Privacy Policy
Last Updated: October 28, 2025
Introduction
Second Course ("we", "us", or "our") operates the Second Course mobile application ("Service"). This page informs you of our policies regarding the collection, use, and disclosure of personal data when you use our Service and the choices you have associated with that data.
We use your data to provide and improve the Service. By using the Service, you agree to the collection and use of information in accordance with this policy.
Information We Collect
Personal Information
When you register for an account with Second Course, we collect:
- Email Address: Your San Diego State University (SDSU) email address (@sdsu.edu) for account creation and authentication
- Display Name: The name you provide for your profile
- Role: Whether you are using the app as a "Student" or "Poster"
- Profile Photo: If you choose to add a photo via Google Sign-In
Content You Create
When you use Second Course, we collect:
- Food Posts: Information you provide when creating posts, including descriptions, photos, availability times, and portion capacity
- Claims: Records of food portions you claim or that are claimed on your posts
Device Information
We collect:
- Push Notification Tokens: Device tokens to send you push notifications
- App Usage Data: Information about how you use the app (posts viewed, actions taken)
Authentication
You can sign in using:
- Email and Password: Stored securely with Firebase Authentication
- Google Sign-In: If you choose this option, we receive your Google account email and profile information
How We Use Your Information
We use the information we collect to:
- Provide and maintain our Service
- Authenticate your account and verify your SDSU email address
- Display food posts from Posters to Students in your campus community
- Send you push notifications about new food posts, post claims, and reminders
- Allow you to customize your notification preferences
- Process your claims and track post availability
- Improve and optimize our Service
Data Storage and Security
Your data is stored securely using:
- Firebase Authentication: For secure user authentication
- Cloud Firestore: For storing user profiles, posts, and claims
- Firebase Storage: For storing photos you upload
- Firebase Cloud Functions: For processing push notifications
All data transmission is encrypted using HTTPS. We implement reasonable security measures to protect your information, but no method of transmission over the internet is 100% secure.
Who Can See Your Information
Public Information
The following information is visible to all authenticated users on your campus:
- Your display name on food posts you create
- Photos and descriptions of food you post
- Post availability and claimed portion counts
Private Information
The following information is private to your account:
- Your email address (only you and platform administrators can see this)
- Your push notification tokens
- Your notification preferences
- Your role (Student or Poster)
Push Notifications
We send push notifications to keep you informed about:
- Students: New food posts on your campus, reminders before claimed food expires
- Posters: When your posts are claimed, when they're halfway full or full, when they expire, and reminders before expiry
You can manage your notification preferences in the Profile tab of the app. Notifications require your explicit permission via your device settings.
Data Sharing
We do not sell, trade, or rent your personal information to third parties. We may share your data only in the following circumstances:
- With Other App Users: Your posts and display name are visible to other SDSU community members using the app
- With Service Providers: We use Firebase (Google) for hosting and infrastructure. Their privacy policies apply to the data they process
- Legal Requirements: If required by law or legal process
Your Rights
You have the right to:
- Access: Request a copy of your personal data
- Update: Update your profile information in the app at any time
- Delete: Request deletion of your account and associated data
- Opt-Out: Disable push notifications or adjust preferences in the app
To exercise these rights, contact us at daniel@secondcourse.co.
Account Deletion
You can delete your account directly from within the Second Course app. Go to your Profile tab and tap "Delete Account". You will be asked to enter your password to confirm the deletion. When you delete your account:
- Your profile information will be permanently removed
- All your posts and associated photos will be permanently deleted
- All claims you made on posts will be permanently deleted
- Your email will no longer receive notifications
- Your push notification tokens will be removed
- Some information may be retained for legal or legitimate business purposes
Alternatively, you can request account deletion by contacting us at daniel@secondcourse.co.
Children's Privacy
Second Course requires users to be 13 years or older and to have a valid SDSU email address. We do not knowingly collect personal information from children under 13.
Changes to This Privacy Policy
We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date.
You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.
Contact Us
If you have any questions about this Privacy Policy, please contact us:
Third-Party Services
Our Service uses the following third-party services:
© 2025 Second Course. All rights reserved.