Privacy Policy
Last updated: 12 May 2026
We are committed to protecting your privacy and the security of your personal information in accordance with UK GDPR and the Data Protection Act 2018. This policy explains how we collect, use, disclose, store, and protect your personal data when you use Uni Mate.
1. Introduction and Our Commitment to Privacy
Uni Mate ("we", "us", or "our") is committed to protecting your privacy and the security of your personal information. This Privacy Policy explains how we collect, use, disclose, store, and protect your personal data when you use Uni Mate ("the App"), our platform for university freshers and students worldwide.
This Privacy Policy is governed by the laws of England and Wales and complies with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. If you are in another country, additional local laws may apply.
By creating an account or using the App, you acknowledge that you have read, understood, and agree to this Privacy Policy. If you do not agree, please do not use the App.
2. Data Controller
The operators of Uni Mate are the data controller responsible for your personal data. For privacy-related inquiries, please contact us through the in-app contact options (e.g. Settings or Report an issue). We comply with applicable data protection laws in the United Kingdom.
3. Personal Data We Collect
We collect the following categories of personal data:
ACCOUNT AND CONTACT: Name, email address and/or phone number (depending on how you sign up), profile identifiers, and your self-declared confirmation that you are a UK university student or offer holder and at least 18. We do not independently verify student status unless we tell you otherwise.
AUTHENTICATION: If you sign up or sign in with email, we process your email address and password through Firebase Authentication. If you use WhatsApp sign-in, we process your phone number to send a one-time verification code and to create or access your account. WhatsApp sign-in sessions may be stored securely on your device.
PROFILE: Photo, university, subject, interests, and other details you add to your profile. Photos may come from your camera or photo library when you choose to add or update them.
LOCATION: Approximate location for matching you with nearby activities and other students. We do not display exact addresses to other users. Whether your approximate location is shown to others (e.g. in "Students in this area") is controlled by a separate in-app consent; you can change this in Settings at any time.
USER CONTENT: Messages and content you post (e.g. activities you create, chat messages, chat rooms you join or host, and comments on Explore articles).
NOTIFICATIONS: If you opt in, we store a push notification token and related preferences (e.g. nearby event alerts) so we can send you notifications through your device or app store provider.
USAGE AND DEVICE: How you use the App, device type, OS, app version, and crash/performance data to improve the service. On Explore articles, we may record views, time on page, and CTA interactions using your account ID or an anonymous identifier.
BLOCKING AND SAFETY: If you block another user, we store the block relationship so both of you stop seeing each other in relevant parts of the App.
REPORTS: If you report a user, room, activity, or issue, we store the report details (and any screenshot you attach) to review and respond.
We collect this data when you register, complete your profile, use location or map features, send messages, create or join activities or rooms, read Explore content, enable notifications, or contact support.
4. How We Use Your Personal Data
We use your personal data to: create and manage your account; verify sign-in by email or WhatsApp where you choose those methods; match you with nearby activities and other students; enable chat, rooms, and other communication; display your profile to other users as part of the service; provide location-based features; send optional notifications and updates when you opt in; enforce blocking and safety features; review reports and support requests; and analyse app usage to improve the App. We may notify you about new features (you can opt out where applicable). We only use your data for legitimate purposes and in accordance with applicable data protection laws, and will not use it for incompatible purposes without your explicit consent.
5. Legal Basis for Processing (GDPR)
Under UK GDPR we process your data based on: consent (where you have agreed; you can withdraw via settings or by contacting us); contract performance (to provide the App and fulfil our Terms); legitimate interests (improving the service, security, support); and legal obligation (complying with laws). We ensure our legitimate interests do not override your rights.
6. Data Sharing and Disclosure
We do NOT sell your personal data. We may share data: with other users (your profile and, only if you have given separate consent, your approximate location for features like "Students in this area"; exact addresses are never displayed); with service providers (e.g. Firebase/Google for hosting, authentication, and storage; WhatsApp/Meta for one-time sign-in codes when you choose WhatsApp sign-in; Expo and Apple/Google for push delivery when you opt in; and analytics providers) under strict agreements; when required by law or to protect rights and safety; or with your consent. Sponsored events shown on the map are provided by third parties; if you follow a link or purchase a ticket, that interaction is with them and subject to their privacy policy. All third parties we use are required to handle your data in accordance with applicable data protection laws.
7. Data Tracking
We may use data for analytics and to improve the App. You can limit tracking via your device settings and in-app privacy options where available. We do not engage in tracking that is not disclosed in this policy.
8. Location Data and Map Visibility
We collect approximate location (not exact addresses) to match you with nearby activities and other students. Exact addresses are never displayed to other users. Whether your approximate location is shown to others (e.g. on the map or in "Students in this area") is controlled by a separate consent in the App; you can turn this off in Settings at any time. Location data is stored securely. You can disable location in your device settings (this may limit some features). We do not continuously track your location when the app is not in use.
9. Data Security Measures
We implement appropriate security measures including encryption in transit and at rest, secure authentication, and access controls. No internet or electronic storage is 100% secure; we encourage you to use a strong password, keep credentials confidential, and report any security concerns.
10. Data Retention and Storage
We retain your data only as long as necessary: account data while your account is active and for a limited period after deletion; location and usage data for defined periods then anonymised or deleted. You can request deletion at any time; we will delete within 30 days unless we must retain data by law. Data is stored on secure servers in the UK/EEA; any transfer outside UK/EEA uses adequate safeguards.
11. Your Rights Under UK GDPR
You have the right to: access your data; rectify inaccurate data; request erasure ("right to be forgotten"); restrict processing; data portability; object to certain processing; and withdraw consent. You can delete your account via app settings. To exercise these rights, contact us through the in-app options. We will respond within 30 days where required by law. You also have the right to complain to the Information Commissioner's Office (ICO).
12. Cookies and Similar Technologies
We may use cookies and similar technologies for essential functionality, preferences, and analytics. You can control these via your device and in-app settings where available. Disabling some may limit app functionality.
13. Third-Party Services
We use third-party services that process data on our behalf, including Firebase (Google) for authentication, database, storage, and hosting; WhatsApp/Meta when you choose WhatsApp sign-in; Expo and Apple/Google when you opt in to push notifications; and device-level services for camera, photo library, and location access when you grant permission. These providers operate under strict agreements and applicable data protection requirements. We do not sell your data. Third-party services have their own privacy policies; we select providers that meet our privacy and security standards.
14. Children's Privacy
The App is not intended for users under 13. You must be at least 18 (or the age of majority in your country) to use the App. We do not knowingly collect data from anyone under 13; if we become aware of such data we will delete it and take steps to prevent recurrence. Parents may contact us to request access or deletion of a child's data.
15. International Data Transfers
The App is used worldwide. Your data may be stored and processed in the UK/EEA or by our service providers (e.g. in the US). Where we transfer data outside the UK/EEA we use appropriate safeguards (e.g. Standard Contractual Clauses) and comply with UK GDPR and applicable local laws.
16. Automated Decision-Making
We may use automated processing (e.g. matching, recommendations) to improve the service. We do not make significant automated decisions that significantly affect you without your consent or human oversight. You can object and request human review where applicable.
17. Data Breach Notification
In the event of a data breach that poses a risk to your rights, we will notify the ICO as required and notify you without undue delay where the risk is high. If you suspect a breach, please contact us immediately.
18. Changes to This Privacy Policy
We may update this policy from time to time. We will update the "Last updated" date and, for material changes, notify you via the App or email. Continued use after changes constitutes acceptance. If you do not agree, you should stop using the App and delete your account. The current version is always available in the App.
19. Contact and Complaints
For privacy questions or to exercise your rights, contact us through the in-app contact options. We aim to respond within a reasonable time. You have the right to lodge a complaint with the ICO (ico.org.uk) if you are not satisfied with how we handle your data.
20. Additional Information
This Privacy Policy should be read with our Terms and Conditions and Community Guidelines. Please keep your account information accurate, do not share credentials, and report privacy or security issues. Thank you for trusting Uni Mate with your information.
Your Data is Protected
We are committed to following industry best practices for data protection and privacy in compliance with UK GDPR and the Data Protection Act 2018. Your information is encrypted in transit and at rest, and we regularly review and update our security measures. We never sell your personal data to third parties, and you have comprehensive rights to access, correct, and delete your data at any time.
Questions About Privacy?
If you have any questions about this privacy policy or how we handle your data, please contact us through the in-app options (e.g. Settings or Report an issue). We are committed to transparency and will respond within a reasonable time. You also have the right to complain to the Information Commissioner's Office (ICO) if you are not satisfied with how we handle your personal data.