Privacy Policy

1. Who we are and how to contact us

CampusConnect is a platform for Nigerian university communities. For any privacy question or request, email campusconnect.support1@gmail.com.

2. What we collect

Information you give us:

• Account details: email address, password (stored in a protected form, never in plain text), full name, username, university, and optionally college and phone number.
• Your date of birth, the time you confirmed it, and, if you are under 18, a record that you confirmed your parent or guardian knows and agrees. We also record the version of the Terms and Privacy Policy you accepted and when. When you apply to sell or to be a delivery agent, we also record the version of the Seller Terms or Delivery Agent Terms you accepted and when.
• Profile details such as your profile photo.
• Content you post: posts, photos and media, comments, reviews, rooms, messages and reports.
• If you apply to sell: business name, category, description, phone and email, and identity details (your full name, type of ID and ID number). If you apply to be a delivery agent: your name, phone, hostel or business address, operating area, and photos including a profile picture and an ID image.
• Payout details for sellers and agents: bank name, account number and account name.
• Orders and payments: what you bought or sold, amounts, order status and the Paystack payment reference. Card details are entered on Paystack's page and are never stored by us.
• If you choose to create a chat backup: an encrypted copy of your direct message keys, and the technical settings needed to unlock it with your passphrase. We never receive your passphrase or your keys in a form we can read (see section 7).

Information created when you use CampusConnect:

• Activity such as follows, blocks, likes, room membership, notifications, read status, and the date you were last active (used for daily streaks and leaderboards).
• Post views: a private record of which Campus Board posts you have viewed and when, used to count unique views and to personalise your For You feed (see section 6).
• The public part of each direct message encryption key your account has used, and when it was first seen, so that the app can tell you when a key has changed.
• Technical data stored in your browser (see section 13).

We do not currently use advertising, analytics or tracking tools, and we do not track your location.

3. Why we use your data and our legal basis

• To create and run your account, and to provide the features you use, including messaging, rooms, the Campus Board and the marketplace (to perform our agreement with you).
• To count unique views on posts and to personalise your For You feed (our legitimate interests). See section 6.
• To store and return your encrypted chat backup if you choose to create one (to perform our agreement with you).
• To apply our age rules, such as the minimum age for an account and for the marketplace, using your date of birth (legal obligation and our legitimate interests).
• To record that a parent or guardian agrees where you are under 18 (consent and legal obligation).
• To show you a birthday greeting in the app on your birthday (our legitimate interests). We do not show your birthday to other users.
• To process orders and payouts through Paystack (to perform our agreement with you).
• To keep CampusConnect safe: review seller and agent applications, prevent fraud and abuse (including limiting how often an account can post, comment, like, repost, follow, report, create rooms and send message requests), review reports, and enforce our Terms (our legitimate interests and, where the law requires it, legal obligation).
• To meet legal, tax and accounting duties and to respond to lawful requests from authorities (legal obligation).
• To send you service messages such as sign-in and password emails, order and application notifications (to perform our agreement with you).
• To record that you accepted our Terms and Privacy Policy (consent and legal obligation).

We do not sell your personal data.

4. Who can see your data

• Everyone who uses CampusConnect when signed in can see your public profile: username, profile photo, university and role. Your posts, comments, reviews, product listings and public room messages are visible to the people they are shared with.
• The number of times a post has been viewed is shown publicly on the post, and the total views across your non-anonymous posts is shown on your profile. Who viewed which post is never shown to other users.
• If you post or send a message anonymously, other users cannot see that you wrote it (see section 5).
• Your date of birth is never shown to other users.
• A seller or buyer in an order sees the information needed to complete it.
• Other users can see seller business details you choose to make public. Your seller identity details, phone and email are not shown to other users.
• Administrators can see seller applications including identity details, delivery agent applications including ID images, reports (including a reported message you chose to disclose), seller and agent chats, and the author of anonymous posts and room messages. Administrators are bound to use this only to run and protect CampusConnect.
• Service providers who process data for us: Supabase (database, sign-in and file storage), Vercel (website hosting), Paystack (payments and payouts) and Google (delivery of sign-in and password emails). They may only use your data to provide their service to us.
• Authorities, courts or other parties when the law requires it, or to protect people's safety or our rights.

5. Anonymous posts and room messages

• You can choose to post on the Campus Board, or send a message in a room, anonymously. Other users cannot see who wrote it.
• CampusConnect administrators can see the author of an anonymous post or message, so that they can moderate content and keep people safe.
• We may disclose the author of anonymous content to law enforcement or other authorities where the law requires it.
• Anonymity does not permit abuse. Our Terms apply in full to anonymous content, and we may act against the account that posted it.
• Photos, videos, files and voice notes cannot be attached to anonymous posts or messages, because uploaded files could reveal who sent them.
• Anonymous posts are not counted in the total views shown on your profile.

6. View counts and your For You feed

• When a Campus Board post has been on your screen for a moment, we record that you viewed it. Each person is counted once per post, and the number of unique viewers is shown publicly on the post. Your own views of your own posts are not counted.
• The record of who viewed which post is stored privately. We use it only to count unique views and to personalise your For You feed. It is not shown to other users, including the author of the post.
• Your For You feed is ordered using: posts you have liked and viewed, the accounts you follow, your university, the category of each post, how recent a post is, and how much engagement (likes, comments, reposts and views) it has. Posts you have already seen are shown less often.
• The Latest tab shows posts in time order without personalisation.
• We do not sell your viewing data or your feed signals, and we do not share them with third parties for advertising.

7. Messages and encryption

• Direct messages sent in the current version of CampusConnect, and the photos, videos, files and voice notes attached to them, are end-to-end encrypted. Your keys are created and kept on your device (in your browser). We cannot read these messages.
• You can choose to create a chat backup protected by a passphrase. Your keys are encrypted on your device with your passphrase before anything is sent to us, so we store only an encrypted copy that we cannot read. We never receive your passphrase.
• If you clear your browser data or use another device, you can restore your keys from your chat backup with your passphrase. If you lose both your device keys and your passphrase (or never created a backup), your old messages cannot be recovered by anyone, including us.
• A small number of older direct messages were stored without end-to-end encryption.
• Room messages, seller chats, delivery agent chats and message requests are not end-to-end encrypted. Administrators can read seller and agent chats, and the chat screens tell you this.
• Because we cannot read end-to-end encrypted messages, if you report abuse in a direct message we may ask you to share the message content with us. Sharing it is your choice. If you report a message, the content you report is sent to our moderators.

8. Sending data outside Nigeria

Our service providers store and process data on servers outside Nigeria. When your data is transferred, we rely on the commitments and security measures of these providers and on the NDPA's rules for international transfers.

9. How long we keep data

• Account and profile: while your account is active. When you delete your account, your profile is anonymised (your name becomes Deleted User and your username, phone and other details are removed).
• Date of birth and consent records: kept while your account is active and removed when you delete your account.
• Posts, comments and reviews: may remain after you delete your account, no longer linked to your name.
• Messages: the content of direct messages you sent is removed when you delete your account. Messages in rooms and chats may stay without your name.
• Chat backups: kept until you delete the backup or your account. Your backup is deleted when you delete your account.
• Post view records: kept until you delete your account, and deleted with your account. The view counts already shown on posts remain, but no longer include any record of who viewed them.
• Encryption key history (public keys only): kept until you delete your account, and deleted with your account.
• Seller identity details (ID type and number): kept while your seller account is active and removed from your application and seller record when you delete your account. Rejected seller applications are deleted 12 months after the decision.
• Delivery agent ID images and application details: kept while the application or agent account is active and deleted when you delete your account (the files are removed from storage). Rejected applications and their files are deleted 12 months after the decision.
• Orders and payment records: kept for up to 6 years for accounting, tax and dispute reasons.
• Reports and moderation records: kept for as long as needed to protect users and enforce our Terms.
• System backups of our database: removed from backups on a regular cycle.

10. Your rights

Under the NDPA you have the right to:

• ask for access to the personal data we hold about you;
• ask us to correct data that is wrong or incomplete, including your date of birth (we may ask for proof);
• ask us to delete your data;
• ask us to restrict or object to certain uses of your data;
• ask for your data in a portable format;
• withdraw your consent at any time where we rely on it (this does not affect what we did before);
• not be subject to a decision made only by automated means that has a significant effect on you. We do not make such decisions. Ordering your For You feed is automated, but it does not have a significant effect on you, and you can use the Latest tab instead.

You can delete your account in the app. For any other request, email campusconnect.support1@gmail.com. We may ask you to confirm your identity and we will reply within 30 days. If you are not happy with our answer, you can complain to the Nigeria Data Protection Commission (NDPC) at ndpc.gov.ng.

11. Security

We protect data with measures such as encrypted connections, access controls on our database so that users only see what they are allowed to, private storage for identity documents, end-to-end encryption for direct messages, passphrase encryption of chat backups on your device, and limits on how often an account can perform actions such as posting, commenting, liking, reposting, following, reporting, creating rooms and sending message requests. No system is perfectly secure. If a breach of personal data happens that is likely to harm you, we will tell you and the NDPC as the law requires.

12. Age limits and young people

CampusConnect is for people aged 16 and over. The marketplace is for people aged 16 and a half and over. If you are under 18, we ask you to confirm that your parent or guardian knows you use CampusConnect and agrees, and we keep a record of that confirmation. A parent or guardian can email campusconnect.support1@gmail.com to ask about, correct or delete their child's data. If you think someone below the minimum age is using CampusConnect, email us and we will take action, including deleting the account.

13. Cookies and browser storage

CampusConnect does not set advertising or tracking cookies. We store small items in your browser so the app works: your sign-in session, your direct message encryption keys, and your preferences such as message tabs, notification sound, view mode and recent searches. If you clear this storage you will be signed out and may lose access to your encrypted messages unless you have a chat backup and its passphrase.

14. Changes to this policy

We may update this policy. We will tell you in the app or by email before important changes take effect, and the version and date at the top will change.

15. Contact

CampusConnect - campusconnect.support1@gmail.com