Campus CaféThis Privacy Policy explains how Campus Café (“we”, “us”, “our”, the “App”) collects, uses, shares and protects your personal information when you use our mobile application and related services. By creating an account or using the App, you agree to the practices described here.
1. Information we collect
We only collect what we need to run the cafeteria service. We do not use third-party advertising, and we do not sell your personal data.
| Category | What it includes | Why we collect it |
|---|---|---|
| Account & identity | Username, email address, password (stored only in encrypted/hashed form), and—optionally—a profile photo, student registration number and year of study. | To create and secure your account, verify your email, sign you in, and personalise the App. |
| Financial & transaction | Your in-app wallet balance, top-up and payment history (amount, method, reference, status, date) and food order history. | To process payments, maintain your wallet, fulfil orders, and show your receipts and history. |
| Mobile-money number | The phone number you enter when topping up your wallet by mobile money. | It is passed to our payment processor to send the payment prompt to your phone. We do not store this number on our servers. |
| Device permissions | Camera access (used by cafeteria staff to scan an order QR code, and—if you choose—to take a profile photo). QR images are processed on the device and not uploaded. | To verify orders at the counter and let you set a profile picture. |
We do not collect your location, contacts, or device advertising identifiers, and the App does not include analytics or advertising SDKs.
2. How we use your information
- Provide the core service: ordering food, managing your wallet, and serving orders via QR code.
- Authenticate you and keep your account secure (including email verification and password reset).
- Process top-ups and payments through our payment partner.
- Send you essential service emails (verification codes, password-reset codes, and account notices).
- Provide customer support and respond to your requests.
- Detect, prevent and address fraud, abuse, or technical problems, and comply with the law.
3. How information is shared
We share personal data only with service providers that help us operate the App, and only as needed for them to perform their function:
| Provider | Purpose | Data shared |
|---|---|---|
| ClickPesa | Mobile-money / payment processing | Top-up amount and the phone number you provide for the payment prompt |
| Resend | Sending transactional emails | Your email address and the message content (e.g. a verification code) |
| Render | Application & database hosting | Account, wallet and order data, stored securely |
| Cloudflare | Email routing and network/DNS | Email metadata for messages sent to our support address |
We may also disclose information if required by law, to enforce our terms, or to protect the rights, property or safety of our users or the public. We do not sell or rent your personal data to anyone.
4. Data retention
We keep your account and transaction records for as long as your account is active, and for a reasonable period afterwards to meet legal, accounting, and dispute-resolution obligations. When you ask us to delete your account, we remove your personal data within a reasonable time, except where we are required to retain certain records (for example, financial transaction records) by law.
5. Data security
All traffic between the App and our servers is encrypted in transit using HTTPS/TLS. Passwords are stored only as salted, one-way hashes—never in plain text. Access to production systems is restricted. No method of transmission or storage is completely secure, but we work to protect your information using appropriate technical and organisational measures.
6. Your rights and choices
Subject to applicable law, you have the right to access, correct, or delete your personal information, and to object to or restrict certain processing. You can update most profile details in the App, and change your password from the Profile screen.
Deleting your account and data
To request deletion of your account and associated personal data, email info@campuscafeteriaapp.com from the email address on your account, with the subject line “Delete my account.” We will verify the request and delete your data within 30 days, except for records we must retain by law.
7. Children's privacy
The App is intended for university students and staff and is not directed to children under 13. We do not knowingly collect personal data from children under 13. If you believe a child has provided us with personal information, contact us and we will delete it.
8. International users
We are based in Tanzania and our service providers may process data in other countries. Where data is transferred across borders, we take steps to ensure it remains protected consistent with this policy and applicable law.
9. Changes to this policy
We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date above and, where appropriate, notify you in the App. Continued use of the App after changes take effect means you accept the updated policy.
10. Governing law
This policy is governed by the laws of the United Republic of Tanzania, including the Personal Data Protection Act, 2022, and its regulations.
11. Contact us
Questions, requests, or complaints about this policy or your data:
- Email: info@campuscafeteriaapp.com
- App: Campus Café