Privacy Policy – SPC2026
This privacy policy applies to the SPC2026 mobile application (hereby referred to as "Application") for mobile devices, created by the Thai Physics Society (hereby referred to as "Service Provider") as a free service. This service is intended for use "AS IS".
Information Collection and Use
The Application is designed to minimise data collection. The Application does not collect analytics, track usage behaviour, or gather device identifiers such as IP address, advertising ID, or operating system information.
The only personal information collected is when you choose to sign in with your Indico account. Upon sign-in, the Application retrieves the following information from the Indico server (indico.thaiphysoc.org) on your behalf:
- Full name
- Email address
- Affiliation
- Your contributions (talks, papers) associated with SPC2026
This information is stored locally on your device and is used solely to personalise your experience within the Application (e.g. displaying your profile and highlighting your sessions in the agenda). It is never sold, rented, or shared with third parties.
Sign-in is entirely optional. The Application is fully functional without an account.
Camera Permission
The Application requests access to your device's camera for the sole purpose of scanning QR codes to import your conference registration. The camera is activated only when you explicitly initiate a QR code scan. No images or video are captured, stored, recorded, or transmitted to any server or third party. Camera data is processed entirely on-device and discarded immediately after the QR code is read.
Data Storage
All data is stored locally on your device:
- OAuth tokens – stored in encrypted secure storage and used only to authenticate requests to the Indico server on your behalf.
- Profile information (name, email, affiliation, contributions) – stored in the Application's private document directory.
- Conference timetable – cached locally so the schedule is available offline. This data is public conference information.
None of this data is transmitted to any server other than the Indico server operated by the Thai Physics Society.
Third-Party Access
The Application does not use any third-party analytics, advertising, or tracking SDKs. No personal data is shared with third parties.
The Application communicates only with the Indico conference management server operated by the Thai Physics Society (indico.thaiphysoc.org) to fetch the conference schedule and, when signed in, your profile and contributions.
The Service Provider may disclose information only:
- as required by law, such as to comply with a subpoena or similar legal process;
- when necessary in good faith to protect the rights or safety of users or others, or to respond to a government request.
Opt-Out Rights
You can remove all locally stored data by signing out within the Application, which deletes your profile and OAuth tokens from your device. You may also uninstall the Application at any time using the standard process available on your device or via the app marketplace.
Data Retention Policy
Data is stored on your device for as long as you use the Application. Signing out removes your profile and authentication tokens immediately. If you would like any data associated with your account to be deleted, please contact the Service Provider at surakawin@slri.or.th and they will respond within a reasonable time.
Children
The Application is intended for conference attendees and is not directed at children under the age of 13. The Service Provider does not knowingly collect personally identifiable information from children. If you believe a child has provided personal information through the Application, please contact the Service Provider at surakawin@slri.or.th so the necessary actions can be taken.
Security
OAuth tokens are stored using the platform's encrypted secure storage. All communication with the Indico server is conducted over HTTPS. The Service Provider takes reasonable measures to safeguard the information stored on your device.
Changes
This Privacy Policy may be updated from time to time. The Service Provider will notify you of any changes by updating this page. You are advised to review this Privacy Policy periodically. Continued use of the Application after any changes constitutes acceptance of the updated policy.
This privacy policy is effective as of 2026-04-28.
Your Consent
By using the Application, you consent to the processing of your information as described in this Privacy Policy.