Kampasika Privacy Policy
Kampasika helps campus communities manage groups, listings, services, collections, payments, chats, files, and student verification. This policy explains what data we collect, why we collect it, and how users can request deletion.
Data We Collect
- Account data: username, phone number, optional password status, account type, profile photo, bio, and verification status.
- User content: listings, services, rooms, group posts, chats, files, payment proof images, event registrations, and collection details that users choose to submit.
- Verification data: student ID or NIDA image, submitted name, phone number, and review status when a user requests verification.
- Payment-related data: phone number used for payment, amount, payment reference, proof image, and provider transaction status for supported payment flows.
- Kampasika Biz (landlords): business name, contact name and phone, area, the payment number tenants pay into (shown only to that landlord's tenants), and, only if the landlord asks for a Verified badge, the documents they upload. Leases, rent schedules and payment records are kept for both the landlord and the tenant.
- Device and notification data: Firebase Cloud Messaging token and notification permission status when a user enables notifications.
- Optional location data: location entered by the user or GPS location only when the user chooses a location feature.
How We Use Data
- To create and protect user accounts using phone OTP authentication.
- To show listings, groups, chats, files, collections, payments, and campus services inside the app.
- To send account, group, chat, event, payment, and verification notifications.
- To prevent spam, fraud, impersonation, and misuse of campus groups and payment records.
- To provide support, resolve disputes, and comply with legal or platform requirements.
Sharing
We do not sell personal data. We use service providers needed to run the app, including Firebase/Google Cloud for authentication, database, hosting, storage, functions, and notifications; Africa's Talking for SMS OTP delivery; and payment providers used for supported payment flows. Some profile and listing information is visible to other users because that is part of the app experience.
Security
Accounts use phone OTP authentication. Data is stored in Firebase services with security rules and authenticated access controls. File uploads are size-limited and restricted by type in storage rules where supported. No system is perfect, but we design the app to minimize unnecessary permissions and avoid collecting SMS inbox access or contacts.
User Choices
- Users can choose whether to enable notifications.
- Users can edit profile information inside the app.
- Users can delete their account from the in-app profile menu.
- Users can also request account and data deletion using the account deletion page.
Children
Kampasika is intended for university and college communities. It is not directed to children under 13.
Account Deletion
Users can delete their account in the app from Profile > menu > Delete account. To request deletion outside the app, visit Account Deletion. Deleting an account removes the user profile and associated content where technically and legally possible. Some records may be retained when required for security, payment, dispute, or legal reasons.
Contact
For privacy or deletion requests, contact: support@kampasika.org