Effective Date: March 1, 2026 • Last Updated: March 1, 2026
1. Introduction
Welcome to CampusOne ("the App"), a campus food ordering and services platform developed for Madras Engineering College (MEC), Tambaram Road, Vellarai, Chennai 602105, Tamil Nadu, India. This Privacy Policy describes how we collect, use, store, and protect your personal information when you use the CampusOne mobile application and related services.
By creating an account or using CampusOne, you agree to the collection and use of information in accordance with this policy. If you do not agree, please do not use the App.
2. Information We Collect
2.1 Account Information
When you register for a CampusOne account, we collect:
Full name — to identify you on the platform
Email address — for account communication and login
Phone number — for account verification and contact
Roll number — to verify your student identity at MEC
Department — for institutional identification
Year of study — for institutional identification
2.2 Profile Information
Profile photo / avatar — uploaded by you (optional)
Diet preference — Veg, Non-Veg, or Vegan (used to personalize menu display)
2.3 Order & Transaction Data
Food order details (items, quantities, canteen, order status)
Order history and pickup tokens
Wallet balance and transaction records (top-ups, payments, refunds)
Stationery printing requests and file uploads
2.4 Device & Technical Information
Device model, manufacturer, and operating system version
Unique device identifiers
Platform type (Android or iOS)
App version
IP address and user agent string
2.5 Usage Data
Login sessions and timestamps
Feature usage patterns (anonymized)
Error logs and crash reports
2.6 Camera Access
CampusOne requests camera access solely for QR code scanning (payment and order verification). We do not capture, store, or transmit camera images beyond the QR code data. Camera access can be revoked at any time in your device settings.
2.7 Push Notifications
We collect your Firebase Cloud Messaging (FCM) device token to send you push notifications about order status updates, wallet activity, and important announcements. You can disable notifications in your device settings or within the App.
2.8 Payment Information
Wallet top-ups are processed through Razorpay, a third-party payment gateway. We do not store your credit card numbers, debit card numbers, bank account details, or UPI IDs. All payment information is handled directly by Razorpay in accordance with PCI-DSS standards. Please refer to Razorpay's Privacy Policy for details on how they handle your payment data.
3. How We Use Your Information
We use the collected information for the following purposes:
Order Processing: To process, track, and deliver your food orders and stationery requests
Wallet Management: To manage your prepaid wallet balance, process top-ups, and handle transaction records
Notifications: To send you order status updates (pending, preparing, ready for pickup) via push notifications and in-app alerts
Identity Verification: To verify your student/staff identity at Madras Engineering College using your roll number
App Improvement: To analyze usage patterns (in aggregate) and fix bugs to improve the CampusOne experience
Security: To monitor for fraudulent activity, unauthorized access, and to maintain the security of the platform
Communication: To respond to your support requests and send important service announcements
4. Data Sharing & Disclosure
We share your information only in the following limited circumstances:
Canteen Owners: When you place an order, the canteen owner receives your order details and name for order fulfillment. They do not receive your phone number, email, or roll number.
Canteen Captains: Kitchen staff (captains) see order details for preparation purposes. They see item names and quantities but limited personal information.
Razorpay: Your payment data is shared with Razorpay for processing wallet top-ups. Razorpay operates under its own privacy policy and PCI-DSS compliance.
Firebase / Google: We use Firebase Cloud Messaging for push notification delivery. Firebase may collect device identifiers as described in Firebase's Privacy Information.
Legal Requirements: We may disclose your information if required by law, court order, or governmental regulation.
We do NOT sell, rent, or trade your personal information to any third parties for marketing or advertising purposes.
5. Data Storage & Security
We take the security of your data seriously and implement the following measures:
Encrypted Database: All data is stored in MongoDB with encrypted connections using TLS (Transport Layer Security)
Password Security: Passwords are hashed using bcrypt with 12 salt rounds and are never stored in plain text
Token-Based Authentication: We use JWT (JSON Web Tokens) with short-lived access tokens (15 minutes) and longer-lived refresh tokens (7 days) for secure session management
HTTPS Only: All API communication between the App and our servers is encrypted via HTTPS
Access Control: Role-based access control ensures that users can only access data relevant to their role (student, captain, owner, admin)
While we implement industry-standard security measures, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security but are committed to protecting your data to the best of our ability.
6. Data Retention
We retain your personal data for as long as your account is active or as needed to provide you services. Specifically:
Account data: Retained while your account is active
Order history: Retained for the duration of your enrollment at MEC for your reference
Transaction records: Retained as required for financial record-keeping
Logs and analytics: Anonymized and retained for up to 12 months
7. Your Rights
You have the following rights regarding your personal data:
Access: View your personal data at any time through the Profile screen in the App
Correction: Update your profile information directly in the App
Deletion: Request account deletion by contacting us at campusone@madrascollege.ac.in. Upon deletion, we will remove your personal data, though some anonymized data may be retained for analytics
Notification Preferences: Opt out of push notifications through the App settings or your device settings
Data Export: Request a copy of your data by contacting support
8. Children's Privacy
CampusOne is designed for use by college students and staff at Madras Engineering College, who are typically 18 years of age or older. We do not knowingly collect personal information from children under 18. If we become aware that we have collected data from a child under 18, we will take steps to delete that information promptly. If you believe a minor has provided us with personal data, please contact us at campusone@madrascollege.ac.in.
9. Third-Party Links
The App may contain links to third-party websites or services (such as Razorpay for payments). We are not responsible for the privacy practices of these external services. We encourage you to review their privacy policies before providing any personal information.
10. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or for legal reasons. When we make changes:
We will update the "Last Updated" date at the top of this page
For significant changes, we will notify you via push notification or in-app announcement
Continued use of the App after changes constitutes acceptance of the updated policy
11. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: