We take your privacy seriously. This policy explains what we collect, where it is stored, who can see it, and the choices you have.
WHEN YOU CREATE AN ACCOUNT
An account is required to use the app. Signing up requires an email address and password, or a Google account. We store your email address and use it only for account access, login-related emails, and support.
Once signed in, we back up the following to our cloud (hosted on Supabase) so it syncs across your devices and can be restored if you reinstall:
- Your timetable events, deadlines, and study sessions
- Reminders, and any calendar feed URLs you add to import a timetable (note: if a calendar link you add contains a personal access token, that link is stored in your account like any other saved data, and is never shared with anyone else)
- Course tags and categories
- Custom links you add and how often you open services
- Your app settings (university, campus, and preferences)
- Your profile photo, if you upload one
Unless you choose to share it (see "Course-mates and social features" below), this data is private to your account and not visible to other users. We use it only to run the app and sync it back to you. We do not sell your personal information, and we do not run ads or analytics SDKs in this app.
COURSE-MATES AND SOCIAL FEATURES
Course-mates is opt-in. By default your profile is not discoverable by other students. If you turn on discoverability in your profile:
- Your display name, profile photo, and the course codes you're enrolled in become visible to other students in the same courses, so they can find and connect with you
- Your social media handles (e.g. Instagram, TikTok) stay private and are only shared with a student once you have both accepted a connection request
- You can turn discoverability off, block, or disconnect at any time
Your account also has a friend code, a short shareable code you can give to someone so they can find you directly. Anyone who has your friend code can look up your display name and profile photo, even if you have discoverability turned off. Only share it with people you want to be found by.
Once you and another student are connected, you can share a calendar event with them. The event's details (title, time, location and similar) are then visible to the person you shared it with. You can cancel a share at any time.
Profile photos are stored so that they can be shown to other students in the app. The link to your photo is not guessable, but it is not access-restricted either, so treat your profile photo as information you're comfortable being seen.
If you apply to verify or manage a society page, we collect the role you're applying for, a contact email for that application, and any proof document you upload, so we can confirm you're authorised to manage that society. Only app admins can see this.
Society and event posts (name, description, images, links) that you or a society publish are public and visible to anyone using the app, signed in or not.
LOCATION
If you grant location permission, it is used only on your device, to show your position on the campus map and estimate distance to a building or room. Your location is never uploaded to us or stored anywhere.
NOTIFICATIONS
Reminders are scheduled locally on your device using your device's own notification system. We do not use push notifications and do not collect a push token or any identifier tied to your device for this purpose.
OPENING EXTERNAL SITES
When you open a university service (Moodle, myUNSW, the Library, etc.), you are taken to the real website in an in-app browser. We never see or store your university login credentials. Booking a library room happens on the Library's own booking page, loaded directly in-app; we don't handle or store your booking details.
WEATHER AND LIBRARY DATA
Campus weather and library room availability are fetched from public, unauthenticated third-party APIs. These requests don't include your identity, account, or location; weather is based on a fixed campus location, not your device's location.
ON SIGN-OUT
Your private data is removed from this device (it remains safely in your account) and returns when you sign back in. Your saved emergency contacts are local to this device only and are never uploaded, so they are kept even after you sign out.
DELETING YOUR ACCOUNT
You can request deletion of your account and all associated data at any time from Settings > Delete account, which sends a deletion request to us, or by emailing uniblud@gmail.com. We will delete your account and synced data (events, profile, connections, uploaded photos, and anything else tied to your account) within a reasonable time, except where we're required to keep something by law.
CHILDREN
This app is intended for university students and is not directed at children under 13.
CHANGES TO THIS POLICY
If we make a material change to how we handle your data, we'll ask you to accept the updated policy again before you can keep using the app.
Contact: uniblud@gmail.com