Privacy Policy & Data Safety
Last Updated: September 26, 2026 • App: com.campuskroy.app • Web: campuskroy.com
1.Overview & Service Scope
CampusKroy is a dedicated peer-to-peer university student marketplace and campus utility platform accessible via our Android mobile application (com.campuskroy.app) and web portal (campuskroy.com). CampusKroy operates exclusively for registered students and university communities in Bangladesh to buy and sell used academic goods, share campus notices, and resolve lost-and-found items safely.
This Privacy Policy discloses how CampusKroy collects, verifies, uses, and safeguards personal data in strict compliance with the Google Play Developer Program policies, user safety guidelines, and relevant data protection principles.
2.Information We Collect & Why
We adhere to strict data minimization principles and collect only what is strictly necessary:
- Profile & Contact Details: Full name, personal email, institutional campus email (optional/for verification), phone number, optional WhatsApp contact, academic department, batch year, and selected campus/university affiliation.
- Student ID & Verification Data: For students seeking the verified badge or publishing live posts, we collect institutional email validation or user-submitted physical student ID card photographs. ID card images are used solely to confirm current enrollment and are never made public.
- Marketplace Listings: Item titles, descriptions, categories, pricing, condition details, and user-uploaded product photographs.
- Lost & Found Content: Descriptions of misplaced/recovered goods, photos, campus building/location notes, and contact phone numbers provided by reporters to facilitate item returns.
- Device & Session Tokens: Firebase/Expo push notification tokens for transactional alerts (messages, verification reviews, buyer inquiries) and client platform identifiers (web vs. mobile app) to regulate secure session duration.
- Stability & Performance Diagnostics: Non-personalized crash logs and HTTP telemetry strictly for app performance, bug fixes, and reliability.
3. Google Play Data Safety Disclosures
In accordance with Google Play's Data Safety policy, the following table summarizes all collected data types, purposes, encryption standards, and retention/deletion mechanisms:
| Data Type | Collection Type | Primary Purpose | Transit Security | Retention & Deletion |
|---|---|---|---|---|
| Name, Email, Phone | User Submitted | Account Setup & Buyer Inquiry | TLS 1.3 (HTTPS) | Deleted on Account Deletion |
| Student ID Card Photo | User Uploaded (Optional) | Student Verification Badge | TLS 1.3 (HTTPS) | Private; Purged on Deletion |
| Marketplace & Lost Photos | User Uploaded | Ad Display & Item Recovery | TLS 1.3 (HTTPS) | User Deletable / Auto-Purged |
| Campus Location Notes | User Typed | Lost/Found Spot & Campus Match | TLS 1.3 (HTTPS) | User Deletable / Auto-Purged |
| Push Notification Token | Device Generated | Chat & Inquiry Notifications | TLS 1.3 (HTTPS) | Purged on Logout / Deletion |
| Crash & Performance Logs | Anonymous Telemetry | App Stability & Bug Fixing | TLS 1.3 (HTTPS) | Auto-expires after 30 days |
4.Student ID Verification & Campus Safety
To maintain a trustworthy campus environment and safeguard students against counterfeit goods and scams, CampusKroy implements student identity verification:
How Verification Works
Users may verify their account either via their official university institutional email address or by submitting a photo of their physical student ID card.
Confidentiality of Student ID Card Images
Uploaded ID card photos are strictly classified as confidential. They are never shown publicly on marketplace ads or shared with other members. Access is limited solely to institutional verifiers and system administrators for the single purpose of confirming active student status.
Listing Moderation & Verification Sync
To ensure quality and authenticity, new marketplace product listings and lost-and-found posts require student verification. Unverified items remain in review or paused until verification is confirmed. In the event a verification is revoked or rejected, active listings are reverted to pending verification to protect buyers.
5.Zero Advertising & Third-Party Services
CampusKroy does not sell, rent, monetize, or trade student personal information to third-party data brokers or marketing agencies. We do not integrate third-party ad tracking networks. Third-party infrastructure is strictly limited to essential service providers:
- Google Identity Services: For optional one-tap Google OAuth 2.0 authentication.
- Cloudinary: For secure image optimization and media delivery.
- Resend & Nodemailer: For transactional email delivery (verification notices, password reset links).
- Firebase / Web Push: For delivering real-time chat inquiries and listing status notifications.
6. Account & Data Deletion Policy (Play Store Compliance)
In full compliance with Google Play Store data safety mandates, every user possesses the unconditional right to request the permanent deletion of their account and all associated personal data at any time.
How to Request Account Deletion
In the Mobile App: Navigate to Profile > Settings > Manage Account > Delete Account.
Via Direct Email (Website Users): Send an email from your registered address to hello.campuskroy@gmail.com with the subject line "Account Deletion Request".
7-Day Grace Period & Data Protection Lifecycle
When a deletion request is initiated, our automated data protection cycle proceeds through the following steps:
- Instant Deactivation & Logout: Your account is immediately deactivated. All active product listings and lost-and-found notices are immediately hidden and paused from the public marketplace. Active sessions are terminated in real time.
- 7-Day Reversible Grace Period: You are granted a 7-day countdown period to prevent accidental loss of your academic listings or account history. If you change your mind within these 7 days, you can restore your account and all listings simply by logging back in (via web or mobile app).
- Automated Permanent Purge: When the 7-day grace period concludes, an automated server cron job permanently erases:
- Your user profile, name, email, phone, and password hash
- All your marketplace listings, descriptions, and uploaded product images
- All your lost & found reports and location logs
- Your wishlist bookmarks, chat references, and verification records
- All push notification device subscriptions
- Immediate Force Delete Option: Administrators can also trigger immediate, non-reversible data eradication upon explicit request without awaiting the grace period.
7. Android Device Permissions
READ_MEDIA_IMAGES/ Photo Picker: Invoked strictly when you deliberately select images to attach to an ad listing, lost/found report, or student ID verification request. Unselected private media is never accessed.POST_NOTIFICATIONS: Required on Android 13+ to deliver immediate alerts for incoming buyer inquiries, listing approval updates, and ID verification status. Can be toggled off anytime in Android system settings.INTERNET: Standard network capability required to communicate securely with CampusKroy API servers.
8.Age Restriction & Children's Privacy
CampusKroy is designed strictly for university students aged 18 and older. We do not knowingly collect, request, or store information from individuals under the age of 13. If we discover an account belongs to a minor under 13, it will be terminated immediately.
9.Developer & Legal Contact
For any questions regarding this Privacy Policy, data access requests, or verification inquiries, please reach out to our team:
Application: CampusKroy (com.campuskroy.app)
Developer Email: hello.campuskroy@gmail.com
WhatsApp / Hotline Support: +880 1941 178002
Location: Dhaka, Bangladesh
Official Website: https://campuskroy.com