Privacy Policy

1. Who we are

UniLife provides student and graduate verification, discounts, social features, and related digital services. For privacy questions or requests, contact us at [email protected].

2. Information we collect

Depending on the features you use, we may collect:

• Account and identity information: name, email address, date of birth, pronoun, phone number, password credentials in protected form, and identifiers supplied by Google or Apple when you use social sign-in.
• Student or graduate verification information: student email, institution, country, qualification, graduation year, and any verification document you choose to provide.
• Profile and preferences: profile image, interests, category preferences, social profile details, and information you choose to add to your profile.
• Content and communications: stories, images, chat messages, survey responses, friend connections, support requests, and other content you submit through the Services.
• Location and device permissions: precise location when you choose a location-based or sharing feature; camera, photo library, microphone, Bluetooth, and notification access when you enable a feature that requires it.
• Usage and transaction information: offers viewed or saved, coupon redemptions, account activity, device and app information, IP address, timestamps, and diagnostic or security events.

3. How we collect information

We collect information directly from you, automatically when you use the Services, from your device after you grant permission, and from sign-in providers such as Google or Apple when you choose to use them.

4. How we use information

• Provide, personalise, maintain, and secure the Services.
• Verify student or graduate eligibility and manage accounts.
• Deliver discounts, social features, messages, notifications, and customer support.
• Prevent fraud, abuse, and security incidents, and enforce our Terms.
• Analyse and improve performance, reliability, and user experience.
• Meet legal, regulatory, accounting, and reporting obligations.

5. Legal bases

Where UK data protection law applies, we process personal data as necessary to perform our contract with you, comply with legal obligations, pursue legitimate interests such as service security and improvement, and based on your consent where consent is required. You may withdraw consent at any time, without affecting processing already carried out.

6. How we share information

We do not sell personal data. We may share information only as needed with:

• Cloud hosting, storage, email, notification, security, analytics, and technical service providers.
• Google or Apple when you use their sign-in services.
• Business partners when needed to provide or validate an offer you choose to use.
• Professional advisers, regulators, courts, or law enforcement where required by law.
• A successor organisation in connection with a merger, acquisition, or transfer of the business, subject to appropriate safeguards.

We require service providers that process personal data for us to protect it and use it only for the services they provide.

7. Device permissions

You control optional device permissions through your operating system settings. Disabling a permission may prevent the related feature from working, but it will not prevent you from using unrelated parts of the Services.

8. Retention and account deletion

We retain personal data only for as long as needed for the purposes described in this Policy, including legal, security, fraud-prevention, and dispute-resolution requirements. Retention periods vary by data type and context.

You can initiate account deletion in the app through Profile → Settings → Delete Account. We will delete or anonymise account data from active systems, subject to limited information we must retain for legal, security, fraud-prevention, or legitimate business purposes. Residual copies may remain temporarily in protected backups until they are overwritten.

9. Your rights and choices

Depending on your location, you may have rights to access, correct, erase, restrict, or receive a copy of your personal data, and to object to certain processing. You may also withdraw consent and complain to your local data protection authority. To exercise a right, email [email protected]. We may need to verify your identity before completing a request.

10. International transfers

Our providers may process information in countries other than your own. Where required, we use appropriate safeguards for international transfers of personal data.

11. Security

We use administrative, technical, and organisational safeguards designed to protect personal data. No system is completely secure, so we cannot guarantee absolute security.

12. Children

The Services are intended for students, graduates, and other users who meet the minimum age required in their country to create an account and consent to data processing. If you believe a child has provided personal data without appropriate authorisation, contact us so we can investigate and take appropriate action.

13. Changes to this Policy

We may update this Policy when our Services or legal obligations change. We will publish the updated version here and revise the “Last updated” date. We will provide additional notice when required.

14. Contact us

For questions, complaints, or privacy requests, email [email protected].