.

CampusOne does not use user data for advertising profiling.

Personal data is used only for legitimate institution-related purposes. It may be accessed by authorised personnel of the relevant educational institution and by authorised service providers where necessary to operate, maintain, host, secure, or support the app and the underlying College Management System.

Where service providers are used, they are expected to process information only as necessary to provide the relevant services and to protect the information appropriately.

9. Advertising and Marketing

CampusOne does not display third-party advertisements.

CampusOne does not use user data for advertising profiling or third-party marketing.

10. Data Storage and Security

CampusOne uses reasonable technical and organisational measures to protect user information from unauthorised access, loss, misuse, alteration, or disclosure.

Data transmitted between the CampusOne mobile app and the server is encrypted in transit using secure communication protocols, where applicable.

Access to CampusOne is restricted to authorised users with valid login credentials. Users are responsible for keeping their login credentials confidential and should not share their account details with others.

Information displayed through CampusOne is generally stored and managed within the relevant institution's College Management System and associated systems used to operate the service.

11. Data Retention

Personal information is retained for as long as necessary to support institution operations, provide CampusOne services, comply with legal or regulatory obligations, resolve disputes, and maintain accurate administrative records.

Some records, such as student records, parent or guardian records, attendance records, Exeat records, supporting documents, uploaded profile photos, activity records, and audit records, may need to be retained in accordance with the relevant institution's administrative, legal, regulatory, contractual, or record-keeping requirements.

When information is no longer required, it may be deleted, anonymised, archived, or retained in accordance with the relevant institution's data retention practices and applicable legal requirements.

12. Account and Data Requests

CampusOne does not allow users to create accounts directly through the mobile app. User accounts and related student, parent, guardian, teacher, staff, and institutional records are created and maintained by the relevant educational institution through the College Management System.

Users who wish to request changes, correction, restriction, or deletion of account information or associated records should contact the relevant educational institution or CampusOne support. Some records may need to be retained where required for administrative, legal, regulatory, contractual, or institutional record-keeping purposes.

Requests may be subject to verification of identity and applicable legal, regulatory, contractual, or institutional obligations.

13. User Rights and Requests

Users may contact the relevant institution or CampusOne support contact to request assistance regarding their personal information. This may include requests to:

• Access personal information associated with their account
• Correct inaccurate or outdated information
• Ask questions about how their information is used
• Request deletion or restriction of information, where applicable
• Request assistance with account access or notification settings

Where the requested information is maintained by the educational institution, the request may need to be handled by the relevant institution. Maestro AsiaPac Services Sdn. Bhd. may assist the institution where appropriate and where permitted.

14. Children and Minors

CampusOne is not intended for general public use by children. The app is intended only for authorised users connected to an educational institution using the College Management System.

Some student users may be below 18. Where this applies, the processing of their information is related to their enrolment, institution administration, parent or guardian communication, and other education-related services.

15. Links to Other Websites or Services

CampusOne may contain links to external websites or services where relevant. We are not responsible for the privacy practices of external websites or services that are not operated by us or by the relevant educational institution.

Users should review the privacy policies of those external services before providing any personal information.

16. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in CampusOne, the College Management System, institution processes, legal requirements, or operational practices.

The updated version will be made available through the published Privacy Policy URL. The effective date at the top of this policy will indicate when it was last updated.

17. Contact Us

For questions about this Privacy Policy or how CampusOne handles information, please contact: