Last updated 2026-10-09
Draft. This text is waiting for legal review and may change before launch.
This explains what information Evedust keeps about you, why, who sees it, and how long we keep it.
Account details: name, email, password (stored only as a one-way hash), your school, campus and course, and your phone number if you add it.
What you do on Evedust: your listings and photos, orders, messages, reviews, jobs and applications, business pages, delivery jobs, saved items and searches, and your settings.
Student verification: if you verify with your school email we keep a one-way fingerprint of that address. If you send a student ID card photo and matric number, they are used only to check you; the matric number is stored encrypted and is never shown to other users.
Payment details: card and bank details are handled by our payment provider. We keep your payout bank name, the last four digits and the account holder’s name; the full account number is stored encrypted and is never shown back to anyone.
Technical data: your device type, push-notification token and IP address in security logs.
To run the marketplace, protect payments, send notices about your orders and security, prevent fraud and abuse, settle disputes, show a "verified student" badge, and improve Evedust. We do not sell your personal information and we do not show you third-party advertising.
Other users see your name, school, badge, reviews and listings, not your email, phone or matric number. Staff see what they need to do their job (for example a dispute), and every staff action on your account is recorded.
Our providers process data for us: payments and payouts (Flutterwave), email (Resend), push notifications (Expo), and hosting and storage. They may only use it to provide their service to us.
Student ID photos are deleted 30 days after the decision (immediately if you withdraw or delete your account). Dispute evidence photos are deleted one year after a case is closed. Photos of removed listings that never sold are deleted after 30 days. Old sign-in sessions, one-time codes and sent emails are cleared after a few weeks or months.
Records of payments, payouts, refunds, orders and the security audit log are kept as the law requires, without your name once you delete your account.
You can see and correct your details in the app, switch off notifications you do not need, download a copy of your data (Me > Account), and delete your account (Me > Account). We cannot delete an account while money or an order is still in progress; the app tells you what to finish first.
Connections are encrypted. Passwords are hashed. Sensitive fields are encrypted in our database. Staff accounts use two-factor sign-in. No system is perfectly secure; if there is a breach that affects you, we will tell you and the authorities as the law requires.
For privacy questions or to use your rights, contact Evedust support through the app.