🔒
Privacy Policy

Your Privacy Matters

We are committed to protecting your personal data. This policy explains exactly what we collect, how we use it, and your rights.

BanglaByteStudio
Boi Campus App
Effective: June 10, 2025
Effective: June 10, 2025
Last Updated: June 10, 2025
Language: English

Table of Contents

§ 01

Introduction

§ 01

Boi Campus ("we", "us", or "our") is a student-first book marketplace application developed by BanglaByteStudio. We built this app to help Bangladesh's polytechnic and engineering students buy, sell, and exchange textbooks within their campus communities — quickly, easily, and at affordable prices.

This Privacy Policy describes how we collect, use, store, disclose, and protect your personal information when you use the Boi Campus mobile application on Android or iOS.

By creating an account and using Boi Campus, you agree to the terms of this Privacy Policy. If you do not agree, please discontinue use of the app.

Our commitment: We only collect data that is necessary to operate the app. We do not sell your personal data to any third parties for profit.

§ 02

Information We Collect

§ 02
2.1 Account Information
Email Address Used for registration, login via OTP, and account recovery.
Password Encrypted with bcrypt. We never store or see your raw password.
2.2 Profile Information

Collected during the profile setup process after registration:

Full NameDisplayed publicly on your listings and profile.
GenderMale or female — used for profile personalization.
Phone NumberBangladeshi mobile number. Used for seller contact verification.
Profile PhotoOptional. Uploaded to secure storage. Displayed on your profile.
DistrictYour location within Bangladesh for relevant book listings.
Study Level & CampusEducational level (Polytechnic, University, etc.) and institution name.
Short BioOptional. A brief self-description shown on your public profile.
2.3 Book Listing Data

When you create a book listing on the marketplace:

Book DetailsTitle, author/writer, edition, category, tags, and description.
Book PhotosUp to 5 photos per listing. Stored securely in Supabase Storage.
Book ConditionPhysical condition, binding state, missing pages, highlights, handwritten notes.
Price & TypeSelling price (৳10–৳10,000) or free listing. Negotiability flag.
Meetup LocationA public text description of where you prefer to exchange the book.
2.4 Chat & Messages
Message ContentText messages sent between buyers and sellers. Stored server-side.
Chat MediaUp to 5 photos per message. Stored in the secure chat-media bucket.
Timestamps & Read StatusMessage sent time and whether it has been read by the recipient.
2.5 Usage & Activity Data
Search QueriesStored locally on your device only. We do not send search history to our servers.
Wishlist / Saved BooksBooks you have saved — stored in our database linked to your account.
Book RequestsBooks you have requested via the Book Requests feature.
Credit TransactionsRecords of your ad-credit earnings and spending for post creation.
Reports SubmittedIf you report a listing or user for violations, the report is stored.
2.6 Device & Technical Data
FCM Push TokenA device token used to send push notifications. Stored in your user record. Cleared on logout.
Device OS & App VersionOS type (Android/iOS) and app version — used for support and analytics.

We do NOT collect: Precise GPS location, contacts, call logs, SMS content, browsing history, or any data outside what is listed above.

§ 03

Device Permissions

§ 03

Boi Campus requests only the permissions that are strictly necessary for the app to function. Below is a full list of every permission the app requests and why.

Permission Platform Why It's Needed
Camera Android iOS Taking photos of books when creating a listing, and sending photos in chat conversations.
Photo Library iOS Selecting existing photos from your gallery for book listings and chat messages.
Push Notifications Both Receiving alerts for new chat messages and book request match notifications. Requested at runtime — you can decline.
Dial Phone (Query) Android Allows tapping a phone number to open your dialer. No calls are made automatically. Required on Android 11+.
Send Email (Query) Android Allows tapping a "mailto:" link to open your email app. Required on Android 11+. No emails are sent automatically.

You can revoke any permission at any time from your device's App Settings. Revoking Camera or Photo Library will prevent uploading photos. Revoking notifications will stop push alerts.

§ 04

How We Use Your Data

§ 04

We use the information we collect for the following purposes:

Account Management
Creating and managing your account, authenticating your identity via OTP, and securing your session.
Book Marketplace
Displaying your book listings publicly, enabling search and filtering by campus/district/category, and managing post status.
Real-Time Communication
Enabling chat between buyers and sellers through our secure messaging system with real-time delivery.
Push Notifications
Sending alerts for new chat messages and when a book you requested becomes available. Notification preferences managed in app settings.
Personalization & Discovery
Showing books from your campus, district, and matching your study level to help you find relevant textbooks faster.
Credit System
Managing your ad-credit balance for creating book listings. Credits are earned by watching ads and spent on post creation.
Analytics & Improvement
Understanding how users interact with the app via Firebase Analytics to improve features, fix bugs, and enhance experience.
Safety & Moderation
Detecting spam, fraudulent listings, and policy violations. Reviewing user reports to maintain a safe marketplace.

§ 05

Advertising (Google AdMob)

§ 05

Boi Campus is a free app funded in part by advertisements served through Google AdMob. These ads help us keep the app free for all students.

Types of Ads Displayed
App Open
Shown on cold start or after 30s+ in background. Max 2/day.
Banner
Fixed at bottom of Book Details and Search screens.
Interstitial
Full-screen between natural app transitions. Every 5th navigation.
Rewarded
Opt-in only. Watch to earn 1 posting credit. Max 5/24h.
What AdMob May Collect

Google AdMob may collect and use the following data when you interact with ads:

Advertising IDGoogle GAID (Android) or IDFA (iOS) — for ad targeting and frequency capping.
Ad InteractionsAd views, clicks, and engagement events to measure ad performance.
Device InformationDevice model, OS version, screen resolution, language — for ad compatibility.
General LocationApproximate region inferred from IP address — for regionally relevant ads.

iOS Users (iOS 14+): We use SKAdNetwork for privacy-preserving attribution. You will be asked for App Tracking Transparency (ATT) permission before personalized ads are shown. You may decline and still use all app features — you will see non-personalized ads instead.

You can opt out of personalized advertising from your device settings:

Android
Settings → Privacy → Ads → "Opt out of Ads Personalization"
iOS
Settings → Privacy & Security → Tracking → Disable "Allow Apps to Request to Track"

Google's full ad data policy: Google Privacy Policy ↗

§ 06

Third-Party Services

§ 06

Boi Campus integrates the following third-party services to operate. Each service has its own privacy policy governing its data use.

Supabase
Backend, Database & Storage
Powers our entire backend — user authentication (OTP), database (profiles, posts, messages, wishlist, credits), and file storage (book photos, chat images, profile photos). Row-Level Security (RLS) ensures each user can only access data they are authorized to view.
Privacy Policy
Google Firebase
Push Notifications & Analytics
FCM: Sends push notifications for new chat messages and book request alerts. Your FCM token is stored in our database and cleared when you log out.

Firebase Analytics: Collects anonymized usage events to help us improve the app. No personally identifiable information is tied to analytics events.
Privacy Policy
Google AdMob
In-App Advertising
Serves App Open, banner, interstitial, and rewarded ads within the app. AdMob may use device identifiers and general usage data to show relevant advertisements. The app's AdMob App ID is ca-app-pub-8889253960614189. See Section 5 for full details.
Privacy Policy
Google Fonts
Typography (Web only)
The Inter font is loaded from Google Fonts CDN for this website. Standard HTTP request logs may be processed by Google. No personal data is collected for this purpose.
Privacy Policy

§ 07

Storage & Security

§ 07

We take the security of your data seriously. Below are the technical and organizational measures we have in place:

Encrypted Passwords
Passwords are hashed with bcrypt via Supabase Auth. Your raw password is never stored, transmitted, or visible to us.
HTTPS / TLS Encryption
All data transmitted between the app and our servers is encrypted using industry-standard TLS. No data is sent over unencrypted connections.
Row-Level Security (RLS)
Our Supabase database enforces RLS policies. Users can only read and write data they are explicitly authorized to access — no user can access another user's private data.
Secure File Storage
Profile photos, book images, and chat media are stored in Supabase Storage buckets with proper access controls. Files are only accessible to authorized users.
Token Management
Your FCM push token is stored securely and automatically cleared from our database when you log out of the app.
Sensitive Data Wiping
Password fields are cleared from device memory immediately after use. Sensitive form controllers are wiped on screen dispose to prevent memory exposure.

While we employ strong security measures, no system can guarantee 100% security. If you believe your account has been compromised, please contact us immediately at support@banglabyteStudio.com.

§ 08

Data Sharing

§ 08

We do not sell your personal data. We do not trade, rent, or sell user information to data brokers or third-party advertisers.

We share data only in the following limited circumstances:

Service Providers
We share data with Supabase, Google Firebase, and Google AdMob — only as necessary to provide the service. These providers are bound by their own data protection agreements.
Other Users (Public Profile)
Your public profile (name, study level, campus) and book listings are visible to other app users. Your phone number, email, and private messages are never shown publicly.
Legal Requirements
We may disclose data if required by law, court order, or to protect the safety and rights of our users, the public, or BanglaByteStudio.
Business Transfer
In the event of a merger, acquisition, or sale of assets, user data may be transferred. We will notify users before any such transfer occurs.

§ 09

Data Retention

§ 09
Account & ProfileRetained while account is active. Deleted on account deletion request (within 30 days).
Book ListingsActive, sold, and removed listings retained for continuity and moderation. Deleted with account.
Chat MessagesRetained to support ongoing conversations. All messages deleted with account.
Search HistoryStored locally on your device only. Cleared when you clear app data or uninstall.
Analytics DataAnonymized analytics events retained by Firebase per their standard policy (up to 14 months).
FCM TokenImmediately deleted from our database when you log out. Re-registered on next login if notifications enabled.

§ 10

Your Rights

§ 10

You have the following rights regarding your personal data:

Right to Access
View your profile, listings, chat history, wishlist, and credit transactions directly within the app at any time.
Right to Edit
Update your profile information (name, photo, phone, campus, bio) at any time from Profile → Edit Profile.
Right to Delete
Delete any of your book listings at any time. To delete your entire account and all associated data, contact us at support@banglabyteStudio.com. Processed within 30 days.
Right to Opt Out of Notifications
Disable push notifications independently from Profile → Settings → Notifications, or from your device's notification settings.
Right to Opt Out of Personalized Ads
Disable ad personalization from your device's advertising settings (see Section 5). You will continue to see non-personalized ads.
Right to Data Portability
Request a copy of your personal data by contacting support@banglabyteStudio.com. We will respond within 30 days.

§ 11

Children's Privacy

§ 11

Boi Campus is designed for students aged 13 and above. The app is intended for polytechnic, HSC, SSC, and university students in Bangladesh.

We do not knowingly collect personal information from children under the age of 13. If a parent or guardian believes that a child under 13 has provided us with personal information, please contact us immediately at support@banglabyteStudio.com. We will promptly delete any such information from our systems.

If you are between 13–18 years old, we recommend informing a parent or guardian about your use of this app and this Privacy Policy.

§ 12

Policy Changes

§ 12

We may update this Privacy Policy from time to time as the app evolves or legal requirements change. When we make significant changes, we will:

In-App Notification
Notify you within the app when materially significant changes are made to how your data is collected or used.
Email Notice
Send an email notification to your registered address for major policy updates.
Updated Date
The "Last Updated" date at the top of this page is always updated to reflect the date of the most recent revision.

Your continued use of Boi Campus after a policy update constitutes your acceptance of the revised policy. We encourage you to review this page periodically.

§ 13

Contact Us

§ 13

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please reach out to us:

Email Support
For privacy requests, account deletion, data access, and general inquiries:
support@banglabyteStudio.com
Facebook Page
Follow us and reach out via message for community support:
facebook.com/boicampusbd

Response Time: We aim to respond to all privacy-related requests within 7 business days. Account deletion requests are processed within 30 days.

Questions about your privacy?

We're here to help. Send us an email and we'll get back to you within 7 business days.