UniClub
Your privacy matters to us. This notice explains what data UniClub collects, how we use it and what rights you have. It is not a contract or a consent form: where a processing activity needs your explicit consent (for example keeping your name on a club’s member list after you delete your account), we ask for it separately.
The purpose, legal basis and retention period of each activity are set out in detail in the KVKK Privacy Notice.
UniClub processes the following data for campus events, club memberships and announcements:
| Data type | Details | How long we keep it |
|---|---|---|
| Account identity | Email address, Firebase authentication uid | Until your account is deleted |
| Profile | First name, last name, student number, faculty, department, class year, phone number, profile photo (optional), gender (optional) | Until your account is deleted |
| Clubs & events | Memberships, registrations, tickets, attendance / check-in records | Until your account is deleted |
| Announcements & interaction | Likes, comments, announcement form responses, content reports | Until your account is deleted |
| Event applications | Your free-text answers to the questions a club asks; your first name, last name, student number, faculty and department are stamped onto the application record. The status (pending / approved / rejected) is kept. | Until your account is deleted |
| Event form responses | Answers you submit in the form that opens after your attendance is recorded at an event, and the time you submitted them. | Until your account is deleted |
| In-event game | Your answers, correct-answer count and score in the in-event quiz. | Until your account is deleted |
| Daily games (UniWord, UniBlast) | Your guesses or moves, score and time; in club mode, the club you play for. Rankings show only your first name and last initial (e.g. “Can Ö.”). Turn on “Hide my name in rankings” in Settings to appear as a hidden student. | Until your account is deleted |
| Event rating | The rating and optional comment you leave for an event you attended. | Until your account is deleted |
| Stand sign-up measurement | A technical record kept on the sign-up page opened from a club stand QR, so we can see where the form is abandoned: browser, operating system, browser identification string (user agent), a random session number and which club’s page it was. Your name, email, student number and account id are never written to this record. | 30 days, then deleted automatically |
| Stand emails | The sign-in verification code (encrypted form only) and your email address and name for the welcome / set-password email. | Code at most 1 day, email record at most 30 days |
| Notification settings | Push / reminder preferences, device push token | Until your account is deleted |
| Security logs | IP address, browser / device information, server request logs | At most 30 days |
| Club manager data | Club profile, event and announcement content (manager account) | Until the club account is deleted |
When you register for a club’s event, apply to it, or fill in its event form, that club’s managers (and check-in staff) see your first name, last name, student number, faculty and department, your registration / attendance status and the answers you gave. The club can export this as an Excel file; the exported file lands on the club’s own device and is outside UniClub’s control from that point on. You can ask the club or us to have a record removed from exported files as well; we will pass the request on to the club.
A club only sees records for its own event — never your registrations at other clubs, your account, or your history at other events. Your event rating is visible to the club as a score.
When you join a club, that club’s managers also see your email address, phone number and class year, alongside the first name, last name and student number you provide: these are written onto the membership record so the club can manage its member list and contact you. Your phone number is visible only to clubs you are a member of — never to other students or other clubs.
Other users of the app can see the public part of your profile (name, photo, faculty, department, class year, your clubs and UniPoints), your comments and game rankings. Your student number and phone are not visible to them.
When you sign up at a club stand via QR, you will see a checkbox that is separate from the terms of use, unticked and not required: “Keep my name and the date I joined this club on the club’s member list even if I delete my account.” Your registration completes whether or not you tick it.
The consent is per club: you may give it to one club and not to another. The box is unticked for every club; an earlier choice is not reused. The wording of the box was clarified on 26 September 2026 and consents given before that date were reset; you can give it again on a new form if you wish.
If you delete your account at a club where you gave this consent:
| Data | Consent given | No consent |
|---|---|---|
| First and last name | Stays on the club’s list | Deleted |
| Date you joined the club | Stays | Deleted |
| Account id (uid), email, student number, phone | Deleted | Deleted |
| Faculty, department, club form answers | Deleted | Deleted |
| Event registrations, tickets, form answers, game results, notifications, points | Deleted | Deleted |
Withdrawing your consent: you can withdraw this consent at any time. There is no button for it in the app yet; simply write to club.uniclub@gmail.com or contact the club in question. On request the consent is removed; if your account is already deleted, your name is removed from the club’s list. Clubs can also remove a record from their own list.
Clubs use these lists only for their own membership records. Requests about this consent and your rights go to UniClub.
These services process data outside Türkiye (EU and USA); the full list and locations are in the KVKK Privacy Notice. Each service has its own privacy policy.
On the website:
The UniClub mobile app:
Your feed may occasionally include sponsored cards from local businesses. These cards are labelled “Sponsored” and are published directly by UniClub — no third-party ad network, cookie or advertising identifier is involved.
UniClub is intended for users aged 13 and over. We do not knowingly collect personal data from anyone under 13. If you believe this has happened, contact us at club.uniclub@gmail.com.
All your rights under Article 11 of the KVKK (to learn whether your data is processed, request information, learn the purpose, know the third parties it is transferred to, correction, deletion, having these notified to third parties, objecting to automated analysis and compensation) and how to apply are in the KVKK Privacy Notice. In short:
We act as data controller under Turkey’s Personal Data Protection Law (KVKK, No. 6698) and other applicable privacy legislation. Your personal data is processed for the purposes described above and is never shared with third parties for marketing without your explicit consent. Full notice: KVKK Privacy Notice.
Club announcements are created by users. If you see inappropriate content you can report it with Report on the announcement. Reports are reviewed by an administrator and content may be hidden or removed.
We may update this notice from time to time. For significant changes we update the “Last updated” date, and the current version is always published on this page. If the scope of a processing activity that relies on your explicit consent changes, we ask for your consent again — continuing to use the app is not consent on its own.
Questions: club.uniclub@gmail.com
We resolve KVKK requests free of charge, as soon as possible depending on the request and within 30 days at the latest.