For Nostia Campus, the app for school events, clubs and campus walks
Effective October 18, 2026
This policy covers Nostia Campus: the iPhone and Android apps, the service at org.nostia.io, and the web console schools use at org.nostia.io/console/. It does not cover the separate consumer Nostia app, which has its own policy.
Nostia Campus is run by Nostia LLC, Exeter, New Hampshire, USA. Questions and requests about your information: nostiaexecutive@nostia.io.
Your account. A username, an email address and a password, stored only as a salted scrypt hash. If you add a passkey we store its public key and a device name. We never receive your fingerprint or face: that check happens on your phone.
Your memberships. Which schools and clubs you belong to, and your role in each.
Events and attendance. Your RSVPs, your check-ins to events (with the time) and any answers you give in an event's short survey. Club leaders also file how many people attended.
Club chat and messages. Messages you post in a club's chat, people you block, and reports you make. Messages a club or school sends you appear in your in-app inbox; nothing is sent by email.
What you do on a walk. That you started a walk, which stops you completed and when, photo attempts, points and any rating you give.
Your location, only during a walk. While a walk stop is open on your screen, the app sends your position so we can check you are inside the stop's area for long enough. The app never asks for background location. The positions for a stop are deleted as soon as that stop is verified, or when the walk ends if it never is; we keep the distance from the stop and the number of position checks, not where you were.
Photos. Some walk stops ask for a photo, and a club leader may photograph the room so attendance can be estimated. These photos are checked automatically (see below) and are never stored: we keep a fingerprint of the file, the verdict or estimated count, and a short reason. Location data embedded in a photo is removed before it leaves our server.
Security records. Sign-ins, failed sign-ins, passkey changes and invite-code redemptions are logged with the time and IP address, so misuse can be detected. For a failed sign-in we keep a non-reversible tag of what was typed, not the email itself. Security records are deleted after 90 days.
To run your school's events, clubs, check-ins and walks; to verify walk stops; to show organizers the results they are entitled to see; to keep accounts and chats safe, including reviewing reports; and to fix problems. We do not sell personal information and we do not use it for advertising.
Walk-stop photos and room photos are checked by Anthropic's Claude models through Anthropic's commercial API. For a walk stop, Anthropic receives the photo, the organizer's reference photo of the place (if there is one) and the organizer's description of the stop. For a room photo it receives only the photo, and returns an estimated number of people; it never identifies anyone. The app asks a club leader to agree before a room photo is sent.
Under Anthropic's commercial terms, data sent through its API is not used to train its models and is kept by Anthropic only as those terms allow. We do not store the photo. An organizer can choose walk stops that need no photo.
You can report a chat message or an inbox message, choosing a reason, and you can block a person; neither sees the other's chat messages after that, and they are not told. Each report reaches the club's officers, your school's administrators and Nostia, and Nostia reviews reports within 24 hours. We keep a record of each report, including up to 500 characters of the reported message, and what was done about it, while it is reviewed and for one year after it is resolved. If either person deletes their account, the record no longer names them.
| Provider | What for | What it receives |
|---|---|---|
| Microsoft Azure | Hosting, in the North Central US region | All stored data, encrypted at rest |
| Anthropic | Photo checks | As described above |
| Android app distribution, location services, maps and passkeys on Android | Device and location data handled by Google Play services under Google's terms; map views | |
| Apple | iPhone app distribution and passkeys on iPhone | Device-level data under Apple's terms |
| GitHub | Hosting this website and the console's files | No personal data |
| Stripe | Billing schools, on the web | A school's billing details; no student data |
Delete your account in the app: You → Account and legal → Delete account. It asks for your password and then deletes your name, email, password and passkeys, your memberships, your chat messages, your RSVPs and check-ins, your blocks, your notifications and the positions recorded on your walks. Walks you completed stay in schools' totals as anonymous numbers. If you lead a club, it passes to its longest-serving officer, or is paused until your school names a new leader. More, including how to ask by email: nostia.io/campus/delete-account.
You can also ask to see, correct or delete your information by writing to nostiaexecutive@nostia.io from the email address on your account. We answer within 30 days. If your school uses Nostia Campus for required attendance, those records may also be education records held for your school, and some requests may need to go through your school.
You can turn location off at any time in your phone's settings; walk stops that need location will then not verify.
Nostia Campus is not for children under 13. Accounts are created only with an invite code from a school or club. A person under 18 may use it only through a school or club that has given them access, and the school is responsible for any consent its own rules require.
Connections are encrypted (TLS 1.2 or newer, with HSTS) and stored data is encrypted at rest. Passwords are hashed with scrypt and passkeys add a second factor. On your phone, your session is kept in the iOS Keychain or Android Keystore and is not included in device backups. Access to every school's and club's data is checked on the server for every request. Report a security issue to security@nostia.io.
We will post changes here with a new effective date, and for a material change we will tell you in the app at least 30 days before it applies.