Privacy Policy

1. Who We Are

CampusLink is a dating and social app for young people in Kenya, operated by CampusLink (campuslink.co.ke). This policy explains how we handle your personal data when you use our app. For questions, contact us at privacy@campuslink.co.ke.

2. Information We Collect

• Account information: name, date of birth, gender, email address, university, course, bio.
• Profile photos and selfies uploaded by you.
• Student ID photos (for student verification only — deleted after verification).
• Location data (GPS coordinates or city name) when you use the Radar feature.
• App activity: swipes, likes, matches, messages, and profile views.
• Device information: push notification subscription, browser type, and operating system.
• Payment information: processed by PesaPal — we store only the payment reference and amount, not your card or M-Pesa details.

3. How We Use Your Information

• To show your profile to other nearby users and enable matches.
• To send push notifications for likes, matches, and messages.
• To verify your identity and student status using AI-assisted checks.
• To enforce our daily swipe limits and subscription entitlements.
• To process payments for Campus Plus subscriptions and profile boosts.
• To investigate abuse reports and enforce our Terms of Service.
• To improve the app through anonymised usage analytics.

4. Who We Share Your Data With

We do not sell your personal data. We share data only with the following service providers who help us run the app:

• Supabase — database, authentication, and file storage (supabase.com/privacy).
• Vercel — app hosting and deployment (vercel.com/legal/privacy-policy).
• PesaPal — payment processing for subscriptions and boosts (pesapal.com/terms).
• Anthropic — AI image analysis for photo and identity verification (anthropic.com/privacy). Images are not stored by Anthropic beyond the API call.
• Nominatim / OpenStreetMap — geocoding city names to coordinates (no personal data shared).

5. Photos and Verification

Profile photos are stored on Supabase Storage and visible to other logged-in users within the app. Photos that fail AI verification are deleted immediately. Selfies taken for identity verification are sent to our AI provider for a one-time comparison and are not stored on our servers after the check. Student ID photos are stored only until verification is complete and then deleted.

6. Location Data

We request your GPS location when you use the Radar feature. Your coordinates are stored in your profile and updated each time you open Radar. Other users see only your distance from them, not your exact coordinates. If you deny GPS permission, we use your registered city as a location fallback. You can disable location access at any time in your device settings.

7. Push Notifications

We send push notifications for likes, matches, and new messages using the Web Push API. Your push subscription endpoint is stored in our database and is only used to send notifications to your device. You can disable notifications at any time from Profile → Notifications or from your browser or device settings.

8. Data Retention

Your data is stored as long as your account is active. When you delete your account, your profile, matches, messages, photos, and push subscriptions are permanently deleted within 24 hours. Payment audit records are retained for 7 years to comply with financial regulations.

9. Your Rights

• Access: you can view all data you have provided by viewing your profile.
• Correction: you can edit your profile at any time.
• Deletion: you can delete your account from Profile → Settings → Delete Account.
• Data export: email privacy@campuslink.co.ke to request a copy of your data.
• Objection: you can contact us to object to any processing you do not consent to.

10. Security

We use HTTPS encryption for all data in transit, row-level security (RLS) policies in our database to ensure users can only access their own data, and server-side enforcement of all sensitive field updates. Payments are handled entirely by PesaPal — we never see your card or M-Pesa PIN.

11. Children

CampusLink is not intended for anyone under 18 years of age. We do not knowingly collect data from children. If you believe a minor has created an account, contact us at privacy@campuslink.co.ke and we will delete it immediately.

12. Changes to This Policy

We may update this privacy policy from time to time. We will notify you of significant changes via a notice in the app. The date at the top of this page shows when the policy was last updated. Continued use of the app after changes means you accept the updated policy.

13. Contact

For privacy questions or to exercise your rights, contact us at privacy@campuslink.co.ke. We aim to respond within 5 business days.