Privacy Policy
Last updated: 7 August 2026
CampusOS is based in Lagos, Nigeria. This policy explains what CampusOS collects, why, and who else sees it. It describes what the app actually does, not what it might do one day.
Questions, corrections or requests: sammy2nuel@gmail.com
What we collect
From your Google account
You sign in with Google. Google gives us your name, email address, profile picture and a Google account identifier. We store all four. We do not receive your Google password and cannot access anything else in your Google account.
What you tell us
- Your handle — the name other students see. This is public to other students. Your real name is not.
- Your school, campus, programme, level and semester
- Your courses, and the class times, assignments, tests and exams you add
- Your notes — anything you type, and any file you upload
- Messages you post in course rooms, and files you attach to them
- Your matric number, if you choose to give it. This is optional. It is never shown to other students and never appears in a web address.
What the app records as you use it
- Which rooms you have joined, and when you last opened them
- Whether you are currently in a room, and whether you are typing
- Which flashcards you have reviewed and how well
- Questions you ask the tutor and the answers it gives
- Which device you have allowed notifications on
Who else sees your information
Other students
Students taking the same course at the same campus, level and semester can see: your handle, messages you post in that room, notes you choose to share, and class times or deadlines you add.
Your real name, email address and matric number are never shown to other students. Notes you have not shared are visible only to you.
Companies that run parts of CampusOS
CampusOS could not work without these, and each sees only what it needs.
| Who | What they see | Where |
|---|---|---|
| Vercel | The app itself, and every request to it | United States |
| Neon | The database — everything listed above | Germany |
| Your sign-in, and push notifications on Android | Global | |
| Apple | Push notifications on iPhone and iPad | Global |
| OpenRouter and the AI model it routes to | Tutor questions, your notes for that course, and files you have cards made from | United States and elsewhere |
The AI part deserves particular attention. When you ask the tutor a question, we send it your notes for that course so the answer relates to what you are studying. When you make flashcards from an uploaded file, we send that file to be read.
If a note or a file contains personal information — a photograph of a document, a page with someone's name or identification number on it — that information is sent to those companies too. We cannot read it back out again once it has been sent.
If you would rather that did not happen, do not upload documents containing personal information, and do not make cards from them.
Where your information is kept
The database is in Germany. Files you upload are stored by Vercel. The app runs in the United States. Your information therefore leaves Nigeria.
How long we keep it
While your account exists. If you delete your account, everything described above is deleted, with two exceptions:
- Your handle is held for three months before anyone else can claim it, so that it is not immediately taken by someone else.
- Messages you posted in course rooms may remain visible to other students, shown as coming from a deleted account. A conversation with half of it removed is not a conversation.
Deleting your account
You can delete your account from the Me screen. It is immediate and cannot be undone.
What you can ask for
Under the Nigeria Data Protection Act 2023 you can ask us to show you what we hold about you, correct it, delete it, or send it to you in a usable form. Email sammy2nuel@gmail.com and we will respond within 30 days.
If you are not satisfied, you can complain to the Nigeria Data Protection Commission.
Students under 18
CampusOS is for tertiary students. If you are under 18, you need a parent or guardian's permission to use it. If we learn that we hold information about someone under 18 without that permission, we will delete it.
Security
Connections are encrypted. Uploaded files are stored privately and served through links that expire. We do not store your password because we never receive one.
No system is completely secure. If your information is exposed in a way that puts you at risk, we will tell you and the Commission.
Changes
If this policy changes in a way that affects you, we will tell you in the app before the change takes effect.