Privacy Policy — UniConn
Effective date: 2026-05-08
Last updated: 2026-05-18
This Privacy Policy describes how UniConn ("we", "us", "our"), a mobile application provided by Iunis Valiev, collects, uses, stores, and discloses information when you use UniConn on iOS and Android. UniConn is a social app (“UniConn: Your Private Campus”) designed to help campus communities connect. This Policy applies globally and describes your rights under major privacy laws (e.g., GDPR, CCPA, COPPA, PIPEDA) where applicable.
If you do not agree with this Policy, please do not use the app.
Information We Collect
We collect the following categories of information to operate the app, provide features, improve services, and comply with legal obligations.
Personal Data

• Name

• Email address

• Profile photo

Photos and media files you upload to the app

Strict Restrictions on Institutional Credentials and Academic Verification Data:

To maintain the integrity of the private campus ecosystem, UniConn collects academic email addresses and institutional enrollment documentation solely for the purpose of validating active student status. This data is subject to strict security containment protocols and is utilized exclusively for verification execution. Under no circumstances shall verification telemetry, university affiliation data, or student-specific digital credentials be aggregated for commercial tracking, leased, shared, or transferred to third-party commercial brokers, marketing entities, or institutional administrative networks, except where strictly mandated by a valid judicial subpoena or enforceable legal warrant.

Location & Device Data

• Location data (GPS) — only if you grant location permission.

• Device information: model, operating system and version, device identifiers (e.g., unique device ID [UUID], advertising identifier where applicable), language, time zone, and push notification tokens.

• IP address.

Usage & Technical Data

• App usage analytics and behavior (e.g., pages/screens visited, feature usage, timestamps).

• Crash reports, diagnostic logs, performance metrics (processed via Sentry).

Sensitive Data
We do not intentionally collect health, financial, or other special category sensitive data. If you voluntarily provide any sensitive data in messages or profile fields, we will process it only as described in this Policy and with any additional consent you provide.
How We Collect Data

• Directly from you when you create an account, update your profile, upload photos, or communicate with us.

• Automatically when you use the app (analytics, device data, crash reporting, and local storage/session tokens via Supabase).

• From third-party services and integrations necessary to operate the app (listed below).

How We Use Your Information
We use your information for the following purposes:

• To provide and operate UniConn (account creation, authentication, profile, media storage, location-based features).

• To enable sign-in and manage your account (authentication and account management).

• To display and store profile photos and media you upload.

• To improve and personalize the app experience (analytics, feature improvement).

• To monitor, detect, and fix bugs and security incidents (crash reporting, diagnostic logs).

• To communicate with you about your account, updates, support, and policy changes.

• To comply with legal obligations and resolve disputes.

• For internal research and development, aggregated and anonymized, to enhance features.

• Safety & Moderation: To facilitate user reporting and blocking mechanisms, and to review objectionable content within 24 hours as required by platform providers.

We do not use your information for cross-app or cross-service advertising because UniConn does not display advertising.
Third-Party Services and Sharing
We use third-party service providers to operate, host, and improve UniConn. These providers may access, process, or store your data as necessary to provide their services. We require these providers to maintain appropriate security and only process data for the purposes we specify.
Third-party services used:

• Authentication: supabase_auth (part of Supabase) — https://supabase.com/legal/privacy

• Cloud / Backend hosting and services:
  • Supabase — https://supabase.com/legal/privacy
  • Vercel — https://vercel.com/legal/privacy-policy
  • Cloudflare — https://www.cloudflare.com/privacypolicy/
  • Firebase (Google) — https://firebase.google.com/support/privacy

• Error monitoring and diagnostics:
  • Sentry — https://sentry.io/privacy/

What third parties access:

• Authentication provider (supabase_auth) processes your account credentials and basic profile.

• Backend / hosting providers store user content and application data, serve content, and may process logs and telemetry.

• Crash and performance monitoring (Sentry) processes diagnostic logs and crash reports.

We do not sell your personal data. If we ever change our practice regarding sale of personal data, we will provide notice and your choices as required by applicable law.
Data Retention
We retain personal data only as long as necessary to provide the service, comply with legal obligations, resolve disputes, enforce our agreements, and for internal business purposes. Typical retention periods include:

• Account information (name, email, profile): retained while your account exists. After account deletion, we remove account data from active systems and retain backups and logs for up to 90 days for recovery and legal compliance.

• Photos and media you upload: retained while your account exists; upon deletion, removed from active servers and retained in backups for up to 90 days.

• Location data: retained while you use location features; aggregated or account-associated location data may be retained for up to 12 months for feature support unless you delete your account.

• Usage analytics and app behavior: aggregated and/or de-identified analytics retained for up to 24 months. Raw diagnostic logs and crash reports retained for up to 180 days.

• Logs and security records required by law: retained as necessary to comply with legal obligations.

Security
We implement commercially reasonable administrative, technical, and physical safeguards to protect personal data, including:

• Transport-layer encryption (HTTPS/TLS) for data in transit.

• Access controls and authentication for systems storing personal data.

• Use of secure, reputable third-party providers that maintain security certifications and protocols.

• Regular security testing and patching of our systems.

• Limiting access to personal data to personnel and vendors who need it for legitimate business purposes.

No method of transmission or storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security. We will notify you and regulators of breaches as required by law.
International Data Transfers
UniConn operates globally. Your data may be processed and stored in countries other than your own, including the United States, by our service providers. Where transfers occur from regions with stricter data protection laws (e.g., the EU/EEA or UK), we rely on appropriate safeguards such as Standard Contractual Clauses (SCCs), data processing agreements, and other legal mechanisms required by law.
Children’s Privacy
UniConn is not directed to children under 13 and we do not knowingly collect personal information from children under 13. If you are under 13, do not create an account or provide any information. If we learn we have collected personal data from a child under the applicable minimum age (e.g., 13 in the U.S.), we will take steps to delete such data.
Rights and Choices
If you are subject to data protection laws (such as GDPR or CCPA), you may have the following rights:

• GDPR: Access, Rectification, Erasure (Right to be Forgotten), Restriction of Processing, Data Portability, Objection, and Withdrawal of Consent.

• CCPA (California): Right to Know, Right to Delete, Right to Opt-out of sale, and Right to Non-Discrimination.

How to exercise your rights:
Contact us at contact@uniconn.app with “Privacy Request” in the subject line. We will respond within the timeframe required by applicable law (generally within 30 calendar days).
AI-Powered Features
As of the Effective Date, UniConn does not use AI-powered third-party models to generate profile content or responses. Should we introduce AI features that process personal data, we will update this Policy with clear disclosures, controls, and safeguards.
In-App Purchases & Subscriptions
UniConn is provided free of charge. If paid features are introduced, payments will be processed by Apple/Google platform providers, and we will update this Policy accordingly.
Advertising and User Tracking
UniConn does not display advertising and does not participate in advertising-related user tracking. We use analytics tools solely to measure app performance and usage.
Changes to This Policy
We may update this Privacy Policy from time to time. When we make material changes, we will notify users in the app and update the Effective Date. Continued use after changes indicates acceptance.
Contact Us
Data Controller: Iunis Valiev
Email: contact@uniconn.app
Address: Georgia, Marneuli, Kirikhlo.