Skip to content
← Back

Privacy Policy

Last updated: 2026-10-16

UniMeet ("UniMeet", "we") is a social platform for university students in Greece. This policy explains what personal data we collect, why, and what you can do about it.

Data controller: UniMeet, operated by Peter Nektarios Schwarz, Patra, Greece. Contact: hello@unimeet.gr.

What we collect

  • Account data: your academic email address (used to verify you are a real student), your university and department, the email's domain, your name, username, a derived birth year and an adult (17+) status flag, your optional bio, optional profile photo, selected interests and messaging preferences.
  • Content you create: meetups you host or join, messages you send in meetup chats and direct messages, notifications, streaks, points and badges.
  • Optional location: if you choose a meeting point on the map for a meetup, its coordinates are stored with that meetup and are visible to anyone who can view the meetup (depending on its privacy setting). Never pin your home address — use a public place.
  • Check-ins: when you check in to a meetup that has a pinned meeting point, your browser shares your device location once so we can verify you are present (within about 150 m of the pin). The coordinates are used only for this distance check and are never stored — we keep only the check-in time, which is visible to the meetup's participants. For meetups without a pin, no location is requested. Declining the browser's location prompt simply means you can't check in and won't earn the XP for that meetup.
  • Push notifications: if you opt in, we store one subscription per device — the browser-generated push endpoint, the encryption keys your browser creates, your interface language and the browser's user-agent — so notifications can reach you outside the app. Turning notifications off in the app or your browser removes the subscription.
  • Technical data: we use Vercel Web Analytics, a cookieless service that counts page views in aggregate only (page URL, referrer, country, browser and operating system). Visitors are identified solely by a hash of the request that resets every day — it cannot identify you, follow you between days, or track you across other sites. No cookies or browser storage are used for analytics. IP addresses are otherwise processed only to rate-limit sign-up requests (abuse protection) and are not used to profile you.

Why we process it (legal bases)

  • To provide the service you signed up for — creating your account, showing meetups at your university, chats, notifications (performance of a contract).
  • To run meetup check-ins — verifying that a meetup actually happened and fairly awarding XP, streaks and badges (performance of a contract). Any location you share at check-in is verified once and immediately discarded, not stored.
  • To keep the community safe — verifying student status via academic email, enforcing the minimum age (17+), rate limiting, moderation, reports and bans (legitimate interests, and compliance with legal obligations where applicable).
  • To email you about important service changes — only where you have asked us to (consent). If we ever email you, every email will include an unsubscribe link, and you can also ask us to stop at any time by contacting us.

Age requirement

UniMeet is only for people aged 17 or older. Your date of birth is checked during onboarding and only a derived birth year and an adult (17+) status flag are kept — the full date is not stored. We do not knowingly collect data from anyone under 17; if we learn that we have, we delete it.

Who we share it with

  • Other users: only what your profile and privacy settings expose (name, username, university, department, photo, bio, interests) plus the meetups you join and the messages you send to them.
  • Service providers: our hosting, database, authentication and storage infrastructure (Supabase, and our website hosting and cookieless analytics provider Vercel). They process data only on our instructions.
  • Push delivery: notifications are delivered through your browser's push service (Google's, Apple's or Mozilla's, depending on your browser), which receives the push endpoint and the encrypted message. The message content is encrypted so that only your browser can read it.
  • Map tiles: when you use the meetup map, your browser loads map imagery from Esri's tile servers (server.arcgisonline.com). Your IP address is thereby visible to Esri under their own terms.
  • Authorities: where we are legally required to, or to protect the rights and safety of our users.

How long we keep it

  • Account and profile data: until you delete your account.
  • Check-in times: kept with your meetup participation history until you delete your account.
  • Account deletion: when you request deletion there is a 7-day grace period (you can cancel it by signing in). Afterwards your auth record and profile are deleted, your meetup chat messages are anonymized, your direct-message conversations are deleted, and hosted upcoming meetups are cancelled.
  • Messages you sent in meetup chats may be kept in anonymized form (sender removed) for the moderation and safety of the remaining conversation.

Your rights

You have the right to access, correct, export, restrict or delete your personal data, and to object to processing based on legitimate interests. You can export your data yourself from your profile page, and delete your account yourself at any time. For anything else, email us.

You also have the right to lodge a complaint with the Hellenic Data Protection Authority (www.dpa.gr) or your local supervisory authority.

Cookies

We only use strictly necessary cookies (sign-in session and language preference). Details are in our Cookie Policy.

Changes

We may update this policy as the service evolves. The latest version is always published on this page with its last-updated date. Last updated: 2026-10-16.