Privacy Policy

1. Information you provide

Account and identity: full name, preferred name, gender, date of birth, nationality, and passport number. Your passport number is your unique membership identifier.

Contact: email address, phone number and WhatsApp number (with an Egypt +20 or Nigeria +234 country code).

Academic: university, faculty, department, level, year of admission and student number.

Residence: your area and district in Egypt.

Verification documents: passport photograph, admission letter, passport data page and passport visa page.

Payment: the method, reference number and optional receipt you submit for the verification and ID-card fee.

Content: posts, comments, reactions, bookmarks, marketplace listings, events and RSVPs you create.

2. Information collected automatically

A session cookie that keeps you signed in. It is strictly necessary; the platform sets no advertising or third-party tracking cookies.

Your IP address and browser type, used only for security — rate limiting, abuse prevention and account-lockout protection.

An audit log of administrative actions (verification decisions, document views, bans, exports) for accountability.

3. How your information is protected

Your passport number and all verification documents are encrypted (AES-256-GCM) before they are stored, and the documents are held outside the public web area.

Verification documents and your full passport number are visible only to authorised verification officers and the super administrator, and every access is recorded in the audit log.

Passwords are hashed with scrypt and never stored in readable form. Admin accounts can enable app-based two-factor authentication.

The public ID-verification page shows only your name, university, status and expiry — never your passport number or contact details. The QR code on your ID card contains a random code, not your passport number.

4. How we use your information

To verify that you are a genuine member of the community and to issue your digital student ID.

To operate the social feed, directory, events and marketplace, and to deliver notifications.

To send a one-time code to your WhatsApp number for verification and password reset.

To keep the platform secure and to enforce these terms.

5. What other members can see

Verified members can see your name, university and the profile details you choose to share. You control visibility of your phone, email, faculty and location in your privacy settings; phone, email and location are hidden by default.

Unverified visitors can browse public content but cannot see the member directory or your contact details.

Your passport number and verification documents are never shown to other members.

6. Sharing with third parties

We do not sell your personal data. We do not share your identity documents with advertisers.

Your WhatsApp number is passed to our self-hosted WhatsApp messaging service only to deliver your verification and reset codes.

Advertisements shown in the feed are managed by the association; advertisers do not receive your personal data. We may disclose information if required by law or to protect the safety of members.

7. Data retention

We keep your account information while your account is active. If your account is banned, records are retained for audit and safety purposes.

You may request deletion of your account and personal data by contacting the association executives; some records may be retained where required for legal or safety reasons.

8. Your rights

You may access and correct your profile information at any time from your settings.

You may request a copy or deletion of your data, or raise a privacy concern, by contacting the association executives.

9. Changes and contact

We may update this policy; the date above shows the latest version. Continued use after a change means you accept the updated policy.

For any privacy question, contact the Nigerian students’ association executives through the platform.