Privacy Policy

Last updated: April 8, 2026

Kampus ("we", "us", "our") is committed to protecting your privacy. This Privacy Policy explains what information we collect, how we use it, who we share it with, and your rights regarding your data. By using the Kampus mobile application ("App"), you consent to the practices described in this policy.

1. Information We Collect

a) Information You Provide

• University email address (required for authentication)
• Display name
• Profile photo (optional)
• Building/dorm and room number (optional)
• Course enrollments
• Language preferences (app language and course name language)
• Posts, comments, votes, and saved items
• Marketplace listings and buy requests
• Course ratings and reviews (including professor and instructor names you provide)
• Course resources you upload (exams, materials, exercises)
• AI chat questions and uploaded images
• Schedule, deadlines, to-do items, and notes
• Feedback and bug reports
• ASAT poll responses, form responses, and election votes

b) Information Collected Automatically

• Device push notification token (if you enable notifications)
• Location data (latitude/longitude, only while the App is open and with your permission)
• App usage analytics (screen views and feature usage events)
• Device platform (iOS or Android)
• App version

c) Information We Do NOT Collect

• We never collect passwords (we use passwordless OTP authentication)
• We do not use advertising trackers or third-party ad SDKs
• We do not collect contacts, call logs, SMS, or browsing history
• We do not use App Tracking Transparency (ATT) as we do not track you across other apps or websites

2. How We Use Your Information

• To authenticate your identity and provide access to the App
• To personalize your feed based on your building and enrolled courses
• To display your posts, comments, and profile to other authenticated students
• To show aggregated "students nearby" counts on the campus map (not individual locations)
• To send push notifications for replies, comments, deadlines, and announcements you have opted into
• To process your questions and images through the AI assistant
• To translate content between Hebrew, Arabic, and English
• To moderate content for safety (profanity filtering and image moderation)
• To enforce rate limits and prevent abuse
• To process and manage your premium subscription
• To improve the App through anonymous usage analytics
• To respond to feedback, bug reports, and support requests

3. Information Sharing & Third Parties

We do not sell, rent, or trade your personal information. We share data with the following third-party service providers solely to operate the App:

a) Supabase (Infrastructure)

Hosts our database, authentication, file storage, and server functions. Your data is stored on Supabase cloud infrastructure (AWS, EU region). Supabase acts as our data processor.

b) Anthropic (AI Assistant)

Your AI chat questions and any images you attach are sent to Anthropic's Claude API for processing. Anthropic does not use your inputs to train their AI models (as per their API usage policy).

c) Google Translate

When you use the translate feature, text is sent to Google's translation service. No API key or user identifier is included in these requests.

d) Expo (Push Notifications)

Your device push token is sent to Expo's push notification service to deliver notifications.

e) RevenueCat (Subscriptions)

If you subscribe to Kampus PRO, your subscription status and purchase events are processed through RevenueCat. Payment information is handled exclusively by Apple or Google and is never shared with us.

f) Sentry (Crash Reporting)

Crash and diagnostic data is sent to Sentry for error monitoring. This data is not linked to your identity.

g) Law Enforcement

We may disclose your information if required by law, valid court order, or government request.

4. Data Storage & Security

• All data is stored on Supabase cloud infrastructure with encryption at rest and in transit (HTTPS/TLS).
• Sensitive credentials are stored in Supabase Vault with AES-256 encryption, inaccessible to client applications.
• Row-Level Security (RLS) ensures users can only access their own private data.
• We use passwordless authentication (one-time codes via email) so no passwords are ever stored.
• While we implement industry-standard security measures, no system is completely secure.

5. Location Data

• Location is collected only while the App is open and only if you grant location permission.
• We do not track your location in the background.
• Individual user locations are never shown to other users. Only aggregated counts per building are displayed.
• You can enable Ghost Mode to hide your location from all presence features.
• Location data is removed when you log out or disable location sharing.
• Location data is never shared with third parties.

6. AI Features & Data Processing

• Questions and images you send to the AI assistant are transmitted to Anthropic's Claude API.
• Your questions and AI responses are stored for chat history (premium feature) and rate limiting.
• Anthropic does not use your API inputs to train their models.
• Images uploaded in posts are analyzed by our moderation system to detect inappropriate content.

7. Push Notifications

• Push notifications are optional. You can enable or disable them at any time.
• You can control notification categories individually: post replies, deadlines, messages, and SOS alerts.
• Your device push token is stored securely and is not visible to other users.

8. Subscriptions & Payments

• Subscription purchases are processed entirely by Apple (App Store) or Google (Play Store).
• We never receive, process, or store your credit card or payment details.
• We receive subscription status updates from RevenueCat to manage your premium features.

9. Analytics

We collect basic usage analytics stored in our own database (not sent to third-party analytics platforms). We do not use cookies, advertising identifiers, or cross-app tracking.

10. Children's Privacy

Kampus is not intended for children under 18 years of age. The App requires a university email address, which inherently limits access to university-age students. If you believe a child under 18 has provided us with personal information, please contact us at ali@ali-habashi.com.

11. Your Rights

Under applicable privacy laws (including the Israeli Privacy Protection Law 5741-1981 and GDPR where applicable), you have the following rights:

• Access: View all your data within the App.
• Deletion: Delete your account at any time from Settings.
• Correction: Edit your profile information at any time.
• Location control: Enable Ghost Mode or revoke location permissions.
• Notification control: Toggle individual notification categories on/off.
• Anonymous posting: Choose to post anonymously.
• Data portability: Request a copy of your data by contacting us.
• Withdraw consent: Stop using the App and delete your account at any time.

To exercise any of these rights, use the in-app settings or contact us at ali@ali-habashi.com.

12. Data Retention

• Account data is retained as long as your account exists.
• When you delete your account, your profile and content are permanently deleted or anonymized.
• Location data is removed when you log out or disable location sharing.
• Analytics data is retained indefinitely in aggregated form.

13. International Data Transfers

Your data may be processed in countries other than Israel, including where our service providers operate. We ensure appropriate safeguards through data processing agreements and industry-standard security measures.

14. Apple App Privacy Details

Data Used to Track You: None.
Data Linked to You: Email address, display name, profile photo, user-generated content, course enrollments, building/room, app usage analytics, AI chat data, purchase history (subscription status only).
Data Not Linked to You: Crash and diagnostic data (anonymized).
Data Not Collected: Financial information, health data, contacts, browsing history, advertising data.

15. California Privacy Rights (CCPA)

If you are a California resident, you have the right to know what personal information we collect, request deletion, and opt out of the sale of your personal information. We do not sell your personal information. Contact us at ali@ali-habashi.com.

16. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes through the App. Continued use after changes constitutes acceptance.

17. Contact Us

For privacy questions, data requests, or concerns:
Email: ali@ali-habashi.com
Developer: Ali Habashi
Haifa, Israel