Privacy Notice

1. What we collect

Account: your name, email address, password (stored scrambled) or Google sign-in details, and profile photo.

Student details: school, department, level and, if you choose, your WhatsApp number (kept private and shown only on your marketplace listings).

Verification (only if you ask to be verified): your registration number and a photo of your student ID card.

What you create: posts, stories, comments, likes, rants and replies (shown without your name, but linked to your account privately), marketplace listings, reviews, polls and votes (we record that you voted so you can’t vote twice; other students can’t see how you voted), chats and reports.

Payments: what you paid for, amount and status. Card and bank details are handled by Bachs, not us.

Technical: app activity needed to run the service, such as when you’re online (shown to students at your campus) and basic logs.

2. Why we use it, and our lawful basis

To provide My campus to you, including your campus feed, marketplace, chats, elections and payments (performance of our contract with you).

To verify students and keep the community safe: moderating reports, preventing fraud, duplicate accounts and abuse (legitimate interests, and to comply with the law).

To process payments and keep financial records (contract and legal obligation).

To send you account emails such as confirmations and password reset codes (contract).

Where we rely on your consent (for example, your optional profile photo or WhatsApp number), you can withdraw it at any time.

3. Who we share it with

Other students see what you choose to share, such as your profile, posts and listings. Rants never show your name.

Service providers who process data for us under contract: Supabase (database and file storage, hosted in the European Union, Frankfurt), Bachs (payments), Google (if you sign in with Google), Resend (email delivery) and Expo (app delivery and web hosting).

Authorities, where Nigerian law requires it or to protect someone’s safety.

We don’t sell your personal data.

4. Transfers outside Nigeria

Some providers store or process data outside Nigeria (for example in the European Union). We use providers that protect data to a standard at least equivalent to the NDPA, as the Act requires.

5. How long we keep it

Account and profile data: while your account is open, then deleted when you close it, except what we must keep by law.

ID card photos: deleted after a moderator has reviewed your verification request. We keep the registration number to stop it being used on another account.

Payment records: as long as Nigerian tax and accounting law requires (generally up to 6 years).

Chats and content you delete are removed from the app; copies may remain in backups for a short time.

6. Your rights

Under the NDPA you can ask to access your data, correct it, delete it, receive a copy in a portable format, object to or restrict how we use it, and withdraw consent. Write to us at the address below; we’ll reply within the time the law sets.

If you’re unhappy with how we handle your data, you can complain to the Nigeria Data Protection Commission (NDPC).

7. Security

We use access controls, encryption in transit and private storage for sensitive items such as ID cards. No system is perfectly secure, so please use a strong password and keep it to yourself.

8. Children

My campus is for students aged 18 and over, or younger students with the permission of a parent or guardian. If you believe a child is using My campus without permission, contact us.

9. Changes and contact

We may update this notice and will tell you about important changes in the app. Contact: mycampusapp, support@mycampusapp.com.ng.