Privacy policy

Information we collect

We use your university email address to send a sign-in link, establish your campus, and manage your account. You can add a name, username, profile photo, banner image, course, year of study, bio, interests, and social handle to your profile.

When you use campus features, we store content and activity you choose to create: posts, comments, Buzz, community membership, event plans and attendance, flatmate preferences, opportunity listings, messages, and Prom profile details and invitations. Prom asks you to confirm that you are at least 18; it does not collect your birth date. Earlier Vibe likes and preferences are retained privately but are no longer used for new connections. If you connect Spotify, we store the connection token, your top artists, and a short-lived snapshot of the track currently playing. We use shared artists to order Prom suggestions.

If you connect a Blackboard calendar, we store an encrypted copy of its private subscription link and imported event titles and dates. If you use the optional MyCamu Chrome pilot and confirm an import, we store the class titles and times you selected. The extension keeps a pending capture in Chrome storage until you import or discard it, and rejects captures older than 24 hours when it next runs. It does not copy your MyCamu password or session token. If you opt into Tokenmaxxing, we store a device connection and daily usage summaries: date, coding tool, total and input/output/cache token counts, estimated cost, model names, and per-model token totals. The CLI does not upload prompts, code, file paths, or conversations. Read how token sync works. Our hosting and security providers may also process basic technical data such as IP address, browser, request time, and error logs.

How we use information

We use this information to verify access, run your campus community, show the features you choose to use, deliver sign-in emails, keep the service secure, respond to requests, and fix problems. We do not sell student information or use it for third-party advertising.

Who can see it

Your public profile can be found through search engines and direct links. Anyone can see your display name, username, profile photo, banner image, university, course, year of study, bio, interests, social handle, posts, and visible campus Buzz, including people who are not signed in. Anonymous Buzz authors remain hidden on public profiles. Messaging, liking, replying, and leaving Buzz require an eligible campus account. Other campus content remains available only to signed-in students at your university. Flatmate details are visible to signed-in students from the same campus while your listing is active. Direct messages are visible to their participants. Prom profiles are shown only to other eligible adults who have joined Prom. If you send or receive a prom invitation, the other person can see your name. Only the two participants can see their invitation and response. Connected Spotify music appears only to signed-in students at your campus while sharing is on. A current song disappears when the snapshot expires; you can pause sharing or disconnect, which removes the stored music summary and connection token. Your Blackboard calendar, subscription link, and imported MyCamu classes are private to your account. Tokenmaxxing rankings show your name and token totals to students at your campus only if you connect a device. We may access data when needed to run, protect, or support the service.

Service providers and location

Vercel hosts the website; Supabase provides authentication, database, storage, and app functions. Our email provider handles sign-in emails. These providers may process data outside Australia. The Supabase project is hosted in the Asia Pacific region. Their systems and locations may change as the service develops.

Storage, controls, and deletion

We use account authentication and database access controls to limit who can read information. You can edit your profile, pause a flatmate listing, leave groups or events, disconnect a Blackboard calendar and delete its imported dates, remove imported MyCamu classes, and disconnect a Tokenmaxxing device and its uploaded totals in the app. You can edit or delete messages you sent. Deleting a chat removes its history from your inbox, while the other participant keeps their copy. If you delete your account, your profile is removed and the other participant keeps their conversation copy under “Deleted user.” Messages previously sent with an expiry time are hidden from both participants when that time is reached and removed from the active database by a scheduled cleanup. Recipients may have seen, copied, or captured those messages before they expire; backups may retain them temporarily. Other information may remain while your account is active or as needed for security, legal obligations, or resolving disputes. To request access, correction, or account deletion, email theunidotsocial@gmail.com. We will review the request and explain what can be removed.

Community channels and voice

Only members of a community can read its general chat and announcements. Community organisers can send announcements. Chat messages, sender names, and timestamps remain stored until removed or the community is deleted. When you join a voice room, your browser requests microphone access and connects directly to other members in that room. Members of that community can see who is currently in voice, including a call indicator on your in-app profile. We do not record or store the audio. To connect the call, we briefly store your room presence and technical connection signals; stale presence is removed after about 45 seconds and signals after about three minutes. Other voice participants may be able to see network connection information, including an IP address, through the peer-to-peer connection. You can mute or leave at any time, and leaving stops microphone capture for that room.

Cookies and changes

Authentication uses browser storage to keep you signed in. We do not currently use advertising trackers. We will update this page when our data practices change and show the new date here. Questions or privacy complaints can be sent to theunidotsocial@gmail.com.