Legal

Privacy Policy

Effective May 27, 2026

MoveOn ("we," "us," or "our") is a free campus sustainability platform that connects students to give away items they no longer need, claim items from peers, and earn impact points. This Privacy Policy explains what information we collect, how we use it, and the choices you have.

1. Information We Collect

Information you provide

  • Email address — used to create and verify your account. Must be a valid institutional (.edu) address issued by your campus.
  • Password — hashed and never stored or visible in plain text.
  • Username and profile details — displayed to other verified students at your campus.
  • Item listings — titles, descriptions, categories, conditions, pickup locations, and photos you choose to upload.

Information generated by your activity

  • Points balance and transaction history
  • Items listed, claimed, and saved
  • Notification read status
  • Timestamps of account activity

Information we do NOT collect

  • Payment or financial information — MoveOn is entirely free
  • Precise location or GPS data
  • Social media accounts or third-party login data
  • Official academic records, grades, or FERPA-protected information

2. How We Use Your Information

We use the information we collect to:

  • Create and maintain your account
  • Display your listings and profile to other verified students at your campus
  • Send transactional emails (account verification, item claimed notifications)
  • Calculate and award impact points
  • Detect and prevent abuse, fraud, or violations of our Terms
  • Communicate important service updates
  • Improve platform performance and reliability

We do not use your information for advertising. We do not sell your information to anyone.

3. How We Share Your Information

With other students on your campus

Your username, avatar, school, and public listings are visible to other verified students at your institution. Your email address is never displayed publicly.

With service providers

We use the following infrastructure providers who process data on our behalf:
  • Supabase — database hosting and authentication
  • Vercel — web hosting and content delivery
These providers are contractually required to protect your data and may not use it for their own purposes.

With university partners

MoveOn partners with universities as a sustainability initiative. We do not share individual user data with partner institutions. Universities do not have access to your account, listings, or activity.

For legal compliance

We may disclose information when required by law, court order, or to protect the safety of our users or the public.

4. Cookies and Session Data

We use session cookies and local storage tokens solely to keep you signed in. We do not use third-party tracking cookies or advertising pixels. You can clear cookies at any time through your browser settings, which will sign you out of your account.

5. Data Retention

We retain your account data for as long as your account remains active. If you request account deletion, we will remove your personal information within 30 days, except where retention is required by law. Anonymized or aggregated data (such as total items shared across campuses) may be retained indefinitely for platform analytics.

6. Security

All passwords are hashed using industry-standard algorithms. Data is transmitted over encrypted HTTPS connections. Access to user data within our infrastructure is governed by role-level permissions and row-level security policies. We regularly review our security practices.

No system is perfectly secure. We encourage you to use a strong, unique password and to contact us immediately if you suspect unauthorized access to your account.

7. Your Rights

All users

You may request access to, correction of, or deletion of your personal data at any time by contacting us at privacy@campusmoveon.com.

California residents (CCPA)

If you are a California resident, you have the right to:
  • Know what personal information we collect and how it is used
  • Request deletion of your personal information
  • Opt out of the sale of your personal information (we do not sell it)
  • Non-discrimination for exercising your privacy rights
To submit a CCPA request, email privacy@campusmoveon.com.

8. Children's Privacy

MoveOn requires a valid institutional email address to register and is intended exclusively for college and university students aged 18 and older. We do not knowingly collect personal information from individuals under 18. If we learn that we have inadvertently collected such information, we will delete it promptly.

9. University Partnership Disclosure

MoveOn is an independent platform, not an official service of any university. We partner with institutions for sustainability purposes only. We do not access, store, or process FERPA-protected educational records. Universities do not manage user accounts, data, or disputes on this platform.

10. Changes to This Policy

We may update this Privacy Policy periodically. If we make material changes, we will notify registered users by email before the changes take effect. Continued use of the platform after the effective date of an updated policy constitutes your acceptance of it.

11. Contact

For privacy questions, data requests, or concerns:

privacy@campusmoveon.com