Privacy policy

Updated 2026-11-04. Data controller / operator: KU Connect. Privacy contact: devilsapft@gmail.com.

What we collect

Your email address, display name, campus preference, confirmation that you are a student aged 18 or older, acceptance of these rules, ride schedules and areas, public pickup descriptions, vehicle description and plate, bookings, trip messages, reports and blocks; Social/Assist posts, categories, meeting places and times, attendee limits, attendance, invitation email addresses, and group discussion messages; username/discovery preferences, private and group messages, uploaded photos and voice recordings, room membership/invitations, polls/votes, intercity route trips/seats, and voice-call participants/status/signaling metadata. We use short-lived IP-derived hashes for abuse prevention and store session-token hashes, sign-in creation times and expiry times. Older sign-ins may have no recorded creation time. We do not collect automatic GPS coordinates, device contacts, payment details or advertising identifiers.

Why and who can see it

We use your email address to verify mailbox access, coordinate rides and handle safety reports. Email verification does not confirm KU enrollment; current-student status is self-declared. Signed-in members can see ride areas, times, notes and the driver’s display name. Exact pickup and vehicle details are available only to the driver and accepted passengers. Drivers see requesting passengers’ names. Trip chat is shared with the driver and accepted passengers, subject to blocking. Public Social and Assist posts are visible to signed-in members. Private posts are visible only to the host and accounts explicitly invited by email. Group attendee names and discussions are available to joined members. Invitation email addresses are not displayed to other attendees. Hosts supply invitation addresses themselves; the app does not access contacts or send invitation emails. Your sign-in email is not displayed on your public profile. Username discovery lets other members find your handle and start private chats. Direct messages and attachments are accessible only to their conversation participants; group content is accessible to joined members. Chats and stored photos/recordings are not end-to-end encrypted: the server operator can access stored content, including for moderation. Incoming calls and chat updates are in-app while the app is open; no push service is included.

The operator and hosting providers process service data. Google and Apple sign-in are currently disabled on this server. If a provider is enabled and you choose it, that provider processes sign-in and provides an identity assertion, verified email and optional name. No provider account password is sent to this server. If email-code sign-in is enabled, Resend processes the destination email and sign-in code for transactional email delivery. The configured TURN provider relays encrypted call packets and processes network addresses/connection metadata. The application does not record voice calls. Voice notes are intentionally recorded and stored when you send them. Photo uploads are resized by the app; server processing strips JPEG EXIF/IPTC/comment metadata. There are no advertising or analytics SDKs in the iPhone app. Calendar sharing exports only the selected plan title and time as a one-hour calendar file; it omits pickup, vehicle and account details and does not automatically sync changes. Opening Apple Maps, email or the iOS share sheet sends the information you choose to that external application under its own policy. Hosting provider: Contabo. Hosting region: European Union. Resend processes transactional sign-in email under its provider terms. Depending on provider processing, data may be transferred outside the UAE. The operator must select providers with appropriate contractual protection and confirm their processing locations. Contact the operator about these transfers.

Retention and deletion

Codes expire after 10 minutes and sessions after 30 days. Call signaling is removed after one hour and call records after one day, at the next hourly cleanup. Activities, academic posts, discussions, invitations, attendance, rides, messages, notifications and reports are removed by daily cleanup after 90 days from the scheduled activity/departure or report/notification creation, as appropriate. Account profile data remains until you delete your account. Profile → Delete account immediately removes the account, sessions, owned activities, groups and posts, direct conversations, invitations sent to that email/account, attendance, discussions, uploaded media, polls/votes, route participation, owned rides, bookings, messages, calls and reports authored by or about the account from the live database. Profile → Export my data downloads a JSON file of your records and attachment metadata; it does not bundle photo or voice-note files. This is a live export, so simultaneous edits or deletions may change what it contains. Deletion cannot erase copies already shared outside the app.

Uploaded media, chat messages, route trips, polls and reports are removed at the next hourly cleanup after their 90-day retention window. Unshared media is removed after one hour. Media disappears from live access when its owning account or conversation is deleted. The operator must expire backups within 30 days and reapply deletions before restoring a backup to service. A separate protected ledger retains hashed deletion identifiers and timestamps to prevent deleted accounts from reappearing during restoration. Contact devilsapft@gmail.com to request access, correction, deletion or details of processing and transfers.

Security and choices

Public deployment uses HTTPS. Tokens are stored in the iPhone Keychain; server copies are hashed. Profile → Account sign-ins lets you review sign-ins and revoke one or all other sessions. Removing a session ends active calls on the account and invalidates pending account links started from that session. You can also sign out, change your display name, block another user or delete your account. There is no background location tracking. This app is for adults and is not intended for children.

Independent community app · KU Connect