Privacy Policy

Three kinds of people use CampusKarts: sellers and their delivery staff (who sign in to run a kart), and customers (who place orders on a seller’s storefront). We collect different information from each, described below.

Account & identity. For sellers and delivery staff: name and mobile (WhatsApp) number, used to sign you in with a one-time code; for platform staff, an email address and password. For customers: the name and mobile number entered at checkout.

Order information. The items ordered, quantities, prices, chosen delivery point or pickup, any note, and order status. This is created when a customer places an order and is visible to the seller (and, for a delivery, the assigned delivery person).

Device & technical. When you use the app we store a device sign-in token, a device label and platform (e.g. “Android”), and — if you enable order alerts — a push-notification token from Google Firebase Cloud Messaging or your browser. Our servers process standard request data (IP address, timestamps) to operate and secure the service.

Cookies & local storage. We use a small number of essential, first-party cookies and browser storage to keep you signed in, remember a verified phone number on your device, and hold your cart. We do not use third-party advertising or tracking cookies.

We do not collect precise device location (GPS), contacts, photos, or files. A “delivery point” is a place the customer picks from a list — not their live location.

• To sign you in and keep your session secure.
• To create, route, and display orders to the right seller and delivery person.
• To send one-time login codes and, if enabled, order notifications.
• To enforce plan limits, prevent abuse, and keep the service running.
• To respond to your support requests.

We do not sell your personal information, and we do not use it for third-party advertising.

We share information only with service providers that help us run CampusKarts:

• A WhatsApp messaging provider to deliver one-time codes and order messages to the number you provide.
• Google Firebase Cloud Messaging to deliver push notifications to the app (only if you enable alerts).
• Our hosting provider, which stores the platform’s data on our behalf.

An order’s customer name, number, and delivery point are shown to the seller fulfilling it (and their assigned delivery person). We may disclose information if required by law or to protect the service and its users.

We keep account and order data for as long as your account is active and as needed to provide the service. A seller may request deletion of their kart; approved deletions move to a recycle bin and are permanently removed after 30 days. Order history visible in the app is limited by the seller’s plan. One-time codes are short-lived and deleted after use.

Access is over HTTPS. Passwords and device tokens are stored only as salted hashes, never in the clear, so they cannot be read back from our database. Sign-in codes are hashed and expire quickly. No method of transmission or storage is perfectly secure, but we take reasonable measures to protect your information.

You can ask us to access, correct, or delete your personal information, and you can turn off notifications at any time from your device settings. To make a request, contact us at the address below. We will respond within a reasonable time and as required by applicable law.

CampusKarts is intended for use by adults (and campus users of legal age). It is not directed to children under 13, and we do not knowingly collect their information.

We may update this policy from time to time. Material changes will be reflected by the “Last updated” date above, and where appropriate we will notify you in the app.

Questions or requests about this policy or your data: support@campuskarts.com.