Privacy Notice

CampusCore is operated by Campus core ("we", "us", "our"). Campus core is the data controller for the personal data described in this notice — we decide what data is collected and why. This notice explains what we collect, why, who we share it with, how long we keep it, and what rights you have.

1. Personal data we collect

• Account data — email address, display name, login credentials or Google sign-in identifier, and your plan (free or premium).
• Content you create — assignments, habits, study sessions, budgets, transactions, savings goals, and messages you send to the AI study coach.
• Rewards data — points earned and the events that generated them.
• Support messages — anything you send us through the contact page.
• Technical and usage data — IP address, device and browser information, and basic logs generated when you use the Service, used for security and reliability.

Payment card details are never collected or stored by us — they are handled directly by our payment provider (see Sharing, below).

2. Why we use it, and our legal basis

• Creating and running your account and delivering the planner, money tools, AI coach, and rewards — performance of a contract with you.
• Processing your subscription and giving you access to premium features — performance of a contract and legal obligation (tax and accounting records).
• Security, abuse and fraud prevention, and keeping the Service stable — legitimate interests.
• Customer support — performance of a contract and legitimate interests.
• Improving the product using aggregated or de-identified usage patterns — legitimate interests.
• Marketing emails, if we ever send them — consent, which you can withdraw at any time.

We do not sell your personal data, and we do not use your study content to train third-party AI models.

3. Who we share data with

• Merchant of Record — Paddle.com. Paddle is the reseller and Merchant of Record for all CampusCore orders. Paddle handles the sale, checkout, payments, subscription management, tax compliance, invoicing, refunds, and related customer service. Your name, email, billing country, and transaction details are processed by Paddle under its own privacy notice.
• Hosting and infrastructure providers who store the application and database on our behalf.
• AI model providers who process the prompts you send to the study coach in order to generate a response.
• Professional advisers such as accountants and lawyers, where needed.
• Authorities where we are legally required to disclose information.

These recipients act as our processors or as independent controllers, and are bound by appropriate contractual protections.

4. International transfers

Our providers may process data outside your country, including outside the UK/EEA. Where that happens, transfers are covered by appropriate safeguards such as Standard Contractual Clauses or an adequacy decision.

5. How long we keep it

• Account and content data — for as long as your account is active, and up to 30 days after you delete it, after which it is deleted or anonymised.
• Support messages — up to 24 months.
• Security and access logs — typically up to 12 months.
• Transaction and tax records — retained by Paddle and by us for as long as tax law requires (usually 6–10 years).

6. Your rights

Depending on where you live, you may have the right to access your data, correct it, delete it, restrict or object to processing, receive a portable copy, and withdraw consent at any time. To exercise any of these, contact us via the contact page. We aim to respond within one month. If you are in the UK or EEA and are unhappy with our response, you can complain to your local data protection supervisory authority.

7. Security

We apply appropriate technical and organisational measures to protect your data, including encryption in transit, encryption at rest with our hosting provider, row-level access controls so that each account can only read and write its own records, and restricted administrative access. No system is perfectly secure, but we take reasonable steps to keep your data safe and will notify you and the relevant authority where legally required after a breach.

8. Cookies and similar technologies

CampusCore uses essential cookies and local browser storage only — to keep you signed in and to remember basic preferences. These are required for the Service to work. Our payment provider may set its own cookies during checkout. If we introduce analytics or marketing cookies in future, we will ask for your consent first and provide a way to manage your preferences.

9. Children

CampusCore is designed for high school and college students. If you are under the age of digital consent in your country, please use CampusCore only with a parent's or guardian's permission. Contact us if you believe a child has provided us with data without appropriate consent and we will delete it.

10. Changes and contact

We may update this notice; the "Last updated" date above reflects the current version. Questions or requests? Contact Campus core through the contact page.