If other students are relying on it, why not have them pass their credentials into the app, then have your app use their login to acquire the data? If you are secure about it, you should be able to avoid the uni's wrath while still keeping your service alive.