Privacy policy

Last updated 16 October 2026

This policy explains what personal data the Campuzz app and the campuzz.my website ("Campuzz", "we") collect, how it is used, and your rights under Malaysia's Personal Data Protection Act 2010 (PDPA). By using Campuzz, you agree to the processing described here.

1. Data we collect

TypeExamples
AccountName, username, personal email, university email (for verification), university, password (stored as a hash, never in plain text).
Profile (optional)Profile photo, bio, faculty, matric number, gender.
ContentConfession posts, replies, polls, images, chat and group messages, reports you submit.
AcademicSemesters, courses, class timetable, attendance, marks, exams, tasks, course materials and Focus sessions you enter.
DeviceNotification token, platform and app version, language, and a device token for the lock-screen wallpaper (stored as a hash).
SubscriptionCampuzz Plus purchase records from Apple or Google (transaction ID, plan, expiry). We do not receive your card or payment details.
TechnicalIP address, request times and error logs — for security, abuse prevention and fixing bugs.

2. How data is used

  • To create your account and verify that you are a university student.
  • To show the campus feed, chat, timetable, tasks and other features you use.
  • To send notifications (for example your next class, new messages, replies) — these can be turned off in settings.
  • To draw your lock-screen wallpaper and widgets from your timetable and tasks (if you turn them on).
  • To manage Campuzz Plus subscriptions.
  • Moderation: reviewing reports, enforcing community guidelines and preventing fraud or spam.
  • Aggregate usage statistics to improve the app. We do not sell your data and do not show targeted ads.

3. Who can see your content

  • Confession posts are visible to verified students at your university, and to Plus subscribers from other universities. Anonymous mode (Plus) hides your university from others.
  • Your profile can be made private. Message requests let you choose who can contact you.
  • Academic data (timetable, marks, tasks) is private to you, except group tasks you share with group members.
  • Our moderation team can view reported content in order to review it.
  • We may disclose data where required by law or a court order in Malaysia.

4. Service providers

We use the following providers to run Campuzz. They process data only for the stated purpose.

ProviderPurpose
Google Firebase Cloud MessagingDelivering notifications to your device.
Apple App Store & Google PlayApp downloads, payments and subscription verification.
Email providerVerification codes, password resets and account emails.
AI provider (OpenAI)Only when you use "AI timetable scan": the photo of your timetable slip is sent to be read, and the result is returned to you.
Hosting providerHosting the database and files you upload.

On iPhone, the lock-screen wallpaper is set by Apple's Shortcuts app on your device; a custom background photo you choose stays on your phone and is never uploaded.

5. Retention & deletion

  • Data is kept while your account is active.
  • You can delete your account at any time via Profile › Settings › Delete account. Your name, email, profile photo and identifying details are removed immediately, and your posts are deleted.
  • Some records are kept after deletion only where necessary — for example transaction records (accounting requirements) and moderation reports that are still open.
  • A Plus subscription is not cancelled automatically when you delete your account — cancel it via the App Store or Google Play.

6. Security

Connections are encrypted (HTTPS). Passwords and device tokens are stored as hashes. Admin access is role-restricted and logged. No system is perfectly secure — if we detect a breach that affects you, we will notify you and the authorities as required by law.

7. Your rights

Under the PDPA you have the right to:

  • access and obtain a copy of your personal data;
  • correct inaccurate data (most of it can be edited directly in the app);
  • withdraw consent and delete your account;
  • limit processing, for example by turning off notifications or the lock-screen wallpaper.

Campuzz is intended for university students. We do not knowingly collect data from children under 13.

8. This website

campuzz.my does not use tracking cookies or third-party analytics. Your language choice is stored in your browser only. The site fetches public information (download links, Plus pricing, the university list) from Campuzz's servers.

If you contact us through the Support form, we keep your name, email, topic, message and attachments together with your IP address and browser type — only to reply to you and to prevent abuse. The form is protected by Cloudflare Turnstile, which processes technical signals from your browser to tell humans from bots (see Cloudflare's privacy policy). Support messages are kept for as long as needed to resolve your request.

9. Changes & contact

We will update this policy from time to time and announce material changes in the app. For questions or requests about your data, contact us through the Help section in the app.

Back to home