Privacy Policy

Effective date: October 15, 2026 · Applies to the Camplugie Android app, website and web app.

Who we are

Camplugie (“Camplugie”, “we”, “us”, “our”) is a campus marketplace and community app owned and operated by Alphastack Digital Solutions Ltd, Garki, Abuja, Nigeria. We are the data controller for the personal information described in this policy. This policy applies to the Camplugie Android app (Google Play), the Camplugie website at camplugie.com, and the Camplugie installable web app. It is written to meet the Nigeria Data Protection Act 2023 (NDPA) and Google Play’s User Data policy. By creating an account or using Camplugie you agree to this policy.

Information we collect

Account & profile

Name, email address and profile photo — from Google Sign-In, or from the email and password you register with
University, username, bio, an optional phone number, and any other profile details you choose to add
Referral / ambassador code, if you use one

Marketplace, payments & wallet

Listings you create (title, price, description, category, photos)
Orders, escrow and payment records (amount, status, buyer, seller, timestamps) processed through Paystack
Wallet balance, top-ups, transfers between users and withdrawals
Bank account details you add for withdrawals — these are sent to Paystack, which creates a secure payout reference. We keep only that reference, the bank name, the account name and the account number you gave us. We do not store card numbers or PINs

Chats, groups, calls & lectures

Messages, photos, videos, voice notes and documents you send in 1:1 and group chats; reactions, replies and read receipts
Posts, comments and likes on The Yard; groups you create or join
Audio and video during calls and group lectures are streamed between participants. We do not record calls or lectures
Reports you file and users you block

Location

Your device’s approximate or precise location only when you use Swift delivery features — for example when you tap “Use my current location”, drop a pickup/drop-off pin, or track a delivery
Addresses you type into Swift’s address search (sent to our address-search provider to suggest places)
We do not collect location in the background and the app does not have background-location permission

Photos, camera & microphone

Camera and microphone are used only when you place or answer a call, join a lecture, record a voice note, or take a photo to attach
Photos and files are only shared when you pick them with your phone’s own picker. Camplugie does not browse or scan your photo library or files

Notifications & device information

A push-notification token for your phone (Firebase Cloud Messaging in the Android app) or an endpoint and encryption keys for your browser (web push), so we can send alerts
Device type, operating system, app version, language, crash and error logs, and IP address / request logs from our hosting provider
Your notification preferences (messages, calls, groups, listings, posts, orders)

Permissions the Android app asks for

Permission	Why we ask
Notifications	Alerts for messages, calls, lectures, orders, new listings and posts. You can switch each type off in Settings.
Microphone	Voice and video calls, lectures and voice notes.
Camera	Video calls, lectures, and photos for listings, posts and chats.
Location (approximate / precise)	Swift delivery: placing pins, finding the route and fee, and live delivery tracking — only while you use those features.
Internet & network state	To load Camplugie and detect when you are offline.
Vibrate	Notification and call alerts.

Camera, microphone and location are optional. If you decline them, the rest of Camplugie keeps working; only the feature that needs them is unavailable. You can change any permission at any time in your phone’s Settings → Apps → Camplugie → Permissions.

How we use your information, and why

To provide Camplugie (contract): create and secure your account, run the marketplace, hold and release escrow payments, operate your wallet, connect buyers, sellers, runners and groups, and run Swift delivery
To send notifications (consent / contract): messages, calls, lectures, order and delivery updates, and — if you leave them on — new listings and posts on your campus
To keep Camplugie safe (legitimate interests / legal obligation): detect fraud and abuse, review reports, enforce blocks, and comply with law
To pay people (contract): calculate commissions and pay out seller, runner and ambassador earnings
To improve Camplugie (legitimate interests): fix bugs, measure reliability and develop features

We do not sell your personal data, and we do not use your private messages for advertising.

Who we share data with

We share data only with the service providers that make Camplugie work, and only what each needs:

Provider	Purpose	Data
Google (Sign-In, Firebase Cloud Messaging)	Sign-in; delivering push notifications to the Android app	Name, email, photo (Sign-In); device push token and notification content (FCM)
Supabase	Database, authentication, file storage, realtime messaging	Account, listing, chat, order and wallet data
Paystack	Payments, refunds and payouts	Amount, email, order reference; bank or card details you enter directly with Paystack
Cloudinary / Supabase Storage	Photo and video hosting	Media you upload
Resend	Transactional email	Your email address and notification content
OpenStreetMap, Photon, OSRM	Swift maps, address search and routing	Map areas, the text you search, and pickup/drop-off coordinates (no account data)
Vercel	Website and server hosting	Standard request logs (IP address, time)

When you chat, trade or take part in a group, the people you interact with can see the information you choose to share with them (such as your name, photo, listings, messages and posts). We may also disclose information if required by law, court order or a lawful request from a Nigerian authority, or to protect the rights, property or safety of Camplugie, our users or the public.

International transfers

Our providers (for example Google, Supabase, Vercel and Paystack) may process data on servers outside Nigeria. Where this happens we rely on appropriate safeguards required by the NDPA, such as contractual protections with those providers.

How long we keep data

Your account data is kept while your account is active.
When you delete your account we remove your profile details, listings, posts, messages you sent, group memberships, notification tokens and bank payout reference (see “Delete your account” below).
Transaction records (completed orders, receipts and wallet history) are kept, without your name on them, for as long as Nigerian tax, accounting, anti-fraud and dispute rules require.
Server logs are kept for a short period for security and debugging.

Your rights

Under the NDPA you have the right to: be informed about how we use your data; access your data; correct inaccurate data; request erasure; restrict or object to processing; receive your data in a portable format; withdraw consent at any time (this does not affect earlier processing); and not be subject to decisions made solely by automated means that significantly affect you.

Most things you can do yourself in the app: edit your profile and listings, change notification switches, block or report users, and delete your account.
For anything else, email info@camplugie.com. We aim to reply within 30 days.
If you are not satisfied with our response, you have the right to complain to the Nigeria Data Protection Commission (NDPC).

Delete your account

You can delete your account at any time in the app: Settings → Account actions → Delete account. You can also request deletion without the app on our account deletion page. Deleting your account is permanent. Before you can delete it, any money left in your wallet must be withdrawn and any order in progress must be finished or cancelled.

Security

Data is encrypted in transit (HTTPS). Our database uses row-level security so people can only read data they are allowed to see, and payments are handled by Paystack so we never see your full card details. No method of transmission or storage is 100% secure, so we cannot guarantee absolute security. Never share your password or your Swift delivery PIN with anyone you do not trust.

Children

Camplugie is for people aged 18 and over. We do not knowingly collect personal information from anyone under 18. If you believe a person under 18 has given us information, contact us and we will delete it. See also our Child Safety Standards.

Changes to this policy

We may update this policy from time to time. We will change the effective date above and, for important changes, tell you in the app or by email.

Contact

Alphastack Digital Solutions Ltd
Garki, Abuja, Nigeria
Email: info@camplugie.com

About the company

Camplugie is owned and operated by Alphastack Digital Solutions Ltd, a company founded on 27 June, with its office in Garki, Abuja, Nigeria. Contact: info@camplugie.com.