Last updated 25 August 2026
CampusCart is a marketplace for students at Zambian universities, available as a website and an Android app. This policy describes exactly what we collect, why we hold it, who else can see it, and how to have it deleted. It covers both.
Your account. Your name, the email address you sign in with, and — if you add them — your phone number, your university, a profile photo, and a student email address used to verify that you are a student. Signing in with Google gives us your name and email address from that account and nothing else.
What you post. Listing titles, descriptions, prices, categories and photos, along with reviews you leave for other sellers.
Messages. The content of chats between buyers and sellers. Messages are deleted automatically seven days after they are sent unless the conversation has replies from both sides, in which case they are kept so the thread stays readable.
Payments. When you buy a Boost, a Featured slot or Seller Pro, payment is collected by our payment provider. We never see or store your mobile money PIN or card details. We store the amount, the currency, the status, and the provider’s reference for the transaction.
Reports and moderation. If you report a listing, a seller or a conversation, we store what you reported, the reason you chose, and your account id, so the report can be reviewed and followed up.
Technical data. A push notification token if you allow notifications, and counts of how often a listing was viewed or a promoted listing was seen or clicked. Those counts are per listing, not per person — we do not build a browsing profile of you.
We do not collect your location, your contacts, your call or SMS history, or anything from your device outside the photos you choose to upload. The app asks for photo and camera access only so you can attach pictures to a listing or set a profile photo, and microphone access is blocked outright. We do not sell your data to anyone, and we do not run third-party advertising trackers.
Your name, profile photo, university, verification badges, your active listings and the reviews you have received are public — they are what makes a marketplace work. Your phone number is shown only to signed-in users, on the listings where you have chosen to share it. Your sign-in email address, your student email address and your messages are never shown publicly.
We use a small number of providers to run the service, and they only process what they need to: Supabase (database, accounts, file storage), Cloudflare R2 (listing images), Vercel (website hosting), Expo (push notification delivery), Bila (payment collection), and Zoho ZeptoMail (verification and notification email). We may also disclose data where the law requires it, or where it is necessary to investigate fraud, abuse or a safety risk on the platform.
Account details are kept for as long as your account exists. Messages expire as described above. Listings you delete are removed from the marketplace, and their images are deleted from storage within 30 days. Payment records and moderation reports are kept longer, because they are the record of a transaction and of a safety decision.
You can edit or remove your name, phone number, photo, university and listings at any time from your profile. You can turn push notifications off in your device settings. You can block another user, which stops messaging in both directions.
To get a copy of your data, correct it, or have your account and its contents deleted, email privacy@campuscart.social from the address you signed up with. We will action deletion requests within 30 days. Some records — a completed payment, a moderation report — may be retained after deletion where we are required to keep them.
Access to data is enforced in the database itself through row-level security policies, not only in the app, so a bug in one screen cannot expose another person’s private data. Traffic is encrypted in transit. No system is perfect: if a breach ever affects your data, we will tell you.
CampusCart is intended for university students and is not directed at children under 13. We do not knowingly collect data from them. If you believe a child has created an account, email us and we will remove it.
If this policy changes in a way that affects you, we will update the date at the top and note the change in the app. Continuing to use CampusCart after a change means you accept the updated policy.
CampusCart, Lusaka, Zambia — privacy@campuscart.social.