Privacy Policy

1. Who is responsible for your data?

UniVibe is operated by Çağrı İnan as an individual developer. For privacy requests, contact support@getunivibe.app. For users in Türkiye, this operator is the data controller for the purposes of the Turkish Personal Data Protection Law (KVKK).

2. Data we collect

• Account and identity: email address, authentication identifiers, display name, username, date of birth, nationality, languages, interests, biography, social profile handles, and account status.
• Student eligibility: university, university email domain, one-time verification challenges, verification status, and—when document review is used—student-document images and review metadata.
• Profile media: profile photos and the privacy choice controlling who may view the Social Passport.
• Plans and location: trip and student-plan details, approximate public map pins, optional exact meeting details shared only with authorized participants, and device location when you explicitly grant permission.
• Community activity: friendships, join requests, participants, blocks, messages, notifications, and content you choose to publish.
• Safety and support: reports, report descriptions and evidence, moderation decisions, appeals, deletion requests, and support communications.
• Technical data: security, authentication, delivery, and operational records generated while providing the service.

3. How and why we collect it

We collect information directly when you register, complete your profile, upload content, create or join a plan, send a message, make a report, or contact support. Other records are generated through your use of UniVibe and its security systems. Device information such as current location is accessed only through the relevant operating-system permission.

We use this data to create and secure accounts, verify student eligibility, show privacy-controlled profiles, operate plans and messaging, provide relevant map experiences, prevent abuse, investigate reports, answer support requests, comply with legal duties, and delete accounts. Depending on the context, processing is based on performing the user agreement, complying with law, establishing or protecting a right, legitimate interests that do not override your rights, or explicit consent where required.

4. Visibility and sharing

UniVibe is not an anonymous service. Profile and plan information is shown according to the privacy, friendship, block, participation, and account-status rules in the app. Exact dates of birth are not shown to other users; a server-derived age may be shown where permitted. Exact meeting details are limited to the host and accepted participants.

We use service providers to run UniVibe, including Supabase for authentication, database, storage, and server functions; Resend for transactional email; and Cloudflare for domain, security, and inbound email routing. Apple and Google process information when you download the app or later use their payment systems. We may disclose narrowly necessary information to authorities when legally required or to protect people from serious harm. We do not sell personal data or use it for cross-app advertising tracking.

5. Retention

• Pending student documents remain available while review is required. After approval or rejection, document files and sensitive document metadata are scheduled for deletion within 30 days.
• Account deletion closes access immediately and normally removes account data and user content quickly, with automated retries for up to 24 hours.
• Messages and ordinary report content are deleted with the account. If a report is still needed for an active safety or moderation matter, a private anonymized snapshot may be retained for no longer than 180 days.
• Minimal operational or legal records may be retained only as long as needed for security, dispute handling, or legal compliance.

6. International processing

Our providers may process data outside Türkiye or your country. Where required, UniVibe relies on applicable transfer safeguards and limits providers to the data needed for their service.

7. Your choices and rights

You can edit profile information, change profile visibility, block users, deny device location access and move the map manually, or delete your account in Settings. Depending on applicable law, you may request information, access, correction, deletion, restriction, objection, or details about transfers and automated processing. Send requests to support@getunivibe.app. We may need to verify your identity before acting.

8. Account deletion

Delete your account inside the app or use the public account deletion page. Deletion is permanent and cannot be undone.

9. Changes

We will update this notice when the product or its data practices materially change. The effective date above identifies the current version.