UniQuestPrivacy Policy
Last updated 7 November 2026
- We collect what UniQuest needs to work: your university email, your profile, and what you post and send in the app.
- We don't sell your data, show ads or track you across other apps and websites.
- Your data is stored in Ireland. You can delete your account in Settings at any time.
- Questions: support@uniquest.uk.
Who we are
UniQuest ("we", "us") is an app for students at Queen's University Belfast and Ulster University to find teammates and build projects together. UniQuest is independent and isn't run by either university. We are the data controller for the personal data described here. Contact us at support@uniquest.uk.
What we collect
| What | Details |
|---|---|
| Account | Your university email address and password. Passwords are stored only as a secure hash; we can't read them. |
| Profile | Your name, and if you add them: a photo, bio, department, year of study, skills, badges and portfolio links. Your university is worked out from your email. |
| Projects and teams | Projects you create or join, join requests, invitations, your role, and when you committed to a team. |
| Messages and posts | Project chat messages, direct messages, posts and the photos you upload. |
| Quests | How a quest's reward is split, the proof you submit (files and notes), and whether it was approved. |
| Commitment Score and ratings | Your score and the history of what changed it, such as finished quests, leaving a team and teammate ratings. The ratings you give and receive after a quest. |
| Coins | Your coin balance and history, the days you opened the app (for daily coins), and invite codes and referrals. |
| Safety | Reports you make, and posts and people you hide or block. |
| Device | A push notification token, if you allow notifications. Your app settings (theme, notification and privacy choices) stay on your phone. |
| Crash reports | When crash reporting is on, technical details of an error (device model, app version, what went wrong). Crash reports don't include your name, email or messages. |
We don't collect your location, contacts, or advertising identifiers.
How we use it
- To run UniQuest: your account, your profile, matching you with projects that need your skills, chat, and notifications.
- To keep it university-only: we check your email domain when you sign up and on every request.
- To run quests, coins and the Commitment Score, including checking quest proof before rewards are paid.
- To keep people safe: reviewing reports, removing content that breaks the Terms, and stopping abuse such as people creating new accounts to wipe a low score.
- To fix bugs and keep the app working.
Our legal bases (UK GDPR)
- Contract: most of the above is needed to provide the service you signed up for.
- Legitimate interests: safety, preventing abuse and fraud, keeping scores fair, and fixing bugs. We've weighed these against your interests and kept what we hold to a minimum.
- Consent: push notifications. You can turn them off in your phone's settings.
Who can see what
- Other UniQuest users can see your profile (name, photo, university, bio, skills, portfolio links and Commitment Score), your posts, and the projects you've shared.
- Your project teammates can see the project chat and the quest split.
- Ratings are anonymous. Teammates never see who rated them or the stars they got. You see only an anonymous comment, labelled "A teammate on <project>".
- The UniQuest team can see quest proof and reported content, to review them.
Service providers
We use these companies to run UniQuest. They handle data only on our instructions.
| Provider | What for | Where |
|---|---|---|
| Supabase | Database, sign-in, file storage and server code | Ireland (EU) |
| Expo | Delivering push notifications | United States |
| Apple and Google | Push notifications to your phone | United States |
| Sentry | Crash reports, when switched on | United States |
| Our email provider | Sign-up and password emails | EU or United States |
Where data leaves the UK, it's protected by UK adequacy regulations or the UK's International Data Transfer Addendum to standard contractual clauses.
The AI planning prompts in UniQuest are generated by UniQuest itself. We don't send your project to an AI company; you choose whether to paste the prompts into your own AI assistant.
How long we keep it
We keep your data while you have an account. When you delete your account (Settings → Delete Account):
- Your profile, messages, direct messages, posts, photos, ratings, coins and score history are deleted, and you're signed out everywhere.
- A project you own passes to its longest-standing approved member. If it has none, it's deleted.
- Your teammates' chats show that an account was deleted. Quest proof you submitted stays with the project, without your name, so the team keeps its record.
- If your Commitment Score is below 50, we keep a one-way fingerprint of your email address (a hash; it can't be turned back into the address) and that score for 12 months. If you sign up again with the same address, you start from that score. This stops people resetting a low score by making a new account. The same applies if you change your email address.
Copies in our provider's backups are removed when those backups expire.
Your rights
You can ask us to give you a copy of your data, correct it, delete it, restrict or object to how we use it, or send it to you in a portable format. You can edit most of your profile and delete your account in the app. For anything else, email support@uniquest.uk. We'll reply within one month.
If you're unhappy with how we've handled your data, you can complain to the Information Commissioner's Office at ico.org.uk. We'd appreciate the chance to sort it out first.
Security
Data is encrypted in transit. Every table is protected by rules in the database that limit who can read and change each row, and private files (such as quest proof) can only be opened by the people they belong to.
Changes
If we change this policy, we'll update the date at the top. If a change affects how we use your data, we'll tell you in the app first.