Privacy Policy

KolejSwap is a peer-to-peer campus marketplace that allows Nigerian university students to buy, sell, and swap goods and services within their campus communities. References to "KolejSwap", "we", "us", or "our" in this policy refer to the platform operator.

This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you use our website and services. By creating an account or using KolejSwap, you agree to the practices described here.

Information you provide directly:

• Full name and email address (used for your account and communications)
• National Identification Number (NIN) — sent to our verification partner to confirm your identity; we retain only the last 4 digits and whether verification succeeded, not the full number
• University name and academic status
• Bank account details (account number and bank name) — used to receive Paystack payouts
• Profile photo (optional)
• Listing content: titles, descriptions, prices, and product images
• Messages sent through our in-app chat, including photos you choose to share
• A pickup/meetup location pin for a listing, if you choose to add one
• Support tickets and messages you send to our support team

Information collected automatically:

• IP address and approximate location (city-level, for fraud prevention)
• Device type, browser, and operating system
• Pages visited and actions taken on the platform (e.g., items viewed, searches)
• Session timestamps and referral sources
• On the mobile app: a device push-notification token, used to deliver order, message, and dispute alerts

We do not collect:

• Your BVN (Bank Verification Number)
• Full card numbers or CVV codes — all payment data goes directly to Paystack
• Your precise, real-time location — the mobile app only reads your device location when you ask it to (e.g. to sort listings by distance or pin a meetup point), and never in the background

We use your information solely to provide and improve KolejSwap:

• Create and manage your account
• Verify your identity and student status via NIN
• Process payments and escrow transactions through Paystack
• Display your listings to other users
• Facilitate buyer-seller communication via our chat system
• Detect and prevent fraud, scams, and policy violations
• Send transactional emails (order updates, dispute notices, payment confirmations)
• Comply with applicable Nigerian law

We do not use your data for advertising profiling, sell it to third parties, or share it for any purpose outside of running KolejSwap.

We rely on the following trusted providers. Each has its own privacy policy:

We do not share your data with any other third parties, including advertisers, analytics companies, or data brokers.

We retain your personal data for as long as your account is active or as needed to provide our services. Specifically:

• Active account data is retained indefinitely while your account is open
• When you delete your account, your profile, listings, chat messages, notifications, saved items, device push tokens, school ID image, and NIN/bank details are deleted immediately
• Transaction records (orders, escrow history) are retained for up to 7 years to comply with Nigerian financial regulations — with your name and contact details removed from them once your account is deleted
• Reviews you wrote are kept but shown as anonymous once your account is deleted; reviews about you are deleted along with your account

Under the Nigeria Data Protection Regulation (NDPR) 2019 and the Nigeria Data Protection Act 2023, you have the following rights:

• Right to access: request a copy of the personal data we hold about you
• Right to rectification: correct inaccurate or incomplete data
• Right to erasure: delete your account and data yourself at any time (see below), or ask us to do it for you
• Right to restriction: ask us to limit how we process your data
• Right to data portability: receive your data in a machine-readable format
• Right to object: object to processing based on our legitimate interests

To exercise any of these rights — other than erasure, which you can do yourself instantly — email us at privacy@kolejswap.com. We will respond within 30 days.

You can permanently delete your KolejSwap account and personal data yourself, at any time, without contacting support:

• On the website: go to Profile → Delete account, or visit kolejswap.com/account/delete and sign in
• On the mobile app: go to Profile → Delete account

You'll need to type DELETE to confirm. If you have an order still in escrow or under dispute, you'll be asked to resolve or cancel it first so no payment is left in limbo — everything else is removed right away. See Data Retention above for exactly what's deleted versus what Nigerian law requires us to keep.

KolejSwap uses essential cookies only — specifically session cookies required for authentication and security. We do not use advertising cookies, third-party tracking pixels, or analytics services that fingerprint individual users.

You can disable cookies in your browser settings, but doing so will prevent you from logging in to your account.

KolejSwap is intended for university students aged 18 and above. We do not knowingly collect personal information from anyone under 18. If we become aware that a minor has created an account, we will delete the account and associated data promptly.

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email and display a notice on the platform at least 14 days before the change takes effect. Continued use of KolejSwap after the effective date constitutes acceptance of the updated policy.

If you have questions, concerns, or requests related to your privacy, contact us: