Privacy Policy

1. Introduction

Welcome to CampusChow ("we," "our," or "us"). We are committed to protecting your personal information and your right to privacy. This Privacy Policy governs the privacy policies and practices of our website, application, and related services (collectively, the "Services"). By using our Services, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

We collect personal information that you voluntarily provide to us when registering on the Services, expressing an interest in obtaining information about us or our products and services, or otherwise contacting us.

• Personal Data: Name, email address, phone number, and delivery address.
• Payment Information: CampusChow does not collect, store, or have access to your card number, CVV, PIN, or any sensitive payment credentials. All payment transactions are processed directly and securely by Paystack (a PCI DSS Level 1 certified payment processor). We only store a non-sensitive transaction reference number returned by Paystack after a successful payment, solely for order reconciliation purposes.
• Device Data: Device ID, operating system version, and browser type for security, push notifications, and performance tracking.
• Usage Data: Information on how the Services are accessed and used.

3. How We Use Your Information

We use personal information collected via our Services for a variety of business purposes described below:

• To facilitate account creation and logon process.
• To fulfill and manage your orders, payments, and deliveries.
• To send administrative information to you regarding your account or orders.
• To send push notifications related to your order status.
• To respond to user inquiries and offer support.

4. Sharing Your Information

We only share information with your consent, to comply with laws, to provide you with services, to protect your rights, or to fulfill business obligations. This includes:

• Restaurant Partners: We share your name, phone number, and delivery address with the restaurants you order from.
• Delivery Riders: We share your delivery details with delivery riders to ensure your order reaches you.
• Paystack (Payment Processor): When you initiate a payment, your email address is shared with Paystack solely to generate a payment session and send you a receipt. Paystack independently processes and stores all card data under their own Privacy Policy. See Section 5 for full details.
• Real-Time Services: We use Ably to deliver live order status updates to your device.

5. Payment Processing & Paystack

CampusChow uses Paystack as its exclusive payment processor for all card payments and wallet top-ups within the application. Paystack is a leading African payment gateway headquartered in Lagos, Nigeria, and is certified to PCI DSS Level 1 — the highest level of security certification for payment processors worldwide.

How the payment flow works:

1. When you choose to pay by card, CampusChow initiates a payment session with Paystack's API using only your email address and the order amount.
2. You are redirected to Paystack's secure payment page (hosted at paystack.com), which is fully outside CampusChow's systems.
3. You enter your card details directly on Paystack's encrypted page. CampusChow never sees, intercepts, or stores this information at any point.
4. After payment, Paystack redirects you back to the CampusChow app with a unique transaction reference.
5. CampusChow confirms the payment status by calling Paystack's verification API server-side. Only the transaction reference and payment status are stored in our database.

What Paystack collects:

When you make a payment, Paystack independently collects and processes data necessary for the transaction, including your card number, billing details, and IP address, in accordance with their own Privacy Policy. We encourage you to review Paystack's privacy practices:

• Paystack Privacy Policy: https://paystack.com/ng/privacy-policy
• Paystack Website: https://paystack.com

Data we store related to payments:

6. Data Retention and Deletion

We will only keep your personal information for as long as it is necessary for the purposes set out in this privacy policy, unless a longer retention period is required or permitted by law.

Account Deletion: You have the right to request the deletion of your personal data. You can delete your account directly from within the mobile app settings. Alternatively, you can submit a deletion request via our Account Deletion Request Page. Upon request, we will delete or anonymize your personal information, unless we are legally required to maintain it (e.g., transaction records required for financial compliance).

7. Security of Your Information

We have implemented appropriate technical and organizational security measures designed to protect the security of any personal information we process. All data in transit is encrypted using TLS (HTTPS). Sensitive credentials such as authentication tokens are stored using platform-level secure storage (iOS Keychain / Android Keystore). However, please also remember that we cannot guarantee that the internet itself is 100% secure.

8. Contact Us

If you have questions or comments about this policy, you may email us at privacy@campuschow.com.