Privacy Policy

Last updated: October 24, 2026

1. Data controller

The controller of your personal data is Muhammed Botan Öztürk, 02-091 Warszawa, Polska, tel. +48 797 291 900. Your data is processed under the EU General Data Protection Regulation (GDPR / RODO). Contact: botanozturk89@hotmail.com

2. Data we collect

• Account data: first and last name, username, email, phone number, age, gender, school
• Profile data: profile photo, bio
• What you share: posts, photos, comments, messages and Flame photos
• Interactions: likes, saved posts, follows, blocks and reports
• Account verification (optional): if you choose to verify your account, a selfie taken at that moment with the front camera
• Location: only when you use the Flame map and give permission; the location saved with a Flame is shifted by 150–400 m
• Device and technical data: a random device identifier, device model, operating system, app version, language preference, push notification token and when you were last active in the App

• Optional profile details: Instagram and TikTok usernames
• Profile visits: visitor account identifier and latest visit time; subscription and ghost-mode preferences
• Purchases: account identifier, product and transaction identifiers, store, subscription status, renewal and expiry information, Boost purchases and credit balance
• Usage and support: daily activity and activity hours, daily feature quotas, support messages and moderation records
• Shared content also includes videos and Spotted posts and comments, including their author records

3. Why we use your data

• To create your account and provide the service (performance of contract)
• To show your profile and posts to other users
• To keep the App safe: review reports, suspend accounts and block devices that break the rules (legitimate interest)
• To verify your account and show the verification badge, only if you request it (your consent). Our team compares the selfie with your profile photo by eye; we do not use automated face recognition
• To send notifications and announcements (with your permission; you can turn them off in Settings)
• To translate posts and comments into your language when you tap “See translation”
• To show sponsored posts in the feed; we only count views and taps in total, we do not track you across other apps or websites
• To meet legal obligations

We do not sell your data.

• To provide Premium, Platinum and Boost features, verify purchases, restore entitlements and prevent duplicate credits (performance of contract)
• To display profile visitor information and apply your ghost-mode preference (performance of contract)
• To respond to support requests and measure activity to operate and improve the service (performance of contract and legitimate interests)

4. What other users see

Your name, username, profile photo, school, bio and posts can be seen by other users. Your email address and phone number are not shown to other users. If your account is verified, others see a badge next to your name; your verification selfie is never shown to other users.

If you add Instagram or TikTok usernames, they are stored in your profile and may be accessible to signed-in users; the standard App interface displays them to eligible members. Visiting another profile normally records your account identifier and latest visit time. The profile owner can access these records; the standard App interface shows visitor identities to eligible members. When active Premium ghost mode is enabled, the App does not record new profile visits. This does not remove earlier visits. Anonymous Spotted posts and comments do not publicly display your profile identity, but we retain author records for moderation, safety and account deletion; anonymity does not apply to the service operator. Messages are available to chat participants and are stored to provide the service; they are not end-to-end encrypted. Authorized staff may access data as needed for support and moderation.

5. Service providers

We use Google Firebase and Google Cloud (Google Ireland Ltd. / Google LLC) to store data, run the App and translate text (Google Cloud Translation), and Expo (650 Industries, Inc.) to deliver push notifications. Data may be transferred outside the EU; such transfers are protected by legal safeguards such as the EU Standard Contractual Clauses.

We use RevenueCat to manage subscriptions and Boost purchases. This involves processing purchase and subscription information associated with your account. Payments are handled by Apple App Store or Google Play; we do not receive or store your full payment card details. RevenueCat privacy information: https://www.revenuecat.com/privacy .

6. Retention

We retain account and content data while your account is active and for as long as necessary for the purposes described here. Account deletion is available in Settings → Password and security → Delete account; a recent sign-in may be required. Deletion starts removal of your profile, shared content, verification selfies and associated records; server cleanup runs asynchronously. Some purchase, support, activity, security and moderation records, including account-deletion records, may remain where necessary to handle requests or disputes, prevent abuse or meet legal obligations. Such records can contain account or transaction identifiers and information supplied in a support request. Contact us for a request concerning retained records, including records held by service providers. Deleting your account does not cancel an App Store or Google Play subscription; manage cancellation in the relevant store.

7. Your rights

Under the GDPR you have the right to access, correct, delete, restrict processing of and port your data, and to object to processing. You can change most of your information in Edit profile and delete your account in Settings. For other requests, write to us. You also have the right to lodge a complaint with the Polish data protection authority (UODO).

Where processing is based on consent, you can withdraw it without affecting the lawfulness of earlier processing. You can change location, camera, photo-library and notification permissions in your device settings. Location, account verification and social handles are optional; refusing these limits the corresponding features. To request deletion of a verification selfie or assistance with other privacy choices, contact us.

8. Security

We transmit your data over encrypted connections and store it in access-restricted systems. No system is completely secure, so never share your password with anyone.

9. Age limit

UniPolska is not intended for anyone under 18. If we learn that an account belongs to someone under 18, we will delete the account and its data.

10. Changes and contact

We may update this policy and will announce significant changes in the App. For privacy questions: botanozturk89@hotmail.com