1. Who we are
DormDeal (“DormDeal,” “we,” “us”) operates a campus marketplace iOS app and this website. We operate from Florida in the United States. For this policy, DormDeal is the organization that decides how personal information in the app is processed.
The App Store listing must link to this page. The same URL opens inside the app. This page is the controlling copy.
2. Information we collect
Account
- Campus email address (required to create an account and verify .edu affiliation)
- Password (stored as a hash by our authentication provider; we do not keep plaintext passwords)
- University affiliation derived from your email domain
- Optional nickname, avatar photo, and other profile fields you choose to add
Marketplace content
- Listings you create (title, description, photos, price, campus, condition)
- Messages you send to other students
- Saved listings and related in-app preferences
- Reports you submit about listings, users, or messages
Device and technical
- Push notification token, if you allow notifications
- Approximate network location (IP) used for security and campus context
- App diagnostics we can see in system logs. We do not run a third-party analytics or crash SDK today.
Payments
During the campus pilot, DormDeal does not process card payments or Apple Pay in the app. Buyers and sellers arrange payment at pickup. We do not collect card numbers, bank account numbers, or Apple Pay payloads for those handoffs.
If we later enable in-app checkout, we will update this policy before that launch. Payment data would be handled by the payment processor, not stored as full card numbers on DormDeal servers.
3. How we use it
- Create and keep your account, including .edu verification and sign-in (including optional Face ID / Touch ID on your device)
- Show listings, search, saved items, and messages
- Send verification codes and account email
- Send push notifications you have allowed (new messages, listing activity)
- Moderate content, enforce the Community Guidelines and Terms of Service, and investigate fraud or abuse
- Provide account deletion and data requests
- Secure the service and comply with law
5. Sale of personal information
We do not sell personal information. We do not share personal information for cross-context behavioral advertising. We do not use a third-party advertising or analytics SDK in the app today.
6. Retention
We keep account and listing data while your account is open. If you delete your account in the app, we delete the authentication user and owned files as part of that request. We may keep limited records (for example safety reports, fraud records, or information we must keep by law) for as long as needed for those purposes, then dispose of them so they are not readable in ordinary use.
7. Security and breaches
We use HTTPS, store session tokens in the iOS Keychain, and host data with providers that encrypt data in transit and at rest. No method of transmission or storage is perfectly secure.
If a breach of personal information affecting Florida residents occurs, we will notify those residents as required by Florida’s Information Protection Act, Fla. Stat. § 501.171: as expeditiously as practicable and without unreasonable delay, and no later than 30 days after we determine a breach occurred, unless a statutory delay or exception applies. If 500 or more Florida residents are affected, we will also notify the Florida Department of Legal Affairs as that statute requires.
8. Your choices
- Access and export. In the app: Profile → Privacy & Security → Request My Data. You can also email privacy (privacy@dormdeal.app).
- Correct. Edit your profile and listings in the app, or email privacy@dormdeal.app.
- Delete. Profile → Delete Account. Confirming that flow deletes your account. You can also email privacy@dormdeal.app.
- Notifications. iOS Settings controls push permission. Optional Face ID / Touch ID sign-in stays on the device; you can turn it off in Privacy & Security.
- Block. You can block another student so they cannot message you.
9. State privacy rights
Some U.S. state laws give residents additional rights to know, delete, or correct personal information, and to opt out of sale or sharing. California’s Consumer Privacy Act (as amended) is one example. Those laws often apply only after a business meets size or data thresholds.
You may use the choices in section 8 regardless of the state where you live. If a state law that applies to us gives you a right we do not already honor through the app or privacy@dormdeal.app, email that address and tell us the state and the right you want to exercise. We will not deny service, charge a different price, or reduce quality because you make a privacy request.
10. Children
DormDeal is for users 18 or older with a qualifying .edu email. It is not directed to children under 13. We do not knowingly collect personal information from children under 13. If we learn that we have, we will delete it. Parents or guardians can contact privacy@dormdeal.app.
11. Email and notifications
We send transactional email needed to run the account (verification codes, security, deletion). That mail is not marketing. If we later send commercial email, those messages will identify DormDeal, include a valid postal address, and include a way to opt out, which we will honor as required by the CAN-SPAM Act.
12. Changes
We will post updates on this page and change the “Last updated” date. If a change is material, we will provide additional notice in the app or by email when reasonably possible. Continued use after the updated date means you accept the revised policy, except where the law requires a different form of consent.
13. Contact
Privacy requests: privacy@dormdeal.app (privacy@dormdeal.app)
Legal: legal@dormdeal.app (legal@dormdeal.app)
Safety: safety@dormdeal.app (safety@dormdeal.app)
DormDeal operates from Florida, United States.