Last updated: May 8, 2026
This Privacy Policy explains how Campus Menus ("we", "our", "the app") collects, uses, and protects your personal information when you use our food ordering service at your campus.
When you register, we collect:
When you place orders, we store your order history, including items, prices, and timestamps. We also store a device push-notification token (FCM token) so we can send you updates about your orders.
We do not collect your precise location, photos, contacts, camera, microphone, health data, financial account numbers, or any other sensitive personal information.
We use your information to:
We do not sell or share your information with third parties outside of campus operations.
Accounts are protected by a password you choose at registration. Your phone number is used as a unique identifier for your account and to prevent abuse (so a banned user cannot re-register with the same number); it is not used for SMS notifications, marketing, or one-time-password verification. Authentication is handled by Firebase Authentication (Google).
We may introduce SMS-based phone verification in a future release to add an extra layer of account security. If we do, this policy will be updated and you will be informed in the app before any SMS is sent.
All orders are pay-on-delivery at the restaurant counter. Campus Menus does not process, collect, or store any bank card numbers, payment credentials, or other financial identifiers.
Order totals are equal to the menu prices set by each restaurant. Campus Menus does not add any service fee, commission, or markup — you pay the restaurant the same amount you would pay if you walked up to its counter directly. If a service fee is ever introduced in the future, this policy will be updated and the fee will be clearly displayed at checkout before you place an order.
Any order placed through the app that is not collected and paid for will result in an account suspension. Your account will remain suspended until the outstanding amount is settled. To resolve a ban, contact our support team at the email address listed in Section 13.
Each student account is subject to a daily spending limit of EGP 400 per day. This limit applies to the total value of all orders placed within a single day and resets automatically at midnight. The limit exists to prevent students from ordering on behalf of others or placing excessive orders. Orders that would cause your total to exceed EGP 400 will be blocked at checkout. Cancelled or abandoned orders do not count toward the daily limit.
Students may cancel a placed order within 2 minutes of placing it. After 2 minutes, the restaurant may have begun preparing your order and cancellation is no longer available through the app.
Your data is stored securely using Google Firebase (Firestore database and Firebase Authentication). Firebase applies industry-standard encryption for data in transit (HTTPS/TLS) and at rest. Your password is never stored in plain text.
Access to your data is restricted by Firebase security rules so that:
The only third-party service that processes your data is Google Firebase.
Your account data is retained for as long as your account is active. Order history is kept for record-keeping and dispute-resolution purposes.
In-app account deletion. You can request deletion of your account at any time from inside the app:
Once confirmed, your account is immediately signed out and flagged for deletion, and you will no longer be able to place orders with it. Your data is then retained for a 14-business-day review window so any outstanding unpaid orders can be reconciled and so that suspension records cannot be evaded by re-registering with the same phone number or registration number.
After the 14-business-day window has passed, all of your personal information — name, phone number, registration number, campus, order history, and device notification token — is permanently removed from Campus Menus. Where permitted by applicable law, we may retain a minimal record (phone number, registration number, and banned status) solely to enforce an active unpaid-order ban.
Email-based deletion. You may also request deletion by emailing campusmenus.support@gmail.com. Include the phone number and registration number associated with your account so we can verify ownership before processing the request. Email requests are processed within the same 14-business-day review window.
You have the right to:
Profile details are not editable from within the app itself; all corrections must go through the email-review process above.
Campus Menus is intended for university students and restaurant staff, who are typically 17 years of age or older. We do not knowingly collect information from children under 13. If you believe a child under 13 has provided us with personal information, please contact us and we will delete it.
We may update this Privacy Policy from time to time. Material changes will be communicated in the app or by updating the "Last updated" date at the top of this page. Continued use of the app after changes take effect constitutes acceptance of the revised policy.
If you have any questions about this Privacy Policy, your personal data, or to request access or deletion, please contact us at: