Privacy Policy

1. What We Collect

• Information you provide - Account & Profile: name, email, school/affiliation, graduation year, username/handle, profile photo, and bio.
• Information you provide - Verification (optional/when enabled): student ID or school-issued email domain confirmation.
• Information you provide - Listings & Content: shop details, service offerings, product photos, descriptions, pricing, availability, messages you send via in-app chat, and reviews.
• Information you provide - Transactions: order details, booking details, refunds, and support requests.
• Information you provide - Customer Support: information you include when contacting us.
• Information from your device - Identifiers: app-specific user ID and device identifiers (e.g., Instance ID).
• Information from your device - Usage & Diagnostics: app interactions, performance, crash logs, and basic device information such as model and OS version.
• Information from your device - Location (approximate, optional): used to improve discovery of nearby services. We do not collect precise GPS unless you enable it for a feature that needs it.
• Information from third parties - Payments: we do not store full payment card numbers. Payments are processed by our partner, which may collect and process personal data under its own privacy policy.
• Information from third parties - Analytics & Infrastructure: service providers may process limited data to provide their services.
• We do not buy, sell, or rent personal data.

2. How We Use Information

• Provide and improve the Services: account creation, listings, search, booking, messaging, notifications, and customer support.
• Safety and integrity: moderation, fraud prevention, abuse detection, dispute resolution, and enforcement of our Terms.
• Payments and payouts: facilitating purchases, fees, refunds, and chargeback handling.
• Communications: transactional emails and push notifications about orders, messages, and updates; and, with your consent, marketing communications that you can opt out of.
• Research and analytics: understanding usage to improve performance and features.
• Legal compliance: meeting tax, accounting, and regulatory obligations.

3. Sharing Information

• Service providers / processors: hosting, analytics, email/SMS, payment processing, content delivery, and customer support tools.
• Other users: information needed to complete a transaction or booking, such as shop name, profile, photos, and selected contact methods. Messages sent through the app are visible to the parties involved.
• Legal, safety, and rights: to comply with law, respond to lawful requests, prevent fraud or abuse, or protect our users, the public, and our rights.
• Business transfers: if we undergo a merger, acquisition, or asset sale, information may be transferred consistent with this Policy.
• With your consent: in any other case where you direct us to share.
• We do not share personal data with third parties for their independent advertising or for “selling” under US state privacy laws.

4. Data Retention

We keep personal data only for as long as necessary for the purposes described above, including to comply with legal, tax, and accounting requirements. Retention periods vary by data type; for example, transaction records may be retained for at least 3–7 years. When we no longer need data, we delete or de-identify it.

5. Your Choices & Rights

• Access / Update: you can view and edit profile and account details in the app.
• Delete: you can request deletion of your account and associated personal data, subject to legal or legitimate interests such as preventing fraud and retaining transaction records.
• Communications: you can opt out of non-essential emails and push notifications in settings.
• Permissions: you can control device permissions, including camera, photos, notifications, and approximate location, in your operating system settings.
• US state privacy disclosures (e.g., CA, VA, CO, CT, UT): we provide the rights afforded under applicable state laws, including the right to know, access, correct, delete, and opt out of certain processing. We do not sell personal data or share it for cross-context behavioral advertising. You may exercise these rights by contacting us at privacy@campus-hustle.com.
• GDPR (EU/EEA/UK): our legal bases include contract performance, legitimate interests (such as security and improvement), legal obligations, and consent where required. When we rely on legitimate interests, we balance our interests against your rights. You may have rights to access, correct, delete, restrict, object, or portability. You can contact us or your local authority.

6. Children

The Services are intended for students aged 16+. We do not knowingly collect personal data from children under 16. If you believe a child has provided personal data, contact us to remove it.

7. Security

We use administrative, technical, and physical safeguards designed to protect personal data, including encryption in transit, access controls, and least-privilege practices. No method of transmission or storage is 100% secure, so we cannot guarantee absolute security.

8. International Transfers

We may process and store information in the United States and other countries where we or our service providers operate. When transferring data, we use appropriate safeguards as required by law.

9. App Privacy Labels

• Contact Info: name, email, and phone, used for app functionality and safety.
• User Content: photos, listings, messages, and reviews, used for app functionality and safety.
• Identifiers: user ID and device identifiers, used for app functionality and analytics.
• Usage Data: product interaction, used for analytics and improvement.
• Diagnostics: crash data and performance data, used for diagnostics.
• Purchases: order details, used for app functionality.
• Location (approximate, optional): used for discovery and fraud prevention.
• We do not track users across other companies’ apps and websites for targeted advertising.

10. Changes to This Policy

We may update this Policy from time to time. If we make material changes, we will notify you through the app or by email. Continued use of the Services after the effective date means you accept the updated Policy.

11. Contact Us