Privacy Policy

1. Accountability

Mylo Campus is responsible for the personal information it collects and holds. We have designated a Privacy Officer who is accountable for our compliance with this policy and applicable privacy laws.

• Name/Role: Privacy Officer, Mylo Campus
• Email: school@mylocampus.ca

If you have any questions, concerns, or requests related to your personal information, please contact us at the above email address.

2. Why We Collect Your Personal Information

We collect personal information only for the following identified purposes, which are communicated to you at or before the time of collection:

• To create and manage your Mylo Campus account
• To verify your student status and eligibility for student discounts
• To personalize your experience within the App
• To communicate with you regarding your account, updates, or support inquiries
• To generate aggregated, de-identified deal performance metrics and campus engagement analytics for merchant partners and student councils
• To provide limited student program information to a participating student council linked to your verified school, where the council has documented authority and a data-sharing agreement with Mylo Campus, or where you provide consent when required
• To improve the functionality and features of the App

We do not use your personal information for any purpose other than those listed above without obtaining your additional consent.

3. Consent

We obtain your consent at the time you register for and use the App. By creating an account and agreeing to this Privacy Policy, you consent to the collection, use, and retention of your personal information as described herein.

Where a participating student council has documented authority to administer a program for your verified school, we provide a clear in-app notice about the student program information it receives. Where additional consent is required, we will request it separately and explain the information, recipient, and purpose.

You may withdraw your consent at any time by contacting us at school@mylocampus.ca or by deleting your account. Please note that withdrawing consent may limit or prevent your ability to use certain features of the App.

4. What Personal Information We Collect

We limit the collection of personal information to what is necessary for the purposes identified above. We collect the following information when you register and use the App:

• Full name
• Email address
• Phone number
• School / educational institution
• Expected graduation year
• Student ID, only where you provide it or where it is necessary for a disclosed verification or council program purpose

We do not collect sensitive personal information such as financial data, government-issued identification numbers, or health-related information.

5. How We Use, Disclose, and Retain Your Information

Use

Your personal information is used solely for the purposes described in Section 2. We do not sell, rent, trade, or otherwise share your personal information with any third parties for their own marketing or commercial purposes.

Disclosure

We do not disclose your personal information to third parties, except in the following limited circumstances:

• As required by law, court order, or government authority
• To protect the rights, property, or safety of Mylo Campus, our users, or the public
• Partner & Student Council Analytics: We share aggregated, de-identified deal performance metrics (such as views, saves, redemption volumes, and redemption rates) with verified merchant partners and participating student councils so they can see how their offers and student programs are performing.
• Student Council Program Data: For a participating student council linked to your verified school, we may share your student ID, name, school email address, graduation year, and account registration status to administer and evaluate the council's student program. We limit disclosure to the linked school and documented purpose, and require the council to protect the information, restrict access to authorized users, avoid onward disclosure, and delete it when no longer needed. Where additional consent is required, we will obtain it before sharing.
• To trusted third-party service providers who assist us in operating our platform under strict confidentiality agreements:
  • Supabase: Cloud database, storage, and secure authentication infrastructure
  • Resend: Transactional email delivery for account verification and updates
  • Google Firebase: Push notification delivery, anonymous app usage analytics, and platform performance diagnostics (data is processed strictly to improve user experience and is never sold or shared for third-party advertising)
  • Google Maps and Device Geocoding Services: Interactive map rendering, address suggestions, and conversion between addresses and geographic coordinates

Retention

We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable law. When your information is no longer needed, it is securely deleted or anonymized.

If you delete your account, your personal information will be removed from our active systems within 30 days, except where retention is required by law.

6. Device Permissions and Location Data

To deliver core features of the App, we may request certain device permissions:

• Location Services (GPS): With your explicit consent, we access your device's approximate or precise location while the App is open to display deals near you, calculate distance to partner stores, and plot deals on the interactive map. We do not track your location in the background when the App is closed, and we never sell your location data.
• Address and City Search: When you type an address, city, or postal code to choose where to browse deals, the search text may be submitted to the geocoding service provided by your device platform, such as Apple or Google, to return address suggestions and geographic coordinates. The App stores up to five recent deal searches and five recent map searches locally on your device so you can reuse them. You can clear this history within the applicable search screen.
• Interactive Maps: Google Maps is used to display business locations and nearby deals. Google may process map and device information in accordance with its own privacy policy.
• Camera Access: We request access to your device camera solely for scanning QR codes during in-person coupon redemption. The App does not capture, store, or transmit photos or video recordings.
• Push Notifications: With your permission, we send push notifications regarding new deals, exclusive drops, and important account notices. You can enable or disable push notifications at any time in the App settings or your device system settings.
• Third-Party Navigation (Apple Maps & Google Maps): When you choose to get directions to a business location, the App may launch your device's native navigation application (such as Apple Maps on iOS or Google Maps on Android).

7. Children's Privacy

The Mylo Campus platform is intended for currently enrolled college and university students. We do not knowingly collect or solicit personal information from children under 13 years of age. If we learn that we have inadvertently collected personal information from a child under 13, we will promptly delete that information from our servers.

8. Account Deletion and Right to Erasure

You have full control over your account and data. You may request the permanent deletion of your account and associated personal information at any time directly through the App settings, by visiting our account deactivation portal, or by emailing school@mylocampus.ca.

Upon receiving your deletion request, your personal profile data, authentication credentials, and active coupons will be immediately deactivated and permanently purged from active database systems within 30 days.

9. Accuracy of Your Information

We take reasonable steps to ensure that your personal information is accurate, complete, and up to date for the purposes for which it is used. You are responsible for providing accurate information and updating it as necessary.

You may update your personal information at any time by logging into your account or by contacting us at school@mylocampus.ca.

10. How We Protect Your Information

We use appropriate technical and organizational safeguards to protect your personal information against unauthorized access, disclosure, alteration, or destruction. These safeguards include:

• Encrypted data storage using industry-standard protocols through Supabase
• Secure access controls and authentication measures
• Regular review of our privacy and security practices

While we implement reasonable security measures, no system is completely secure. In the event of a privacy breach that poses a real risk of significant harm, we will notify affected individuals and the Office of the Privacy Commissioner of Canada (OPC) as required under PIPEDA.

11. Transparency

This Privacy Policy is made readily available to all users of the App. We are committed to being transparent about how we manage personal information. If you have questions about our privacy practices, please contact us at school@mylocampus.ca.

We will update this Privacy Policy from time to time to reflect changes in our practices or applicable law. We will notify you of material changes by posting the updated policy in the App or by email. Your continued use of the App after any changes constitutes your acceptance of the revised policy.

12. Your Rights to Access and Correct Your Information

Under PIPEDA, you have the right to:

• Request access to the personal information we hold about you
• Request corrections to any inaccurate or incomplete personal information
• Know how your personal information has been used and to whom it has been disclosed

To exercise these rights, please submit a written request to school@mylocampus.ca. We will respond within 30 days. In some cases, we may need to verify your identity before processing your request. If access is denied, we will provide written reasons and inform you of available recourse.

13. Questions and Complaints

If you have a concern about our privacy practices or believe your personal information has been handled in a manner inconsistent with this policy or PIPEDA, please contact our Privacy Officer:

We will investigate and respond to all complaints within a reasonable timeframe. If you are not satisfied with our response, you have the right to file a complaint with the Office of the Privacy Commissioner of Canada: