Privacy
What we store, and who can see it
Last reviewed: July 2026
The Petarian Alumni Network exists so that Petarians can find each other. That only works if the register holds real contact details — and it is only reasonable to ask for those if you control who sees them. This page explains both sides of that.
What we hold
Everything in your record comes from you, entered when you register. It mirrors the Cadet College Petaro file record, because that is what the Secretariat checks your submission against.
| What | Why |
|---|---|
| KitNo, official name, house, joining date, passing year | To verify you against the CCP file record. These are the five fields the Secretariat checks; changing any of them later sends your record back for re-verification. |
| Email address | Your login, and how we tell you about your verification. Required. |
| Cell number | Required by the register. You can hide it from other members. |
| Appointments, organisation, position, addresses, city, country, photograph | Optional. They make you findable by batch, place and industry. |
| Social profile links | Optional, and controlled by a single switch that shows or hides all of them at once. |
| Device token, if you use the mobile app | To send you a push notification. Removed when you sign out. |
Who can see it
Before you are verified
Nobody but you and the Secretariat. An unverified record does not appear in the directory or in any search, and the directory itself stays locked to you until your record is approved.
After you are verified
Your record has one of three visibility settings:
- Petarians — the default. Only other verified Petarians can find you.
- Public — your record can be found by anyone with an account on the Network, including Petarians whose own record has not been verified yet. It is not visible to people who are not signed in: the directory cannot be read without an account at all. You have to choose this setting deliberately.
- Private — you do not appear in the directory at all. You can still browse it and connect with others.
Separately from that setting, you can hide your cell number, email address, residential address and office address individually.
How hiding actually works
When another member views your profile, the server builds the response and removes the hidden fields before sending it. They are absent from the data the app receives, not merely left out of what it draws. There is no version of the app, and no way of calling the API, that returns a field you have hidden. This is enforced in the database rather than in the app, which is what makes it a guarantee rather than an intention.
The Secretariat
Secretariat staff can see your full record, including fields you have hidden from other members. This is necessary and limited: they cannot verify a record against the college file if half of it is concealed. Every action they take — approving, rejecting, correcting, exporting — is written to an append-only audit log with who did it and when. That log cannot be edited or deleted, including by them.
What we do not do
- We do not sell your data, and we do not share it with advertisers.
- We do not add you to the register on your behalf. Every record is self-registered.
- We do not use your contact details to market anything unrelated to the college and the association.
Deleting your record
You can request deletion from the app. Your record is removed within 30 days of the request. The audit log keeps the fact that a decision was made — that history is what makes the register trustworthy — but the entries are anonymised: the link to you is severed and your email address and phone number are stripped from them.
Security
- All traffic is encrypted in transit (TLS 1.2 or newer).
- Passwords are hashed with Argon2id and never stored in readable form.
- Sign-in attempts are rate limited, and six failures lock an account for fifteen minutes.
- Secretariat accounts require multi-factor authentication.
- The database is backed up nightly, encrypted, and kept for 30 days.
Getting in touch
For anything about your own record — a correction, a deletion, or a question about what is held — contact the Secretariat. If you cannot find your KitNo, contact them before registering rather than guessing: a KitNo that belongs to someone else will be flagged as a duplicate.