YOUR INFORMATION
Privacy policy
Who we are
KampusOne connects students with academic tools, campus communities, maps, learning resources and campus services. This policy covers the KampusOne website, mobile app and agent portals. Contact support@kampusone.app about privacy, access or deletion requests. Effective date: 6 October 2026.
Information you provide
We collect the name, email, password hash and verification records needed for your account. A student profile may include university, faculty, department, programme, level, username, biography and photos. We store content you create, messages and attachments, timetable and exam entries, learning records, application details and support requests. Optional referral responses tell us how people discovered KampusOne.
Community eligibility
A community application contains the full name, matriculation number, department, level, nickname and accepted guidelines version you provide. These eligibility details are available to that community’s authorized admins for review. The nickname can appear in community activity. Your matriculation number is not placed in public feed posts by this form.
Device, location and notifications
We use device and session identifiers to secure accounts and a push token to deliver notifications you enable. Location is used when you request map positioning, directions or a location-based agent service. Camera captures for map contributions include location evidence when you submit them. You can manage device permissions in your operating system. Turning off location reduces map and service functionality.
How information is used
We process data to authenticate accounts, provide campus features, deliver messages and reminders, verify agents, complete orders and payments, handle disputes, prevent abuse and improve reliability. Optional marketing email preferences can be changed or unsubscribed from. Essential account, security and transaction messages are separate from promotional email.
Kira and AI processing
The messages, selected document text, images and instructions you submit to Kira can be sent to configured AI providers to produce a response. Large PDFs may be processed as relevant excerpts. When memory is enabled, relevant information from your own earlier conversations may be included in later requests. You can disable memory. Avoid uploading information you are not authorized to share. AI answers can be inaccurate.
Payments and verification
Payment references, quoted amounts, provider fees, purchase status and accounting records are stored to reconcile transactions and resolve disputes. Amounts are represented in integer kobo. Paystack processes payment card information; KampusOne does not store full card details. Agent identity documents and bank information are restricted to authorized verification or finance functions and their contracted providers.
Providers and transfers
Services may be provided by Cloudflare for hosting and media, Neon for the database, Vercel for websites, Resend for email, Paystack for payments, Expo or Firebase for notifications and configured AI or video providers. Providers can process data outside Nigeria. We use access restrictions and appropriate contractual and security arrangements where available. A provider being configurable does not mean every integration is active for every account.
Visibility and sharing
Public profile details, published posts, product listings and blog interactions can be visible to other people. Messages and private uploads are restricted to authorized participants or owners, with signed access where applicable. Information can be disclosed to authorized support, verification or moderation personnel for a defined operational purpose, or when required by law.
Analytics and cookies
Essential cookies and session storage keep you signed in and support security. Product events can describe feature use, device information, errors and approximate activity. We avoid placing passwords, raw identity documents and private message bodies in analytics events. Optional third-party analytics requires configuration and the applicable consent controls.
Retention and deletion
We retain information while needed to operate your account and for security, support, accounting and legal obligations. You can request account deletion in account settings or through support. Public activity may be removed or anonymized as appropriate. Financial and audit records can be retained where required; deleted information may remain in restricted backups until those backups expire.
Your choices and rights
You can correct profile details, manage notification and email preferences, disable Kira memory and request access, correction or deletion through support. We may verify your identity before responding. You may raise a privacy concern with the Nigeria Data Protection Commission where applicable.
Security and changes
We use authentication, authorization, private storage, restricted provider credentials, audit records and tenant checks. No service can guarantee absolute security. Report a suspected compromise through support. Material changes to this policy will be communicated through the website or appropriate account notices.