Legal & Policies

Unibuz Pty Ltd operates the UNIBUZ platform for verified Australian university students. For privacy questions, access/correction requests, or complaints: privacy@unibuz.com.au. Safety matters: admin+safety@unibuz.com.au.

2.1 From your university, via AAF single sign-on

When you log in through the Australian Access Federation (AAF), we receive and store: your email address, given name, family name, preferred name, profile picture (if provided), and an identifier for your university. We use an AAF subject identifier to match you to your account.

2.2 Information you provide

Profile details you choose to add: degree, campus, faculty, university start year, gender, pronouns, country/state, preferred language, a favourite song, interests, and photos in your gallery. Content you post: posts, comments, reactions, listings, events, and direct messages. Listings and events may include a location that you manually enter or select using the app's location features.

2.3 Age confirmation

When you first sign in, we ask your date of birth to confirm you meet our minimum age. We store only a record that you confirmed you meet the minimum age and the date of that check; we do not retain your full date of birth.

2.4 Information collected automatically

• Device and push information: push notification tokens, device identifier and name, platform, and app/OS version, so we can deliver notifications.
• Precise device location: with your permission, we collect your device's precise location when you use location-based features. We use it to show nearby listings or events, centre location-based views, reverse-geocode a location into a place name, and help you add coordinates to listings or events. Location access is requested only when you use a relevant feature.
• Security and login information: your IP address and an approximate location derived from it (city/country), your device's user agent, and login-pattern signals used to detect suspicious activity and protect accounts.
• Activity logs: a record of certain actions, including IP address and request information, kept as a security and audit record.

2.5 Behavioural signals for recommendations

To suggest people you may want to connect with, we record interactions such as profile views (who viewed whom, and where in the app), shared interests and groups. Profile views can trigger a notification to the person you viewed (for example, "someone looked at your profile").

2.6 What we do NOT collect

• We do not collect precise device location when you deny or withdraw location permission.
• We do not collect a student ID number.
• We do not run product-analytics tracking SDKs.

We use personal information to: create and operate your account; verify your eligibility as a student; show you people, groups, events and listings; provide location-based features and nearby results; deliver messages and notifications; process facilitated payments (via Stripe); moderate public content and keep the Platform safe; detect and prevent fraud and abuse; provide support; and meet legal obligations.

Public content (posts and comments) may be processed by automated and third-party AI systems for: moderation (detecting harmful content), language detection, translation, and sentiment signals used to inform safety and product features. Your private direct messages are not used for AI moderation and are not read by our staff in the ordinary course.

We share personal information with service providers who help us run the Platform, and otherwise as described below. We do not sell your personal information.

5.1 Error tracking and session replay

We use Sentry to diagnose errors. This includes session replay, which records the structural layout of app screens during a sample of sessions (and during sessions where an error occurs) to help us reproduce problems. All text, images and graphics are masked, so the content of your messages, posts and payment details is not captured, only the shape of the screen.

5.2 Translation

When you choose to view a translation of another user's public post or comment, we send that public text to Google's translation service so we can show you a translated version.

Some recipients listed above are located outside Australia (principally the United States). By using the Platform you acknowledge that your information may be disclosed to and stored by these overseas recipients. We take reasonable steps to ensure they handle your information appropriately.

6.1 Disclosure to prevent a serious threat

We may use or disclose your personal information without your consent where we reasonably believe it is necessary to prevent or lessen a serious threat to the life, health or safety of any individual or to public safety, or where required or authorised by law. In such cases we disclose only what is necessary and, where possible, to an appropriate authority or support service.

6.2 What universities can see

We do not give your university access to your individual account, messages, or personal activity. Any information we provide to universities is aggregated and de-identified (for example, overall usage or trend statistics that do not identify you).

We use technical and organisational measures to protect personal information, including access controls, encryption in transit, and monitoring for suspicious activity. No system is perfectly secure.

If a data breach is likely to result in serious harm, we will notify affected individuals and the Office of the Australian Information Commissioner as required by the Notifiable Data Breaches scheme.

9.1 You can access and correct most profile information in the app.

9.2 Deletion. You can request deletion of your account. We provide a self-service deletion path, and you can also contact us. On deletion we remove or de-identify your personal information, except where we must retain certain records by law or for legitimate security/audit purposes.

9.3 To make a request, contact privacy@unibuz.com.au.

The Platform is for students aged 18 and over. We take additional care with the information of users under 18. If you are under 18, we ask that you use the Platform only with the consent of your parent or guardian. We aim to collect the minimum information necessary from younger users and apply conservative default settings.

10.1 Location controls

UNIBUZ requests foreground location permission only when you use a location-based feature. You can deny location permission or withdraw it later in your device settings. If location permission is unavailable, you can continue using the app by entering locations manually where supported.

We may update this policy and will take reasonable steps to notify you of material changes.

If you think we have breached the APPs, contact us first at privacy@unibuz.com.au. If you are not satisfied, you can complain to the Office of the Australian Information Commissioner (oaic.gov.au).