CampusAI Privacy Policy
This policy describes how the CampusAI Android app and its CampusAI backend handle information. It is based on the current implementation. CampusAI does not create user accounts and does not operate a login or password system.
Who we are
CampusAI is a college-student Android app. Live AI features in published builds send requests over HTTPS to the CampusAI backend (a Cloudflare Worker). That backend calls Google’s Gemini API. The app does not embed a Gemini API key in the published package.
Information you provide on the device
You can enter academic and personal-study information in the app, including profile details (such as name, college, major, GPA, and credits), courses, assignments, exams, grades, attendance, calendar items, tasks, notes, documents, flashcards, quizzes, study sessions, degree and career items, budget entries, professor contact details you choose to save, AI conversation history, and optional AI memories.
That information is stored locally on your device in the app’s Room database and settings store. Android backup and device-transfer of this app data are disabled in the current app configuration. Uninstalling CampusAI or clearing the app’s storage removes this local data from the device.
Account and authentication
CampusAI does not offer account registration, email login, or social sign-in. Optional app lock uses the device’s biometric or screen-lock credential on the phone only. That unlock data is not sent to the CampusAI backend.
AI prompts, questions, and generated content
When you use live AI features (campus assistant, tutor, quizzes, lecture study packages, email drafts, career help, and similar tools), the app sends the relevant prompt, conversation turns, and any included context to the CampusAI backend over HTTPS. The backend forwards that content to Google Gemini and returns the generated text to the app.
Depending on the feature and your settings, that outbound context can include your question, recent chat turns, quiz topic and optional source text, lecture text or a compressed lecture image, file name, and—when AI memory is enabled—your saved memories plus selected profile facts such as name, college, major, GPA, and credits. Generated replies, quizzes, and study packages that you keep are stored on the device.
You can turn off AI memory in the app so memories are not added to later assistant prompts. Turning the setting off does not erase memories already saved on the device unless you delete them in the app.
Uploaded lectures and files
If you pick a lecture file (PDF, Word, text, or image), the app reads it on the device and extracts text or a compressed JPEG. Extracted text or image data, plus the file name, is sent to the CampusAI backend and then to Gemini so a study package can be generated. The original file stays on your device unless you delete it. The backend does not provide a user file locker or download archive.
Data sent to the CampusAI backend
Published builds call these backend paths: POST /chat, POST /quiz, and POST /lecture. The app also sends standard HTTPS request metadata and an app version header. An optional build tag may be sent so the backend can reject unsupported app builds; that tag is not a user password and is not used to identify an individual student account.
The backend applies a short-lived per-IP rate limit. It may therefore process the requesting IP address for abuse control. The Worker does not write prompts, lecture files, or generated content to a CampusAI database, object store, or user profile. After a request finishes, CampusAI does not retain that content on the Worker except as described under logs below.
Third-party AI and infrastructure
Live AI in published builds uses Google Gemini (generativelanguage.googleapis.com). Google processes the prompts and any attached lecture image according to Google’s terms and privacy policy for that API. CampusAI does not control how long Google retains that processing data.
The backend is hosted on Cloudflare Workers. Cloudflare may process request metadata such as IP address, timestamps, and connection information as part of providing the network. Worker operational logs may include HTTP status codes, model name, and error types. API keys and signing secrets are not written into those log messages by the CampusAI Worker code.
Advertising (Google Mobile Ads)
The app includes the Google Mobile Ads (AdMob) SDK and can show banner, interstitial, and rewarded ads. The current published configuration uses Google’s official test ad unit IDs, so production (paid) advertising inventory is not configured. The SDK may still initialize and may process information such as advertising identifiers, device information, IP address, interactions with advertisements, and related advertising or analytics information, as described by Google. If production AdMob IDs are configured later, the same categories of advertising data may be processed for live ads. Google’s advertising privacy information is available from Google.
App usage, diagnostics, and network
CampusAI needs internet access for live AI and ads. The app checks network connectivity on the device. It does not request device GPS location permission. Classroom or event “location” fields are text you type and are stored locally; they are sent to the backend only if they are included in an AI prompt.
On-device logs may record short diagnostic events (for example, that a quiz request failed). Those logs are written to avoid API keys, backend tokens, and full model payloads. The in-app Analytics screen uses data already stored on your device; it is not Google Analytics.
Local reminders use on-device notifications, alarms, and background work. They do not send your schedule to the CampusAI backend.
Data retention and deletion
CampusAI does not keep a server-side copy of your courses, chats, or files after a request completes. Content you save remains on the device until you delete it in the app, clear app storage, or uninstall CampusAI. Rate-limit counters are short-lived. Information sent to Google Gemini or processed by Google Mobile Ads is retained according to those providers’ policies. CampusAI cannot delete data from Google’s systems on your behalf through an in-app account tool, because there is no CampusAI account.
Security
Published AI traffic uses HTTPS. The Gemini API key is stored as a server-side Worker secret and is not shipped in the Android package. Optional app lock stays on the device. No security measure is perfect; do not submit secrets, passwords, or highly sensitive records to the assistant.
Children’s privacy
CampusAI is intended for college students. It is not directed to children under 13, and it does not provide a child account. The app does not verify age. If you believe a child has entered personal information in the app, delete the app data or uninstall CampusAI.
Your rights and choices
- Do not use live AI features if you do not want prompts sent to the backend and Gemini.
- Turn off AI memory so saved memories are not included in later assistant requests.
- Delete conversations, memories, notes, and files in the app, or clear app storage / uninstall to remove local data.
- Disable notifications in the app or in Android settings.
- Use or skip optional app lock on the device.
If a privacy or consumer-protection law applies to you, you may have additional rights. Because CampusAI does not maintain user accounts or a hosted copy of your campus data, most requests are fulfilled by actions you take on the device.
Changes to this policy
If the app or backend starts collecting, storing, or sharing information in a new way, this page will be updated and the “Last updated” date will change. Continued use of CampusAI after an update means you should review the revised policy.
Contact
For privacy questions about CampusAI (package com.campusai.student), contact the developer through the CampusAI listing on Google Play. Do not send API keys, keystore files, or passwords.