Privacy Policy
Last updated September 2026
Draft. This is a plain-language draft that will be reviewed by a lawyer before RU Cura launches publicly.
This explains what RU Cura collects, why, who can see it, and your choices, in plain language.
1. What we collect
Account: your school email, your username, and, for verification, your full name, NetID and campus. Your name and NetID are encrypted, and other students never see them.
Verification: a live selfie and a photo of your student ID, taken in the app. They're encrypted as soon as they're handed in, only RU Cura moderators can open them (each time is logged), and only to confirm you're a real Rutgers student. We delete them 14 days after your sign-up is decided.
What you post: listings (photos, videos, details), reviews, your bio and profile photo, messages, and photos you send to friends.
Orders: meetup spot and time, order history, and check-in photos. Check-in records whether you were near the spot (yes/no), never your location.
Technical: error reports (the page you were on, your browser type and your account id) so we can fix bugs. Your theme choice is saved in your browser.
Analytics: we use Google Analytics to count visits and see which pages are used. It records page views and your approximate region and device type. Usernames, chat ids and order ids are removed from the pages it records, and advertising features are turned off.
2. What we don't collect or do
We never see or store your card or bank details; Stripe handles them. We don't track your location. We don't sell your data, show ads, or use advertising trackers.
3. Who can see what
Other students see your username, profile photo, bio, listings, reviews and ratings. Likes, your cart, your saved items and your Dressing Room closet are private to you.
Messages are visible to the people in the chat. RU Cura moderators only look at messages when a chat is reported, or when needed to investigate safety or legal issues.
4. Who we share data with
Service providers that run RU Cura: Google Firebase (accounts, database, file storage and hosting), Google Cloud Vision (checks public photos for content that isn't allowed), Google Analytics (visit counts), Resend (sending our emails) and Stripe (card payments). Sellers also give us a Venmo or Zelle handle, which only the RU Cura team can see, so we can pay them. We share information with authorities only when the law requires it or someone's safety is at risk.
5. How long we keep it
Selfies and ID photos are deleted 14 days after your sign-up is decided. Check-in photos are deleted after 30 days. Other data is kept while your account is open. When you ask us to delete your account, we remove your profile, listings, photos and verification images within 30 days. Messages you already sent stay visible to the people you sent them to, and records of payments are kept as long as tax and payment laws require.
6. Security
Data is encrypted in transit and at rest, sensitive identity fields are additionally encrypted by us, and access is limited by strict security rules. No system is perfect; if something goes wrong, we'll tell affected users promptly.
7. Your choices
You can edit your profile, delete listings, turn off read receipts, block people, and ask for a copy of your data or deletion of your account through Report a problem → Something else, or by emailing support.rucura@gmail.com.8. Changes
If we change this policy in a way that matters, we'll tell you in the app first.
RU Cura is run by students and isn't affiliated with Rutgers University.