How SAPSync Works

Security and Transparency First

EduMate's SAPSync feature bridges the gap between your university's official portal and the EduMate app, giving you instant access to your attendance and timetable. We understand that your university credentials are sensitive, which is why SAPSync is built from the ground up with a focus on security and data minimization.

1. No Server Involvement

Your password is never sent to our servers. When you log in using SAPSync, your credentials are only used locally on your device to communicate directly with the university's portal. Because the sync happens entirely on your phone, your credentials never pass through EduMate's backend systems.

2. How the Data is Fetched

We use a secure, automated background process running directly on your mobile device. It securely logs into the portal on your behalf, extracts the necessary timetable and attendance data locally, and displays it in the app. There is no middleman.

3. Local Storage Only

To keep you logged in on your own device without needing to type your password every day, your SAP credentials are encrypted and stored locally in your phone's Secure Enclave/Keystore. They never leave your device again except during a manual data refresh.

4. Why Your Data is Not at Risk

• No Backend Processing: Because the sync happens entirely on your device, we have absolutely no access to your SAP portal password.
• Direct Communication: Your app communicates directly with the university portal over a secure HTTPS/TLS connection, just like a normal web browser.
• Device-Level Security: The saved credentials on your phone are protected by your device's native hardware encryption (Keystore/Keychain).

If you have any further questions about SAPSync security, please contact us at edumate.admin.support@gmail.com.