This Privacy Policy explains how the CampusCycle app ("CampusCycle", "we") handles your information. CampusCycle is operated by Whynsel Manuel.
CampusCycle does not collect your location, contacts, photos, files, or payment information, and does not show advertisements.
To create and secure your account, to let you borrow and return bicycles, to enforce the borrowing time limit, to keep track of bicycle condition and damage, and to contact you about your account or borrowed bicycle.
Campus bicycle administrators can see account, borrowing and damage report information to manage the bicycles. We do not sell your information or share it for advertising.
CampusCycle stores data using Google Firebase (Firebase Authentication and Cloud Firestore) and uses Firebase App Check with Google Play Integrity. The app asks Google Play Integrity for an attestation when it starts, so that Firebase App Check can check that requests come from a genuine installation of CampusCycle. Enforcement of App Check for Cloud Firestore and Firebase Authentication is not switched on yet and is planned for a later release.
The Cloud Firestore database that holds your account, borrowing and damage report records is located in the asia-southeast1 region (Singapore). Firebase Authentication and Firebase App Check are global Google services and are not limited to that region. Data is encrypted in transit.
You can delete your account in the app from Profile > Delete Account, or request deletion without the app at: https://campuscycle-bd769.web.app/account-deletion.html. Deleting your account in the app happens immediately. A request sent by e-mail is verified and completed within 30 calendar days.
Deleting your account removes:
You must return any borrowed bicycle before your account can be deleted.
What is kept: the bicycle records themselves – which bicycle, from which station, when it was borrowed and returned, its condition, and any damage you reported. We keep them because they are needed to track the condition, the usage and the damage of the bicycles.
These remaining records are pseudonymous, not anonymous. They still contain an internal identifier that was assigned to your account, which is no longer linked to any person once your login and your profile are gone, and they still contain any free text you typed yourself (a note about the condition of a bicycle when you returned it, or a damage description). Please do not write personal details in those fields. If you ask us to delete your account by e-mail we also remove that internal identifier and the free text you wrote.
How long we keep them: for as long as the bicycle is part of the CampusCycle fleet. When a bicycle is permanently retired from the fleet, we delete the borrowing and damage records linked to it. There is no automatic timer-based deletion of these records.
CampusCycle is only for users who are at least 18 years old. It is not directed to children and is not intended for use by anyone under 18.
If this policy changes, we will update the version and date shown above and, where required, ask you to agree again.
Privacy questions or requests: wynezell.manuel@gmail.com