Privacy Policy
Last updated: 22 June 2025
Thank you for choosing StuDex ("the App"), an experience platform for UK university students and business partners, operated by Futurekind Technologies Limited ("Futurekind", "we", "our", or "us"). This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you visit or use StuDex on the web or on our mobile applications for iOS and Android (the "Services"), and it applies exclusively to individuals located in the United Kingdom.
If you do not agree with any part of this Policy, please do not access or use the Services. By creating an account or otherwise using StuDex you acknowledge that you have read and understood this Policy.
1. Who We Are
Futurekind Technologies Limited
Registered in England & Wales under number: 15473344
Registered office: Henleaze House Business Centre, 13 Harbury Road, Henleaze, Bristol, BS9 4PN
Email: support@studexapp.com
Data Protection Officer (DPO): Prankit Gupta / team@studexapp.com
2. Scope
This Policy applies to personal information processed through StuDex, including information provided by:
- Student users holding a verified “.ac.uk” university email address;
- Business partners that publish activities, offers, or discounts; and
- Visitors to our public webpages.
3. Information We Collect
| Category | Details | Source / Opt‑in |
|---|---|---|
| Account Registration Data | University email (”.ac.uk”), hashed password, username, full name | Provided by you |
| Profile Information | Profile photo, phone number, course, year of study, student type, home & term‑time addresses, nationality, ethnicity, dietary preferences, privacy settings | Provided by you (optional fields are clearly marked) |
| Location Data | GPS coordinates, 5‑minute cached location | Via device sensors only with your consent |
| Activity & Content Data | Activities, event details, images, comments, reviews, bookmarks, favourites, circle memberships, points/rewards | Generated by you while using the Services |
| Usage & Analytics | Search queries, feature usage, interaction times, device safe‑area insets, crash logs, browser / app metadata | Collected automatically |
| Business Partner Data | Business name, contact details, logos, promotional links | Provided by partner |
| Sensitive Personal Data | Ethnicity & dietary preferences | Collected only with explicit consent (Article 9(2)(a) UK GDPR) |
We do not collect payment‑card data in‑app.
4. How We Use Your Information
We use your information to:
- Create & manage accounts and verify educational status;
- Provide core features such as activity discovery, location-based search, circles, messaging, and rewards;
- Facilitate social interactions and show content according to your privacy settings;
- Enable business promotions and redeemable discounts;
- Personalise content, recommendations, and notifications;
- Improve and secure our Services, perform analytics, and debug;
- Comply with legal obligations, resolve disputes, and enforce our Terms.
5. Legal Bases for Processing
Under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018 we rely on:
- Contract (Art. 6(1)(b)) – to provide the Services you request;
- Consent (Art. 6(1)(a)) – for location data, push notifications, sensitive data fields, and marketing by email;
- Legitimate interests (Art. 6(1)(f)) – to secure the Services, prevent fraud, and improve product features (balanced against your rights);
- Legal obligation (Art. 6(1)(c)) – to keep records and respond to lawful requests.
You may withdraw consent at any time in the App settings or by contacting us.
6. Sharing Your Information
We never sell your personal data. We share it only:
With other StuDex users according to your privacy settings (e.g. activities, reviews, profile fields you mark as public);
With service providers that enable the platform, bound by contract to process data only on our instructions:
- Supabase (EU Frankfurt region) – database, authentication, file storage, real‑time services;
- Google Maps / Places API – address autocomplete and map tiles;
With verified business partners when you interact with a specific offer or follow a “call‑to‑action” link;
For legal reasons – where required to comply with law, enforce terms, or protect rights, property, or safety.
7. International Data Transfers
Where we transfer personal data outside the United Kingdom, we do so only:
- To countries that have been granted UK adequacy regulations; or
- Under the UK International Data Transfer Agreement (IDTA) or the UK Addendum to the EU Standard Contractual Clauses, together with appropriate technical and organisational safeguards.
Supabase currently stores production data in the EU (Frankfurt); limited support access may occur from other jurisdictions under the safeguards above.
8. Data Retention
| Data Type | Retention Period |
|---|---|
| Account & profile data | Until you delete your account or are inactive for 24 months |
| Activities, comments, reviews | Soft‑deleted on user action; permanently erased after 30 days or anonymised for analytics |
| Location cache | 5 minutes |
| Logs & analytics | 12 months |
| Business‑partner records | 6 years for tax and accounting purposes |
We may retain encrypted backups for up to 30 days. When retention ends we delete or anonymise the data.
9. Security
We use industry‑standard safeguards including:
- TLS 1.2/1.3 encryption in transit;
- AES‑256 encryption at rest;
- Row‑Level Security and least‑privilege access controls;
- Bcrypt‑hashed passwords;
- Regular penetration testing and monitoring.
Despite our efforts, no system is 100 % secure; please notify us immediately at support@studexapp.com if you believe your account has been compromised.
10. Your Rights
Subject to legal limits, you can:
- Access the personal data we hold;
- Rectify inaccurate or incomplete data;
- Erase data (“right to be forgotten”);
- Restrict or object to processing;
- Port data to another service;
- Withdraw consent (affects future processing only);
- Lodge a complaint with the Information Commissioner’s Office (ico.org.uk).
You can exercise your rights by writing to support@studexapp.com.
11. Location Services
Location features are opt‑in. You can disable GPS access at any time in your device settings. If you do, some functionality (e.g. nearby events) may be limited.
12. Cookies & Local Storage
StuDex uses local‑storage cookies and similar technologies in compliance with the Privacy and Electronic Communications Regulations 2003 (PECR) solely to:
- Remember theme preferences;
- Cache form data and geolocation for up to 5 minutes;
- Maintain sign‑in sessions.
We do not use third‑party advertising cookies.
13. Children’s Privacy
StuDex is intended for university students aged 18 years and older. We do not knowingly collect data from anyone under 18. If you believe a minor has used StuDex, please contact us so we can delete the account.
14. Changes to This Policy
We may update this Policy occasionally. Material changes will be notified in‑app or by email to your registered address at least 14 days before they take effect. Continued use after the effective date constitutes acceptance of the revised Policy.
15. Contact Us
For questions about this Policy or our data practices, please email team@studexapp.com or write to:
Data Protection Officer
Futurekind Technologies Limited
Henleaze House Business Centre, 13 Harbury Road, Henleaze, Bristol, BS9 4PN