Privacy policy

Welcome to Unera, operated by Unera App ("we", "our", or "us"). Unera is a mobile social platform for Erasmus and international students. It helps verified university users discover students nearby, create profiles, send interest requests, chat, join groups, create or RSVP to events, and report unsafe behavior.

Unera is strictly for users who are at least 18 years old. Minors are not permitted to create or use an account. Accounts identified as underage may be removed.

1. Data controller

Unera App
Website: https://unera.app
Privacy contact: info@unera.app
Support contact: support@unera.app

2. Data we collect

• Account data: university email address, authentication status, verification codes or login metadata handled through our authentication provider.
• Profile data: name, surname, age, gender, nationality, spoken languages, biography, interests, home university, host university, host city and country, profile photos, username, and profile completion data.
• Location data: approximate or precise location when you allow location access, used to show nearby students, events, city-based content, and distances.
• Social data: interest requests, matches, blocked users, chats, group memberships, message metadata, events, RSVPs, board/activity posts, and gamification information.
• Safety data: reports, report descriptions, moderation actions, audit records, blocked-user relationships, and related conversation or profile context needed to review reports.
• Device and technical data: device type, operating system, app version, IP address, push notification tokens, notification delivery/open events, error logs, and basic diagnostics.
• Support data: messages you send to support or bug-reporting channels, which may include device information and your account identifier if you choose to include it.

We do not intentionally collect special categories of data such as health, religion, political opinions, or biometric identifiers. Please do not post sensitive personal information in your profile, chats, events, or reports unless necessary for a support or safety issue.

3. Why we process data

• To create, verify, and secure accounts using university email registration.
• To provide profiles, discovery, matching, chat, groups, events, RSVPs, notifications, blocking, and reports.
• To show nearby users and events when location permission is granted.
• To send service messages such as verification emails, university approval/rejection notices, push notifications, and safety/admin notices.
• To moderate content, investigate reports, prevent abuse, enforce our Terms and Community Guidelines, and protect users.
• To maintain app reliability through diagnostics, error logging, security monitoring, and product analytics.

We do not sell personal data.

4. Legal bases under GDPR

• Contract: to provide the Unera service you request, including accounts, profiles, chats, events, and account deletion.
• Consent: for optional permissions such as location, camera/photo access, push notifications where required, and optional Google Analytics.
• Legitimate interests: to keep the app secure, prevent abuse, improve reliability, moderate reports.
• Legal obligation: where we must retain or share information to comply with applicable law or lawful authority requests.

5. Profile and content visibility

• Your profile is visible to other Unera users where the app shows student discovery, matches, event participation, groups, or chat context.
• Profile photos, name, age, gender, nationality, languages, universities, host city, bio, and interests may be visible to other users depending on the screen and feature.
• Events, activity posts, RSVPs, and group membership may be visible to users who can access that event, activity, or group.
• Direct messages are intended for the chat participants. Group messages are visible to members of the group.
• Reported profiles, messages, events, or groups may be reviewed by Unera moderators or admins to investigate safety issues and enforce rules.
• Blocking a user limits interaction and visibility between you and that user, but it may not remove historical content from shared chats, groups, or moderation records.

6. Location, photos, and notifications

Location access is used to show nearby students, distances, local events, and city-based recommendations. You can deny or revoke location permission in your device settings, but nearby features may be less accurate.

Camera and photo library access are used to let you add or update profile photos. Push notification tokens are used to send notifications about messages, connection requests, events, groups, retention prompts, and admin notices. You can manage notification permissions in the app or your device settings.

7. Moderation and safety

Unera includes reporting, blocking, and moderation tools. When a report is submitted, we may review the reported account, profile information, event or group details, relevant messages, report text, and prior moderation history. We may restrict, suspend, deactivate, or delete accounts that violate our rules or create safety risks.

Reports involving minors, child sexual abuse or exploitation, grooming, threats, or serious harm are treated with priority and may be escalated to appropriate authorities where required or appropriate under applicable law.

8. Third-party services and processors

We use trusted service providers to operate Unera. They process data only for the purposes needed to provide their services to us.

• Supabase: authentication, database, realtime chat infrastructure, storage, and backend functions.
• Expo, Firebase/FCM, and APNs: mobile push notification delivery and app infrastructure.
• Resend: transactional emails such as university approval or rejection notices.
• Sentry: production error monitoring and diagnostics.
• Make.com: automation workflows, including event discovery or operational workflows where enabled.
• OpenAI: limited event-related processing where enabled, such as helping process external event information. We do not use OpenAI to read private chats for general profiling.

9. Optional Analytics and operational diagnostics

Google Analytics 4 on this website loads only after you select Accept Analytics. It measures page visits, site interactions, store clicks and explicit language changes. The page address sent to Analytics excludes query strings and fragments; we do not send account identifiers or user content.

Your choice is stored locally in your browser. After acceptance Google uses first-party Analytics cookies (_ga and _ga_*) with a configured lifetime of up to 180 days. You may refuse without losing access to the website. Use the link below to change or withdraw your choice. Withdrawal blocks subsequent events, removes these cookies where accessible and reloads the page to unload Google's listeners; it does not delete data already received by Google.

In native Android and iOS apps, Google Firebase Analytics is disabled by default. The initial prompt and Settings > Optional analytics control an independent consent choice stored securely on the device. We measure approved screens and successful actions, with app language as the only app-defined user property. We do not send message/post/report text, profile details, account or content IDs, GPS coordinates or tokens. Analytics may process technical device information and a generated app-instance identifier. Advertising consent and advertising identifier collection are disabled.

Revoking app consent disables collection, clears the app-defined user ID and properties and resets Analytics data on the device. Logout also clears Analytics identity and resets local Analytics data. Website consent and app consent are separate. Existing operational notification tracking and error diagnostics remain distinct from optional Analytics.

Google processes this information to provide Analytics. See Google's privacy policy. For questions or requests concerning previously collected data, contact info@unera.app.

10. Storage and security

We use HTTPS in transit, account authentication, provider access controls, and operational safeguards designed to protect user data. No mobile or online service can guarantee perfect security. If we become aware of a security incident affecting your data, we will take appropriate steps under applicable law.

11. Retention and deletion

We keep account and profile data while your account is active. Chat, event, group, moderation, notification, and technical records are kept for as long as needed to provide the service, resolve disputes, enforce rules, maintain security, and comply with legal obligations.

If you delete your account, we remove or anonymize personal account data where possible. Some content may remain without identifying you, such as messages shown as "Deleted User", group or event history needed by other users, safety records, or technical logs. Active systems are normally updated immediately or within 30 days; backup copies may take up to 90 days to expire.

12. Your rights

If you are in the EU or EEA, you may have rights to access, correct, delete, restrict, object to processing, and request portability of your personal data. You may also have the right to lodge a complaint with your local data protection authority.

California residents may have rights to know, access, delete, correct, and opt out of sale or sharing. Unera does not sell personal data.

To exercise privacy rights, contact info@unera.app. We aim to respond within 30 days.

13. International transfers

Some providers may process data outside your country or outside the European Economic Area. Where required, we rely on appropriate safeguards such as contractual protections, Standard Contractual Clauses, or other lawful transfer mechanisms.

14. Changes to this policy

We may update this policy as Unera changes. We will update the "Last updated" date and, for material changes, may provide additional notice in the app or by email.