Privacy policy

• Your account: name, phone number or email, password (stored scrambled, never readable), and, if you use them, your Google or Telegram sign-in.
• Your profile: school, department, level, username, photo, bio, and anything else you choose to add, such as a birthday.
• What you post and send: posts, replies, polls, photos and videos, reviews, chat messages and chat photos.
• Agents and sellers: to be verified, your NIN, the name, date of birth, photo and address on the national register, and a short selfie video. Your full NIN and address are kept encrypted and are never shown in the app; they are opened only by Kampus's owner to answer the police or a court (for example after a fraud), and every opening is recorded. Rooms and items you list, with their photos and videos.
• Payments: wallet top-ups, boosts, plans and orders: amounts, dates and references. Card and bank details go to the payment company, not to us.
• Your devices and sign-ins: each time you sign in, the phone or computer (brand, model, system and browser or app), how you signed in, the time, the IP address it came from, and the rough town and state that address points to (worked out on our own server from IP Geolocation by DB-IP). If you allow location for Kampus on a phone, that phone's exact spot is saved on its sign-in too — you can see it and clear it. This is shown only to you, in Settings → Security → Manage devices, so you can spot and remove a device that isn't yours, and it goes when that device is signed out. We also keep a notification token if you allow notifications. When you tap "near me" on the campus map, your location at that moment is used and not stored.
• How you use Kampus: what you like, open, follow and search, so your feed shows what interests you; and when you were last active, for "Last seen" in chat (you can hide it).

• To run your account and show your posts, listings and messages to the people you share them with.
• To verify agents and sellers, so students only ever deal with real, checked people.
• To keep Kampus safe: spotting scams, handling reports, and blocking people who break the rules.
• To process payments and keep records of them.
• To send the notifications you've chosen, and sign-in codes.
• To personalise your feed and improve Kampus.

We don't sell your information, and we don't show your NIN to anyone — including other students.

Only with companies that help us run Kampus, and only what each one needs:

• Identity checking (SecureID Verify) — agents' and sellers' NIN, to look it up on the national register.
• Payments (Paystack, Monnify, Squad) — to take and record payments.
• Messages and sign-in (WhatsApp by Meta, Telegram, Google) — to send codes and let you sign in.
• Storage and notifications (Cloudflare, Google Firebase) — to store photos and deliver notifications.

We also share information when the law requires it, or to protect someone from fraud or harm.

We keep your information while your account is open. When you delete your account:

• It's hidden straight away, and you're signed out everywhere. Sign in within 90 days and everything comes back.
• After 90 days it's deleted for good: your profile, posts, photos and videos, listings, identity check, and everything else you did on Kampus.
• What we keep: payment and order records, which the law requires; chat messages you sent, shown from "Deleted account", because the other person still has the conversation and it may be evidence if a deal went wrong; and reports made about you, with a one-way fingerprint of your NIN (never the NIN itself) if you were reported or suspended, so the same person can't return to scam students.

• See and change your details in Settings.
• Download a copy of your data: Settings → Your account → Download your data.
• Hide your last seen, mute notifications, and block or report anyone.
• Delete your account: how to delete your account.
• Ask us what we hold about you, or to correct or delete it, by email — we reply within 30 days.

Kampus is for students aged 16 and over. If you believe a younger child has an account, email us and we'll remove it.

Everything travels encrypted. Passwords are stored scrambled; identity documents are kept on private storage that only verification staff can open. You can add two-step sign-in in Settings → Security.

Email [email protected] about anything in this policy. If you're unhappy with our answer, you can complain to the Nigeria Data Protection Commission.

If this policy changes, we'll update the date above and tell you in the app about anything important.