Privacy Policy
Last updated: 29 September 2026
This policy is written to be understood, not to be long. If anything is unclear, write to privacy@uniflat.it and we'll answer.
1. Who handles your data
The data controller is Morgan Gatti, a natural person, reachable at privacy@uniflat.it.
Uniflat has no Data Protection Officer because the conditions of Art. 37 GDPR do not apply. For any question about your data, write to the address above.
2. What we collect
When you sign up
Email address · date of birth · first name (not your surname) · gender · the date and version of the Terms and of this policy you accepted, together with the declarations you ticked (18 or over, approved clauses, photos).
If you tap a city that isn't open yet
Your email and that city, so we can tell you when we open there. This is written above the cities before you tap them; you can ask to be removed at any time.
If you sign in with Apple or Google we only receive the identifier and the email — nothing else from your account.
If you join the waiting list on uniflat.it
Email address · first name · the city where you'll study · how you heard about us · the site's language · when you gave consent. If you choose to get ahead on your profile from the site, also your answers about living habits and how much each one matters to you: they wait there until you sign in to the app with the same email, and nobody sees them before that.
When you fill in your profile
Photos · city and preferred areas · university, course and year (we derive your field of study from the course) · whether you're on Erasmus · languages you speak · budget and when you need a place · how many housemates you'd like · your answers about living habits and how much each one matters to you · 5 to 10 interests · your answers to the prompts ("At home we'll always listen to…") · your bio, if you write one.
If you list a home
Photos of the flat · area and, if you want, the street · rent and bills · free spots and availability · the household's habits · the description.
When you use the app
Who you chose and who you skipped · your matches · the messages you write · reports and blocks · when you last opened the app.
Automatically
A device identifier for notifications · device type and app version · language · usage events in statistical form (see section 6).
What we never collect
Your surname · your GPS location · your phone number · payment details (Uniflat is free) · data about your health, political or religious views, or sexual orientation.
About photos. Uniflat only sees the photos you choose. The first time you add a photo, iOS asks whether to give access to your whole library or only to some photos, and you can change it any time in your phone's Settings. Before being sent, images are resized and re-compressed on your phone. This strips the hidden data that smartphone photos carry, including the GPS coordinates of where the picture was taken. Those coordinates never reach our servers.
3. Why we use it
| What we do | Why we're allowed to |
|---|---|
| Create your account and sign you in | To provide the service you asked for (contract, Art. 6.1.b) |
| Show your profile to other students in your city | Contract |
| Calculate the compatibility percentage and order your feed | Contract — it is the service itself |
| Open the chat when two people choose each other | Contract |
| Send service emails (sign-in code, welcome, reactivation) | Contract |
| Let you know when Uniflat opens in your city, if you left your address on the site's waiting list | Your consent, given by ticking the box on the form and withdrawn with the link at the bottom of every email (Art. 6.1.a) |
| Measure how the site is used | Your consent, given with "Accept" on the cookie banner (see section 6) |
| Send push notifications | Your consent, given to the operating system and revocable at any time |
| Handle reports, blocks and abuse | Our legitimate interest in keeping the platform safe, and legal obligations |
| Understand how the app is used, in statistical form | Our legitimate interest in improving it (see section 6) |
| Defend ourselves against claims | Our legitimate interest |
4. The compatibility percentage
Uniflat automatically calculates a percentage between you and every other profile, and uses it to decide the order in which you see people.
How it works. We compare your answers about living habits with other people's, weighted by the importance you set yourself; then we add shared interests, how far apart the areas you are looking in are, budget fit, timing, household size and age difference.
What it does and doesn't do. The score only changes the order in which profiles are shown to you. It excludes nobody, it doesn't stop you contacting anyone, and it produces no legal or similarly significant effect. It is not automated decision-making under Art. 22 GDPR.
It's explained. Every percentage can be opened to see what it's made of. If something is wrong, correct it in your profile and the score recalculates.
5. Chat messages
The messages you write are visible only to you and the person you're talking to.
Ticks. The person you're talking to sees when their message reached your phone (two grey ticks) and when you read it (two yellow ticks), and you see the same for yours. We record only those two moments, nothing else.
First-message suggestions are put together on your phone, from the other person's profile details you can already see. They aren't sent to us and aren't stored: they only become a message if you choose to send it.
They are not end-to-end encrypted, and we want to say so plainly: whoever administers the system is technically able to read them. This is a deliberate choice, not an oversight. A chat that even we couldn't read would make it impossible to verify a harassment report — and on a platform where people who don't know each other end up meeting in person, being able to verify matters more.
In practice: nobody reads conversations out of curiosity or for statistics. We read them only when someone reports a specific message, or when a public authority requires it.
One automated check, and no one reads it. When you send a message, the system automatically checks whether it contains a phone number or the name of another messaging service, and stores only a yes/no value on the conversation. We use it to know how many people get as far as exchanging contacts — the only way we have of knowing whether Uniflat actually works. The text is not copied, is not retained for this purpose, and never leaves the database. If you'd rather this didn't happen, write to privacy@uniflat.it and we'll turn it off for your account.
6. Usage statistics
We use PostHog (servers in the European Union) to understand where people get stuck: which sign-up step they abandon, how many reach a match, which screens don't work.
Events contain no personal data. No names, no emails, no photos, no message text. Only an identifier, categories and numbers.
There is no advertising and no cross-app tracking. We use no advertising identifiers, share nothing with advertisers, and don't profile you to sell you anything.
You can turn statistics off at any time in Settings → Privacy. The app keeps working exactly the same.
On uniflat.it statistics start only if you tap "Accept" on the cookie banner. If you tap "Decline", or don't choose, nothing starts and the site works exactly the same, sign-up included. You can change your mind at any time from "Cookie preferences" at the bottom of every page. Details are in the cookie notice, at uniflat.it/en/cookies.
7. Who else touches your data
Nobody receives your data to use for their own purposes. These providers process it only to run the service for us, under a contract that binds them:
| Provider | What it does | Where |
|---|---|---|
| Supabase | Database, authentication, photo storage | Data in Germany (Frankfurt). Company based in Singapore |
| Expo | Delivering push notifications | United States |
| Apple / Google | Final delivery of the notification to your device | United States |
| Resend | Sending service emails | United States |
| PostHog | Usage statistics | Data in the European Union. US company, which also processes it in the United States |
| Cloudflare | Protecting sign-up and the site's form from automated accounts | Global network |
| GitHub | Hosts the uniflat.it site, which is made of static pages: it only receives the technical data of each visit, such as the IP address | United States |
We don't sell your data. We don't pass it to third parties for commercial purposes. Ever.
8. Where your data lives
The database and the photos are in Germany, inside the European Union.
The company operating the service, Supabase Pte. Ltd, is based in Singapore: although the data stays in Europe, the contractual relationship involves a transfer to a third country, covered by the Standard Contractual Clauses approved by the European Commission.
PostHog likewise stores data in the European Union but is a US company that also processes it in the United States, under the EU-US Data Privacy Framework and the Standard Contractual Clauses.
Other providers (Expo, Apple, Google, Resend) are based in the United States and receive only what they need to do their job: for notifications, the device identifier and the alert text; for emails, the address and the message. These transfers rely on the Standard Contractual Clauses approved by the European Commission, or on the applicable adequacy decision.
9. How long we keep it
| Data | How long |
|---|---|
| Profile, photos, preferences | As long as you have an account. If you don't sign in for 24 months, we email you a warning and delete everything 30 days later |
| Messages | As long as the match and both accounts exist |
| A city's waiting list | Until the city opens plus 12 months, until you ask to be removed, or until you delete your account |
| The site's waiting list | Until your city opens plus 12 months, or until you unsubscribe with the link at the bottom of the emails |
| Acceptance of the Terms | As long as you have an account: it is deleted with it |
| Reports and blocks | 24 months after closure, so we can defend ourselves if needed |
| Action log | 12 months |
| Usage statistics, app and site | 30 days |
| Backups | Maximum 30 days |
When you delete your account, we delete immediately and for real: profile, photos, messages, choices, notification tokens, credentials. The only exceptions are backups, which are overwritten within 30 days, and any reports made about you, which we keep in minimal form for the period above.
10. Your rights
At any time you can:
- know what data we hold about you and get a copy in a readable format
- correct what's wrong — most of it you can edit yourself in your profile
- delete everything, from Settings → Delete account, without asking anyone's permission
- restrict or object to processing based on our legitimate interest
- take your data to another service
- withdraw consent, without affecting what was done before
To exercise them, write to privacy@uniflat.it. We reply within 30 days, free of charge.
If you think something is wrong, you can contact the Italian Data Protection Authority (Garante per la protezione dei dati personali, www.garanteprivacy.it) or the authority of the country where you live.
11. How we protect it
- The rules about who can see what are written inside the database, not in the app: even by modifying the application, nobody can read another person's data
- Photos live in private storage, reachable only through links that expire after one hour
- Email, date of birth and notification identifier are in a separate table accessible only to you
- Data encrypted in transit and at rest
- No passwords: you sign in with a temporary code or with Apple and Google. If passwords don't exist, they can't be stolen
- Sign-up protected by an anti-automation check, invisible in almost every case
Should a data breach occur, we notify the Authority within 72 hours and, where the risk to you is high, we tell you directly.
12. Minors
Uniflat is for people aged 18 and over. We do not knowingly collect data from minors. If we discover an account belongs to a minor, we delete it immediately. If you're a parent and believe your child has signed up, write to privacy@uniflat.it: we act straight away.
13. If we change something
If we change this policy substantially, we'll tell you inside the app and by email at least 15 days beforehand. The date at the top always shows the current version.
Data controller: Morgan Gatti
Privacy: privacy@uniflat.it · Support: supporto@uniflat.it
Published at: https://uniflat.it/privacy