Privacy Policy

Last updated: October 10, 2026

This Privacy Policy for PECULIAR SHOP ("we", "us", or "our", package: com.peculiarjaey.app) describes how and why we access, collect, store, use, and process your personal information when you use our mobile application, website, and related commerce services (collectively, the "Services"), including when you:

Visit our official website at https://peculiarshop.store.
Install and interact with the PECULIAR SHOP Android application via Google Play.
Engage as a student buyer, verified campus seller, or delivery courier partner on our platform.

Questions or concerns? Reading this Privacy Policy will help you understand your privacy rights and choices. If you have any questions, you can contact us directly at peculiarjaey@gmail.com.

Summary of Key Points

1. Strict Purpose Limitation: We collect only the information necessary to fulfill your orders, authenticate your session, and allow buyers and sellers to communicate on campus.

2. No Data Selling: We do not sell, rent, or trade your personal information or telemetry data to third parties or advertising brokers.

3. Transparent Device Permissions: We request hardware permissions (Camera, Location, Storage, Notifications) strictly with runtime consent for functional features you initiate.

4. Full Control & Account Deletion: You have the right to permanently delete your account and personal data at any time in-app or via our web portal (delete-account.html).

1. Personal Information We Collect

We collect information that you voluntarily provide when you interact with our platform:

Account Registration & Profile: Full name, email address, phone number, university campus affiliation, and optional profile bio and avatar picture.
Store & Inventory (Sellers): Product listings, prices, categories, product photos, and store meetup/pickup locations.
Orders & Fulfillment: Items ordered, payment method chosen (e.g. mobile money, card, cash-on-delivery), and delivery instructions.
In-App Communications: Messages and counter-offers exchanged between buyers and sellers regarding transactions.

2. Device Hardware Permissions & Usage Disclosures

In accordance with Google Play Developer Program Policies, here is an explicit breakdown of the permissions requested by the PECULIAR SHOP mobile application:

Camera Permission (CAMERA)

Purpose: Used exclusively when you choose to take photos of items to sell, capture delivery completion proof photos (for couriers), or take a new profile picture. The camera is never accessed in the background or without your explicit action.

Location (ACCESS_FINE_LOCATION & ACCESS_COARSE_LOCATION)

Purpose: Used to display interactive campus maps, allow sellers to pin their campus pickup spots, calculate real-time delivery distances, and enable active delivery couriers to navigate drop-offs. Location data is only used during active transaction sessions.

Storage & Photos (READ_MEDIA_IMAGES / Storage)

Purpose: Used solely to allow you to select existing photos from your device gallery to upload product catalog photos or change your user profile avatar.

Push Notifications (POST_NOTIFICATIONS)

Purpose: Used to send critical transactional notifications, such as when an order is placed, an order status updates, a delivery courier arrives, or a buyer/seller sends a new chat message. You can disable notifications anytime in device settings.

3. How We Secure Your Data

We implement industry-standard security safeguards to protect your personal information:

All network communications between the mobile app, website, and servers are strictly encrypted using HTTPS / TLS 1.3.
Cleartext (HTTP) traffic is completely disabled in our Android Network Security Configuration.
User passwords are encrypted using one-way salted bcrypt cryptographic hashing.
Authentication utilizes secure, tamper-proof JSON Web Tokens (JWT) with strict expiration limits.

4. Third-Party Service Providers

We work with trusted third-party providers solely to provide our platform infrastructure:

Google Play Services: Core Android runtime APIs and authentication.
Firebase Cloud Messaging (FCM): Delivers encrypted push notifications.
Cloudflare & Render: Secure cloud application hosting, SSL/TLS certificates, and DDoS mitigation.
Supabase / PostgreSQL: Encrypted cloud database storage.

5. Account and Data Deletion Policy

We believe you should have total control over your digital footprint. In compliance with Google Play's User Data Policy:

In-App Deletion: You can delete your account at any time from within the app. Go to Profile > Account Security > Delete Account. Confirmation will instantly and permanently erase your account, product listings, chat messages, and personal profile.
Public Web Deletion Portal: If you uninstalled the app or lost access, you can visit our dedicated web deletion page at https://peculiarshop.store/delete-account.html to request permanent erasure.
Data Retained: Only anonymized financial transaction ledger receipts required by legal, taxation, and accounting regulations are retained for the statutory period (up to 7 years), after which they are purged.

6. Children's Privacy

Our Services are designed for university students and general campus retail. We do not knowingly collect personal information from children under the age of 13. If you believe a child under 13 has provided personal information to us, please contact us immediately.

7. Contact Information

If you have questions, feedback, or data privacy requests, please reach out to us at:

PECULIAR SHOP Support & Privacy Office
Email: peculiarjaey@gmail.com
Website: https://peculiarshop.store

Platform Leadership

Chabota S. (Peculiar) — Lead Engineer
Reagan C. M. (Jeay) — Operations & Product