Privacy Policy

Last updated: 9/29/2026

1. What we collect

NUST student email address, used for authentication and to confirm eligibility to use Campus Convoy.

Your chosen destination area (a broad zone, e.g. 'Okuryangava' — never an exact home address) and requested departure time, so we can match you into a convoy.

Basic account metadata: when your account was created and when you were last active.

Safety reports you choose to submit, including the report type and any details you write.

2. What we don't collect

We do not ask for or store your exact home address, national ID number, or phone number.

We do not track your live location or continuously monitor your movements. Campus Convoy only knows the destination area and time you tell it.

We do not sell your data to advertisers or third parties.

3. How your information is used

Your destination and departure time are used only to match you with compatible students heading the same way, within the same route cluster and a narrow time window.

Other convoy members see only that a spot is filled ('Student'), not your name, email, or any identifying details, unless you choose to share that yourself in person.

Your email is used solely for magic-link sign-in and is never shown to other students.

4. Who can see what

Database-level access controls (Row Level Security) restrict every student to their own requests, and to convoys and shared codes only for groups they actually belong to. No student can query another student's data directly.

Administrators can view safety reports and aggregate operational data (like how many active convoys exist) to keep the platform running safely, but do not have routine access to your personal browsing or request history beyond what's needed to respond to a safety report.

5. Shared convoy codes

The shared code used to confirm you're with the right group is generated per convoy, encrypted at rest, expires after about 20 minutes, and is only ever shown to confirmed members of that specific convoy.

6. Data retention

Request and convoy history is retained to help operate and improve the matching system. If you'd like your account or history removed, contact the Campus Convoy team through the channel you were given access to the platform from.

7. Changes to this policy

This policy may be updated as the platform develops. Continued use of Campus Convoy after changes are posted constitutes acceptance of the updated policy.

Questions about this policy? Contact the Campus Convoy team through the channel you were given access to the platform from.