[MBL-19874][All] Privacy Consent dialog

apps/parent/src/main/java/com/instructure/parentapp/di/feature/CookieConsentModule.kt

@@ -0,0 +1,48 @@
+/*
+ * Copyright (C) 2026 - present Instructure, Inc.
+ *
+ *     This program is free software: you can redistribute it and/or modify
+ *     it under the terms of the GNU General Public License as published by
+ *     the Free Software Foundation, version 3 of the License.
+ *
+ *     This program is distributed in the hope that it will be useful,
+ *     but WITHOUT ANY WARRANTY; without even the implied warranty of
+ *     MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ *     GNU General Public License for more details.
+ *
+ *     You should have received a copy of the GNU General Public License
+ *     along with this program.  If not, see <http://www.gnu.org/licenses/>.
+ */
+package com.instructure.parentapp.di.feature
+
+import com.instructure.pandautils.features.cookieconsent.AnalyticsConsentHandler
+import com.instructure.pandautils.features.cookieconsent.CookieConsentNamespace
+import dagger.Module
+import dagger.Provides
+import dagger.hilt.InstallIn
+import dagger.hilt.components.SingletonComponent
+import sdk.pendo.io.Pendo
+
+@Module
+@InstallIn(SingletonComponent::class)
+class CookieConsentModule {
+
+    @Provides
+    fun provideCookieConsentNamespace(): CookieConsentNamespace {
+        return CookieConsentNamespace.PARENT
+    }
+
+    @Provides
+    fun provideAnalyticsConsentHandler(): AnalyticsConsentHandler {
+        return object : AnalyticsConsentHandler {
+            override fun onConsentGranted() {
+                // Parent app does not schedule pandata upload
+                // Pendo session will be started on next app launch via SplashViewModel
+            }
+
+            override fun onConsentRevoked() {
+                Pendo.endSession()
+            }
+        }
+    }
+}

apps/parent/src/main/java/com/instructure/parentapp/di/feature/LoginModule.kt

@@ -26,9 +26,11 @@ import com.instructure.canvasapi2.utils.Analytics
 import com.instructure.canvasapi2.utils.ApiPrefs
 import com.instructure.loginapi.login.LoginNavigation
 import com.instructure.loginapi.login.features.acceptableusepolicy.AcceptableUsePolicyRouter
+import com.instructure.loginapi.login.features.cookieconsent.CookieConsentRouter
 import com.instructure.loginapi.login.util.LoginPrefs
 import com.instructure.pandautils.features.reminder.AlarmScheduler
 import com.instructure.parentapp.features.login.ParentAcceptableUsePolicyRouter
+import com.instructure.parentapp.features.login.ParentCookieConsentRouter
 import com.instructure.parentapp.features.login.ParentLoginNavigation
 import com.instructure.parentapp.features.login.SignInActivity
 import dagger.Module
@@ -59,6 +61,11 @@ class LoginModule {
     ): LoginNavigation {
         return ParentLoginNavigation(activity, alarmScheduler)
     }
+
+    @Provides
+    fun provideCookieConsentRouter(activity: FragmentActivity): CookieConsentRouter {
+        return ParentCookieConsentRouter(activity)
+    }
 }
 
 @Module

apps/parent/src/main/java/com/instructure/parentapp/features/login/ParentAcceptableUsePolicyRouter.kt

@@ -22,10 +22,10 @@ import androidx.fragment.app.FragmentActivity
 import com.instructure.canvasapi2.utils.Analytics
 import com.instructure.canvasapi2.utils.AnalyticsEventConstants
 import com.instructure.loginapi.login.features.acceptableusepolicy.AcceptableUsePolicyRouter
+import com.instructure.loginapi.login.features.cookieconsent.CookieConsentActivity
 import com.instructure.loginapi.login.tasks.LogoutTask
 import com.instructure.pandautils.features.reminder.AlarmScheduler
 import com.instructure.parentapp.R
-import com.instructure.parentapp.features.main.MainActivity
 import com.instructure.parentapp.features.webview.HtmlContentActivity
 import com.instructure.parentapp.util.ParentLogoutTask
 
@@ -42,8 +42,9 @@ class ParentAcceptableUsePolicyRouter(
     override fun startApp() {
         CookieManager.getInstance().flush()
 
-        val intent = Intent(activity, MainActivity::class.java)
+        val intent = Intent(activity, CookieConsentActivity::class.java)
         activity.intent?.extras?.let { intent.putExtras(it) }
+        intent.flags = Intent.FLAG_ACTIVITY_NEW_TASK or Intent.FLAG_ACTIVITY_CLEAR_TASK
         activity.startActivity(intent)
     }
 

apps/parent/src/main/java/com/instructure/parentapp/features/login/ParentCookieConsentRouter.kt

@@ -0,0 +1,33 @@
+/*
+ * Copyright (C) 2026 - present Instructure, Inc.
+ *
+ *     This program is free software: you can redistribute it and/or modify
+ *     it under the terms of the GNU General Public License as published by
+ *     the Free Software Foundation, version 3 of the License.
+ *
+ *     This program is distributed in the hope that it will be useful,
+ *     but WITHOUT ANY WARRANTY; without even the implied warranty of
+ *     MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ *     GNU General Public License for more details.
+ *
+ *     You should have received a copy of the GNU General Public License
+ *     along with this program.  If not, see <http://www.gnu.org/licenses/>.
+ */
+package com.instructure.parentapp.features.login
+
+import android.content.Intent
+import androidx.fragment.app.FragmentActivity
+import com.instructure.loginapi.login.features.cookieconsent.CookieConsentRouter
+import com.instructure.parentapp.features.main.MainActivity
+
+class ParentCookieConsentRouter(
+    private val activity: FragmentActivity
+) : CookieConsentRouter {
+
+    override fun startApp() {
+        val intent = Intent(activity, MainActivity::class.java)
+        activity.intent?.extras?.let { intent.putExtras(it) }
+        intent.flags = Intent.FLAG_ACTIVITY_NEW_TASK or Intent.FLAG_ACTIVITY_CLEAR_TASK
+        activity.startActivity(intent)
+    }
+}

apps/parent/src/main/java/com/instructure/parentapp/features/splash/SplashViewModel.kt

@@ -83,18 +83,20 @@ class SplashViewModel @Inject constructor(
                 }
             }
 
-            val sendUsageMetrics = repository.getSendUsageMetrics()
-            if (sendUsageMetrics) {
-                val userWithIds = repository.getSelfWithUuid()
-                val visitorData = mapOf(
-                    "locale" to apiPrefs.effectiveLocale,
-                )
-                val accountData = mapOf(
-                    "surveyOptOut" to featureFlagProvider.checkAccountSurveyNotificationsFlag()
-                )
-                Pendo.startSession(userWithIds?.uuid?.SHA256().orEmpty(), userWithIds?.accountUuid.orEmpty(), visitorData, accountData)
-            } else {
-                Pendo.endSession()
+            if (apiPrefs.mobileConsent) {
+                val sendUsageMetrics = repository.getSendUsageMetrics()
+                if (sendUsageMetrics) {
+                    val userWithIds = repository.getSelfWithUuid()
+                    val visitorData = mapOf(
+                        "locale" to apiPrefs.effectiveLocale,
+                    )
+                    val accountData = mapOf(
+                        "surveyOptOut" to featureFlagProvider.checkAccountSurveyNotificationsFlag()
+                    )
+                    Pendo.startSession(userWithIds?.uuid?.SHA256().orEmpty(), userWithIds?.accountUuid.orEmpty(), visitorData, accountData)
+                } else {
+                    Pendo.endSession()
+                }
             }
 
             val students = repository.getStudents()

apps/student/src/main/java/com/instructure/student/activity/CallbackActivity.kt

@@ -214,6 +214,8 @@ abstract class CallbackActivity : ParentActivity(), OnUnreadCountInvalidated, No
     }
 
     private suspend fun setupPendoTracking() {
+        if (!ApiPrefs.mobileConsent) return
+
         val user = userApi.getSelfWithUUID(RestParams(isForceReadFromNetwork = true)).dataOrNull
         val featureFlagsResult = FeaturesManager.getEnvironmentFeatureFlagsAsync(true).await().dataOrNull
         val sendUsageMetrics = featureFlagsResult?.get(FeaturesManager.SEND_USAGE_METRICS) ?: false

apps/student/src/main/java/com/instructure/student/di/LoginModule.kt

@@ -24,11 +24,13 @@ import com.instructure.canvasapi2.models.AccountDomain
 import com.instructure.canvasapi2.utils.ApiPrefs
 import com.instructure.loginapi.login.LoginNavigation
 import com.instructure.loginapi.login.features.acceptableusepolicy.AcceptableUsePolicyRouter
+import com.instructure.loginapi.login.features.cookieconsent.CookieConsentRouter
 import com.instructure.loginapi.login.util.LoginPrefs
 import com.instructure.pandautils.features.reminder.AlarmScheduler
 import com.instructure.pandautils.room.offline.DatabaseProvider
 import com.instructure.student.activity.SignInActivity
 import com.instructure.student.features.login.StudentAcceptableUsePolicyRouter
+import com.instructure.student.features.login.StudentCookieConsentRouter
 import com.instructure.student.features.login.StudentLoginNavigation
 import dagger.Module
 import dagger.Provides
@@ -59,6 +61,13 @@ class LoginModule {
     ): LoginNavigation {
         return StudentLoginNavigation(activity, databaseProvider, alarmScheduler)
     }
+
+    @Provides
+    fun provideCookieConsentRouter(
+        activity: FragmentActivity
+    ): CookieConsentRouter {
+        return StudentCookieConsentRouter(activity)
+    }
 }
 
 @Module

apps/student/src/main/java/com/instructure/student/di/feature/CookieConsentModule.kt

@@ -0,0 +1,65 @@
+/*
+ * Copyright (C) 2026 - present Instructure, Inc.
+ *
+ *     This program is free software: you can redistribute it and/or modify
+ *     it under the terms of the GNU General Public License as published by
+ *     the Free Software Foundation, version 3 of the License.
+ *
+ *     This program is distributed in the hope that it will be useful,
+ *     but WITHOUT ANY WARRANTY; without even the implied warranty of
+ *     MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ *     GNU General Public License for more details.
+ *
+ *     You should have received a copy of the GNU General Public License
+ *     along with this program.  If not, see <http://www.gnu.org/licenses/>.
+ */
+package com.instructure.student.di.feature
+
+import android.content.Context
+import androidx.work.WorkManager
+import com.instructure.pandautils.features.cookieconsent.AnalyticsConsentHandler
+import com.instructure.pandautils.features.cookieconsent.CookieConsentNamespace
+import dagger.Module
+import dagger.Provides
+import dagger.hilt.InstallIn
+import dagger.hilt.android.qualifiers.ApplicationContext
+import dagger.hilt.components.SingletonComponent
+import sdk.pendo.io.Pendo
+
+@Module
+@InstallIn(SingletonComponent::class)
+class CookieConsentModule {
+
+    @Provides
+    fun provideCookieConsentNamespace(): CookieConsentNamespace {
+        return CookieConsentNamespace.STUDENT
+    }
+
+    @Provides
+    fun provideAnalyticsConsentHandler(@ApplicationContext context: Context): AnalyticsConsentHandler {
+        return object : AnalyticsConsentHandler {
+            override fun onConsentGranted() {
+                // Pendo session will be started on next app launch via CallbackActivity
+                // Re-schedule pandata upload
+                val workManager = WorkManager.getInstance(context)
+                val workRequest = androidx.work.PeriodicWorkRequestBuilder<com.instructure.pandautils.analytics.pageview.PageViewUploadWorker>(
+                    15, java.util.concurrent.TimeUnit.MINUTES
+                ).setConstraints(
+                    androidx.work.Constraints.Builder()
+                        .setRequiredNetworkType(androidx.work.NetworkType.CONNECTED)
+                        .build()
+                ).build()
+                workManager.enqueueUniquePeriodicWork(
+                    "pageView-student",
+                    androidx.work.ExistingPeriodicWorkPolicy.KEEP,
+                    workRequest
+                )
+            }
+
+            override fun onConsentRevoked() {
+                Pendo.endSession()
+                WorkManager.getInstance(context).cancelUniqueWork("pageView-student")
+            }
+        }
+    }
+}

apps/student/src/main/java/com/instructure/student/features/login/StudentAcceptableUsePolicyRouter.kt

@@ -20,16 +20,14 @@ import android.content.Intent
 import android.webkit.CookieManager
 import androidx.fragment.app.FragmentActivity
 import com.instructure.canvasapi2.utils.ApiPrefs
-import com.instructure.horizon.HorizonActivity
-import com.instructure.loginapi.login.CANVAS_CAREER
 import com.instructure.loginapi.login.features.acceptableusepolicy.AcceptableUsePolicyRouter
+import com.instructure.loginapi.login.features.cookieconsent.CookieConsentActivity
 import com.instructure.loginapi.login.tasks.LogoutTask
 import com.instructure.pandautils.features.reminder.AlarmScheduler
 import com.instructure.pandautils.room.offline.DatabaseProvider
 import com.instructure.pandautils.services.PushNotificationRegistrationWorker
 import com.instructure.student.R
 import com.instructure.student.activity.InternalWebViewActivity
-import com.instructure.student.activity.NavigationActivity
 import com.instructure.student.tasks.StudentLogoutTask
 
 class StudentAcceptableUsePolicyRouter(
@@ -48,17 +46,10 @@ class StudentAcceptableUsePolicyRouter(
 
         CookieManager.getInstance().flush()
 
-        val isCanvasCareer = activity.intent?.getBooleanExtra(CANVAS_CAREER, false) ?: false
-        val intent = if (isCanvasCareer) {
-            Intent(activity, HorizonActivity::class.java)
-        } else {
-            Intent(activity, NavigationActivity.startActivityClass)
-        }
-
+        val intent = Intent(activity, CookieConsentActivity::class.java)
         activity.intent?.extras?.let { extras ->
             intent.putExtras(extras)
         }
-
         intent.flags = Intent.FLAG_ACTIVITY_NEW_TASK or Intent.FLAG_ACTIVITY_CLEAR_TASK
         activity.startActivity(intent)
     }

apps/student/src/main/java/com/instructure/student/features/login/StudentCookieConsentRouter.kt

@@ -0,0 +1,44 @@
+/*
+ * Copyright (C) 2026 - present Instructure, Inc.
+ *
+ *     This program is free software: you can redistribute it and/or modify
+ *     it under the terms of the GNU General Public License as published by
+ *     the Free Software Foundation, version 3 of the License.
+ *
+ *     This program is distributed in the hope that it will be useful,
+ *     but WITHOUT ANY WARRANTY; without even the implied warranty of
+ *     MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ *     GNU General Public License for more details.
+ *
+ *     You should have received a copy of the GNU General Public License
+ *     along with this program.  If not, see <http://www.gnu.org/licenses/>.
+ */
+package com.instructure.student.features.login
+
+import android.content.Intent
+import androidx.fragment.app.FragmentActivity
+import com.instructure.horizon.HorizonActivity
+import com.instructure.loginapi.login.CANVAS_CAREER
+import com.instructure.loginapi.login.features.cookieconsent.CookieConsentRouter
+import com.instructure.student.activity.NavigationActivity
+
+class StudentCookieConsentRouter(
+    private val activity: FragmentActivity
+) : CookieConsentRouter {
+
+    override fun startApp() {
+        val isCanvasCareer = activity.intent?.getBooleanExtra(CANVAS_CAREER, false) ?: false
+        val intent = if (isCanvasCareer) {
+            Intent(activity, HorizonActivity::class.java)
+        } else {
+            Intent(activity, NavigationActivity.startActivityClass)
+        }
+
+        activity.intent?.extras?.let { extras ->
+            intent.putExtras(extras)
+        }
+
+        intent.flags = Intent.FLAG_ACTIVITY_NEW_TASK or Intent.FLAG_ACTIVITY_CLEAR_TASK
+        activity.startActivity(intent)
+    }
+}

apps/student/src/main/java/com/instructure/student/util/AppManager.kt

@@ -24,6 +24,7 @@ import androidx.work.NetworkType
 import androidx.work.PeriodicWorkRequestBuilder
 import androidx.work.WorkManager
 import androidx.work.WorkerFactory
+import com.instructure.canvasapi2.utils.ApiPrefs
 import com.instructure.canvasapi2.utils.MasqueradeHelper
 import com.instructure.canvasapi2.utils.PendoInitCallbackHandler
 import com.instructure.loginapi.login.tasks.LogoutTask
@@ -67,7 +68,9 @@ class AppManager : BaseAppManager() {
             ).execute()
         }
 
-        schedulePandataUpload()
+        if (ApiPrefs.mobileConsent) {
+            schedulePandataUpload()
+        }
         initPendo()
     }
 

apps/teacher/src/main/java/com/instructure/teacher/activities/SplashActivity.kt

@@ -233,6 +233,8 @@ class SplashActivity : BaseCanvasActivity() {
     }
 
     private suspend fun setupPendoTracking(user: User) {
+        if (!ApiPrefs.mobileConsent) return
+
         val featureFlagsResult = FeaturesManager.getEnvironmentFeatureFlagsAsync(true).await().dataOrNull
         val sendUsageMetrics = featureFlagsResult?.get(FeaturesManager.SEND_USAGE_METRICS) ?: false
         if (sendUsageMetrics) {