Campus IQ — Privacy Policy

This policy explains what information Campus IQ collects, why, and how it is used, stored, and protected. It applies to the Campus IQ mobile app, web app, and the companion Campus IQ Seller app.

1.Who We Are

Campus IQ is a student platform operated by Ahana Holdings, currently live at partner universities ("your institution") with plans to expand to additional campuses. Campus IQ provides CBT practice tools, a shared library, a community feed, attendance tracking, and a student marketplace.

We process personal data in accordance with the Nigeria Data Protection Act (NDPA) 2023 and applicable regulations issued by the Nigeria Data Protection Commission (NDPC).

2.Information We Collect

Category	Examples
Account information	Name, email, matric number, department, role (student, course rep, lecturer, HOD)
Profile content	Profile photo and other images you upload (stored via Cloudinary)
Attendance data	Check-in timestamps, passcode/QR scan events, and approximate location at time of check-in (used as a soft verification flag)
Marketplace listings	Item details, pricing, and listing images you post in the Market
Usage data	App activity such as CBT attempts, library access, and community posts
Payment data	Subscription status and transaction confirmation for premium plans (payment processing is handled by our payment provider — we do not store full card details)

3.Our Legal Basis for Processing

Under the NDPA, we process your data on the following bases:

• Consent — for optional features such as location access during check-in, profile photo uploads, and marketplace listings
• Performance of a contract — to create and maintain your account, deliver CBT/library access, and process premium subscriptions
• Legitimate interest — to maintain platform security, prevent misuse, and generate attendance records that course reps and lecturers rely on for coursework
• Legal obligation — where retention or disclosure is required by applicable law

Where we rely on consent, you may withdraw it at any time (see Section 8), though this may limit the features that depend on it.

4.How We Use Your Information

• To create and manage your account and role-based access
• To operate attendance check-in and generate attendance records for course reps and lecturers
• To display your listings and profile within the Market and Community Feed
• To provide CBT results and library access
• To process premium subscriptions and department billing
• To maintain platform security and prevent misuse

5.Location Data

Campus IQ requests location access only during the attendance check-in flow. Location is used as a soft verification signal alongside passcode and QR scan and is not used to track your movement outside of check-in events. Location pings are stored only as part of the attendance record they verify and are retained for as long as that attendance record is retained (see Section 9).

6.Data Sharing

We do not sell your personal information. Data may be visible to:

• Course representatives and lecturers, strictly for attendance records tied to sessions or courses they are assigned to. They do not have access to your marketplace activity, community posts, or profile information beyond what you post publicly.
• Other students, for content you choose to post publicly (Community Feed, Market listings, profile)
• Service providers who help us operate the platform:
  • Firebase (Google) — backend infrastructure and data storage (Google Privacy Policy)
  • Cloudinary — image storage (Cloudinary Privacy Policy)
  • Our payment processor — transaction processing

7.International Data Transfers

Firebase and Cloudinary store data on servers located outside Nigeria. Where your personal data is transferred outside Nigeria, we take steps to ensure it receives a level of protection consistent with the NDPA, including relying on our service providers' standard contractual and security safeguards. By using Campus IQ, you acknowledge that your data may be processed outside Nigeria as described here.

8.Your Rights and Choices

Under the NDPA, you have the right to:

• Access the personal data we hold about you
• Correct inaccurate or incomplete data
• Delete your data, subject to any legal or legitimate retention need (see Section 9)
• Object to or restrict certain processing, including withdrawing consent for location access or profile content
• Data portability — request your data in a portable format
• Lodge a complaint with the Nigeria Data Protection Commission (NDPC) if you believe your rights have been violated

In practice, you can:

• Edit or delete your profile information within the app
• Remove Market listings you've posted
• Disable location access in your device settings, though this may limit attendance check-in functionality
• Request account deletion, data access, correction, or portability by contacting us at the email in Section 14

We will respond to verified requests within the timeframe required by the NDPA.

9.Data Retention

We distinguish between data that forms part of your academic record and other personal data, because attendance and academic records serve a purpose independent of your active use of the app — the same way your institution itself retains transcripts and attendance history indefinitely, not just while you're enrolled.

• Attendance records (including check-in timestamps, passcode/QR events, and associated location pings) and CBT attempt/library usage history are retained indefinitely as part of the institutional academic record, even after you delete your account or leave your institution. This data is not deleted on request, because it may be required by your institution, course reps, or lecturers for grade disputes, audits, or historical record-keeping at any point in the future. Where you request deletion of your account, this data will be retained in de-identified or restricted-access form where feasible, tied to your record rather than your active profile.
• Account information not needed for the academic record (e.g. profile photo, contact email used only for app notifications), marketplace listings, and community posts are deleted or anonymized promptly — normally within 30 days of a verified deletion request — as these have no academic-record justification for retention.
• If you request deletion, we will delete what we can promptly and tell you which categories (attendance/CBT history) are retained under this policy as part of the institutional record, and your right to request a copy of that retained data at any time.

10.Data Storage and Security

Account and app data is stored using Firebase (Firestore). Images are stored using Cloudinary. We apply technical and organizational safeguards including encrypted data transmission (HTTPS/TLS), role-based access controls limiting staff and lecturer access to only the data needed for their role, and access logging on administrative systems. No system is completely secure, and we encourage you to use a strong, unique password.

11.Data Breach Notification

If we become aware of a data breach that poses a risk to your rights and freedoms, we will notify the NDPC and affected users without undue delay, in line with NDPA requirements, and will describe the nature of the breach and the steps being taken to address it.

12.Children's Privacy

Campus IQ is intended for university students and is not directed at children under 13. We do not knowingly collect data from children under 13.

13.Changes to This Policy

We may update this policy as Campus IQ evolves. Material changes will be reflected on this page with an updated effective date.

14.Contact Us

Questions about this policy, or requests to access, correct, delete, or port your data, can be sent to:

Email: info@campusiqedu.com

If you are not satisfied with our response, you may lodge a complaint with the Nigeria Data Protection Commission (NDPC).