Privacy Policy

• Account and identity information, including your name, email address, password credential, username, campus, role, and account status.
• Profile information, such as your biography and profile photo.
• Content you submit, including feed posts, photos, events, marketplace listings, lost-and-found reports, gig and accommodation listings, club content, comments, and direct messages.
• Activity connected to the service, such as club memberships, event participation, notifications, reports, and moderation history.
• Support or safety information you choose to include in a report or other communication with a campus administrator.

CampusLink does not need your plain-text password to provide the service. Passwords are handled through the authentication system as credentials rather than displayed in your profile.

When you sign in, use the app, upload media, or enable notifications, CampusLink and its service providers may handle authentication cookies, uploaded files, notification subscription details, device or browser information supplied with a push subscription, and technical logs generated by the hosting, database, email, and security systems. We use these details to keep accounts signed in, deliver requested notifications, prevent abuse, and operate the service.

CampusLink uses an essential session cookie for authentication. Your browser may also store local preferences, such as an app theme. You can control optional browser notifications through your device and browser settings.

• To create and secure accounts, confirm email addresses, reset passwords, and complete onboarding.
• To show campus-scoped profiles, posts, events, listings, clubs, messages, and notifications.
• To connect members who choose to communicate or participate in the same campus activity.
• To process reports, investigate misuse, enforce the Terms and Community Standards, and protect members and the service.
• To send transactional email and push notifications you request or that are necessary for the service.
• To maintain, troubleshoot, secure, and improve CampusLink, including rate limiting and abuse prevention.
• To comply with legal obligations and respond to valid legal or safety requests.

Your profile and campus content are shown according to the product's access controls. Public profile fields and some public-facing images may be visible to people who can access the relevant profile or page. Campus-scoped content is generally available to authenticated members of the applicable campus. Direct messages are restricted by the application to conversation participants, while reports and moderation records are available to the people who need them to process safety and enforcement work.

We may use service providers for hosting, database operations, authentication, file storage, email delivery, push delivery, and security. Those providers may process information only as needed to provide their services. We may also disclose information when required by law, to protect someone from serious harm, to investigate abuse, or as part of a business transfer.

We keep information for as long as needed to provide the service, maintain account and safety records, resolve disputes, comply with legal obligations, and enforce our policies. User content may remain available until you edit or remove it, until an administrator removes it, or until the account and related records are deleted under the applicable process.

When you delete your account, we delete the account and associated content and uploaded files, subject to records we must retain for legal, safety, or dispute purposes. We retain the reason you give for deletion without linking it to your account, solely to improve CampusLink. Please do not include sensitive information in that reason.

CampusLink uses access controls, row-level database policies, authenticated sessions, protected server credentials, rate limiting, and other reasonable safeguards. No online service can guarantee absolute security, so choose carefully what you share.

• You can review and update available profile information through the app.
• You can choose whether to allow browser push notifications and remove a notification subscription through supported app controls or your device settings.
• You can request a copy of your account data in Settings. After a moderator or administrator approves the request, the JSON export is available to your signed-in account.
• You can permanently delete your account in Settings after providing a deletion reason of at least three words.
• You can report content or account concerns through the in-app reporting tools where available.

CampusLink processes personal data in accordance with applicable data protection law, including Kenya's Data Protection Act, 2019. Depending on the circumstances and legal exceptions, your rights may include being informed about processing, access, correction, objection, and deletion. You may exercise applicable rights through the Settings workflows or contact the CampusLink privacy contact. We may verify your identity and retain information where the law permits or requires it.

CampusLink is designed for campus students and approved campus participants, not for children. We do not knowingly collect personal information from children under 13. If you believe a child has provided information, contact the CampusLink administrator for the relevant campus so the account can be reviewed.

We may update this policy when the service, providers, or legal requirements change. We will post the revised policy here and update the date above. Questions or privacy requests should be directed to the CampusLink administrator for your campus.