Privacy Policy

1. Introduction

Welcome to CampusBodima. We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application and related services.

By using CampusBodima, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with our policies and practices, please do not use our Service.

2. Information We Collect

2.1 Personal Information

When you create an account or use our Service, we may collect the following personal information:

• Account Information: Name, email address, phone number, date of birth, and profile photo
• Student Information: University name, student ID (optional), year of study
• Owner Information: Property ownership details, business registration information, bank account details for payments
• Identity Verification: Government-issued ID, proof of property ownership (for boarding owners)

2.2 Location Data

We collect and process location information to provide our core services:

• Precise Location: GPS coordinates to show nearby boarding options and calculate distances
• Approximate Location: City or region for search and filtering purposes
• Property Location: Addresses and coordinates of listed boarding properties

You can control location permissions through your device settings. However, disabling location services may limit certain features of the app.

2.3 Usage Data

We automatically collect information about how you interact with our Service:

• Pages viewed, features used, and time spent on the app
• Search queries and filter preferences
• Boarding listings viewed, saved, or contacted
• Device information (type, operating system, unique device identifiers)
• IP address and browser type
• Crash reports and performance data

2.4 Communication Data

When you communicate through our platform, we collect:

• Messages exchanged between students and boarding owners
• Customer support inquiries and correspondence
• Feedback and reviews

2.5 Payment Information

If you make payments through our platform:

• Payment card information (processed securely by third-party payment processors)
• Transaction history and payment status
• Billing address

Note: We do not store full credit card numbers on our servers. Payment processing is handled by PCI-DSS compliant third-party providers.

3. How We Use Your Information

We use the collected information for the following purposes:

3.1 Service Provision

• Create and manage your account
• Display relevant boarding listings based on your location and preferences
• Facilitate communication between students and boarding owners
• Process payments and manage transactions
• Verify the authenticity of listings and users

3.2 Service Improvement

• Analyze usage patterns to improve our features and user experience
• Conduct research and development for new features
• Personalize your experience and provide relevant recommendations
• Monitor and analyze trends and usage statistics

3.3 Communication

• Send you service-related notifications and updates
• Respond to your inquiries and provide customer support
• Send promotional materials and marketing communications (with your consent)
• Notify you about changes to our policies or services

3.4 Safety and Security

• Detect, prevent, and address fraud and security issues
• Verify user identity and prevent fake accounts
• Enforce our Terms and Conditions
• Protect the rights and safety of our users

4. Data Sharing and Disclosure

4.1 Information Shared with Other Users

When you use our Service, certain information is visible to other users:

• Students: Your name, profile photo, and university (visible to boarding owners you contact)
• Owners: Your name, profile photo, property details, and contact information (visible to students viewing your listings)

4.2 Third-Party Service Providers

We share information with trusted third-party service providers who assist us in operating our Service:

• Payment Processors: To process payments securely
• Cloud Storage Providers: To store data and host our services
• Analytics Services: To understand usage patterns (e.g., Google Analytics, Firebase)
• Communication Services: To send emails and push notifications
• Mapping Services: To provide location-based features

These providers are contractually obligated to protect your information and use it only for the purposes we specify.

4.3 Legal Requirements

We may disclose your information if required by law or in response to:

• Legal processes (subpoenas, court orders)
• Government or regulatory requests
• Enforcement of our Terms and Conditions
• Protection of our rights, property, or safety, or that of our users

4.4 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity. We will notify you of any such change and provide options regarding your information.

5. Data Security

We implement industry-standard security measures to protect your information:

• Encryption: Data transmission is encrypted using SSL/TLS protocols
• Secure Storage: Personal data is stored on secure servers with restricted access
• Access Controls: Only authorized personnel have access to personal information
• Regular Audits: We conduct regular security assessments and vulnerability testing
• Authentication: Multi-factor authentication options for account security

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

6. Your Rights and Choices

6.1 Access and Correction

You have the right to:

• Access the personal information we hold about you
• Request corrections to inaccurate or incomplete information
• Update your profile information at any time through the app

6.2 Data Deletion

You can request deletion of your personal information by:

• Deleting your account through the app settings
• Contacting our support team at privacy@campusbodima.lk

Please note that some information may be retained for legal or legitimate business purposes even after account deletion.

6.3 Marketing Communications

You can opt out of marketing communications by:

• Clicking the "unsubscribe" link in marketing emails
• Adjusting notification preferences in the app settings
• Contacting us directly

You will continue to receive essential service-related communications even if you opt out of marketing.

6.4 Location Data

You can control location permissions through your device settings. You may choose to:

• Allow location access only while using the app
• Deny location access entirely
• Provide approximate location instead of precise location

7. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your experience:

7.1 Types of Cookies

• Essential Cookies: Required for the Service to function properly
• Analytics Cookies: Help us understand how users interact with our Service
• Preference Cookies: Remember your settings and preferences
• Advertising Cookies: Deliver relevant advertisements (with your consent)

7.2 Managing Cookies

You can control cookies through your browser settings. However, disabling certain cookies may affect the functionality of our Service.

8. Third-Party Services

Our Service may contain links to third-party websites or integrate with third-party services:

• Social Media: Facebook, Instagram, Twitter for sharing and authentication
• Payment Gateways: Stripe, PayPal, or local payment processors
• Maps and Navigation: Google Maps for location services
• Analytics: Google Analytics, Firebase Analytics

These third parties have their own privacy policies. We are not responsible for their practices and encourage you to review their policies.

9. Children's Privacy

Our Service is not intended for users under the age of 18. We do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately, and we will delete such information.

10. Data Retention

We retain your personal information for as long as necessary to:

• Provide our services to you
• Comply with legal obligations
• Resolve disputes and enforce our agreements
• Maintain business records

When information is no longer needed, we will securely delete or anonymize it.

11. International Data Transfers

Your information may be transferred to and processed in countries other than Sri Lanka. We ensure that appropriate safeguards are in place to protect your information in accordance with this Privacy Policy and applicable data protection laws.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any material changes by:

• Posting the updated policy on our website and app
• Sending you an email notification
• Displaying an in-app notification

Your continued use of the Service after such changes constitutes your acceptance of the updated Privacy Policy.

13. Your California Privacy Rights

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to know what personal information is collected
• Right to know if personal information is sold or disclosed
• Right to opt-out of the sale of personal information
• Right to request deletion of personal information
• Right to non-discrimination for exercising your rights

Note: We do not sell personal information to third parties.

14. GDPR Rights (European Users)

If you are located in the European Economic Area (EEA), you have rights under the General Data Protection Regulation (GDPR):

• Right to access your personal data
• Right to rectification of inaccurate data
• Right to erasure ("right to be forgotten")
• Right to restrict processing
• Right to data portability
• Right to object to processing
• Right to withdraw consent