Privacy Policy
Effective Date: September 2026 · Version 2026.1
1. Information We Collect
To provide a safe, student-verified campus network, Meova collects the following categories of information:
- Profile & Academic Data: Full name, university email address, college, branch, year of study, profile photo, bio, and student interests.
- Student Verification Credentials: Institutional email verification tokens, student identity card photos, and verification selfies submitted during the verification badge application process.
- Campus Presence & Meetups:Live campus radar status (e.g. "Free Now at GD Subway"), meetup bookings, QR verification timestamps, and meeting check-in codes.
- Communications: Direct peer-to-peer chats and messages.
- Wallet & Payment Data: Sparks ledger balance, recharge transaction references (UTR/UPI IDs), and withdrawal bank/UPI details.
- Device & Security Telemetry: IP address, device model, operating system, and push notification tokens (FCM) used strictly for account security and anti-fraud enforcement.
2. Private Storage of Student ID Documents
Bank-Grade Restricted Storage
Student ID card images and verification selfies are stored in private, isolated cloud storage buckets with zero public URL access. These documents are accessible exclusively by verified super-administrators during the verification review and are never made visible to peers, campus ambassadors, or third parties.
3. Data Retention & 7-Day Message Auto-Deletion
We believe students shouldn't carry permanent digital baggage from casual campus conversations. Meova operates an automated data expiration protocol:
- Direct Chat Messages: All peer-to-peer chat messages and attachments are automatically and permanently deleted from our servers after 7 days.
- Campus Radar Presence: Live location status broadcasts automatically expire within 2 hours unless manually refreshed.
- Financial Ledger Logs: Sparks transaction records are retained for a minimum of 5 years to comply with statutory financial record-keeping standards in India.
4. Third-Party Sub-processors & Partners
We do not sell your personal information. We partner with specialized infrastructure providers under strict confidentiality agreements:
Firebase (Google)
Secure push notification delivery & real-time messaging.
Cloudinary
Encrypted image hosting & media content delivery.
Metered / WebRTC
Encrypted peer-to-peer voice and audio call routing.
5. Your Data Rights & Account Deletion
Under Indian information technology standards and the Digital Personal Data Protection (DPDP) Act, you possess the right to:
- Request a copy of your personal data stored on Meova.
- Update or correct inaccurate profile or academic information.
- Request permanent account deletion and erasure of all associated personal data by emailing support@meova.in.