Privacy policy
Last updated 22 October 2026 (version 2026-10)
This policy explains what personal data CampusCrush collects, why, how long we keep it and your rights under the Uganda Data Protection and Privacy Act, 2019 and, for members elsewhere, the data protection laws of their country.
Who we are
CampusCrush is operated by Studio 13 Developers (Uganda), the data controller. Contact for privacy questions and requests: campuscrush@studio13developers.com.
What we collect and why
| Data | Why | Who sees it |
|---|---|---|
| Name, date of birth, email or phone, password (hashed) | Your account; checking you are 18+; signing in; security messages | Only you and authorised staff. Never shown on your profile. |
| Display name, age, photos, bio, interests, intention, lifestyle, prompts, languages, institution, campus, course, year | Your dating profile and matching | Members who can see your profile, within your privacy settings |
| Gender and who you want to meet | Showing you only to compatible people | Your gender is shown on your profile; your preferences are not |
| Tribe (optional) | Only if you choose to share it, for your profile and for tribe search | Hidden by default; shown or searchable only if you switch that on. Never used for matching scores. |
| Likes, matches, messages, blocks | Running the service; safety | The people involved. Messages are encrypted at rest; staff do not browse chats. |
| Student verification: legal name, registration number, optional NIN, documents, a short live face video | Checking you are a student (only if you apply, with your consent) | Authorised verification officers; your institution's representative (name, programme, registration number only) if you choose institution confirmation |
| Voice and video calls: who called whom, when, voice or video, how long, how it ended | Running calls, call history, safety and abuse limits. Calls happen only between matches who both allowed them. | The two people in the call. Calls are encrypted end to end and never recorded: neither we nor the relay provider can hear or see them. |
| Group calls in closed community groups: the schedule, who joined and for how long | Running scheduled group calls, attendance figures, safety | Members of the group. Group calls are encrypted end to end through LiveKit and never recorded: neither we nor LiveKit can hear or see them. |
| Reports and evidence you choose to send | Safety and moderation | Authorised safety moderators |
| Device and usage (sign-in times, browser type, IP address) | Security, preventing abuse | Authorised staff; IP addresses in audit logs are stored as keyed hashes |
Sensitive information
- Identity documents, registration numbers and NINs are encrypted, stored outside the public website, masked on staff screens, and every view is logged.
- NINs are optional, are never printed on certificates or shown to other members, and are deleted when a decision is made. We keep only a one-way keyed hash to detect duplicate applications.
- The live face video is only used by verification officers to check that a real person matches your documents and profile photos. We do not run face-recognition software on it, it is never shown to other members, and it is deleted with your documents.
- Verification evidence is never used for matching and never sold.
Legal bases
We process your data to provide the service you asked for (your contract with us), with your consent where the law requires it (verification evidence, optional tribe information, optional emails), to keep members safe (our legitimate interest and legal duties), and to meet legal obligations.
How long we keep it
- Verification documents and the face video: deleted 30 days after the decision (or immediately if you withdraw).
- Rejected or withdrawn applications: personal details removed after 12 months; the decision record is kept.
- Your account: while it is active. If you ask us to delete it, we wait 30 days (so you can change your mind), then erase your profile, photos, messages and evidence.
- Call records and group-call schedules and attendance (no content): 180 days, then deleted.
- Certificate validation lookups: 12 months. Security audit records: up to 7 years, containing IDs only.
Sharing
We do not sell personal data. We share it only with service providers who host and email for us under contract (calls are relayed in encrypted form through Cloudflare's network, and group calls through LiveKit's; they see connection details such as IP addresses but never the content; when you buy an event ticket, Flutterwave receives your display name, the amount and your email address or phone number, and you enter your mobile money or card details on Flutterwave's own page, never on CampusCrush), with your institution's representative if you choose institution confirmation, and with authorities when the law requires it.
Your rights
You can access your data (Settings → Account → Download my data), correct it (edit your profile), withdraw consent for verification processing, object to processing, and ask us to delete your account. You may also complain to the Personal Data Protection Office of Uganda.
Security
We use HTTPS, hashed passwords, encryption for sensitive fields and files, role-based staff access, rate limits and a tamper-evident audit log. No system is perfectly secure; if a breach affects you, we will tell you and the regulator as the law requires.
Children
CampusCrush is only for adults aged 18 and above. We remove accounts that appear to belong to anyone younger.
Changes
We will tell you in the app before material changes take effect.