Privacy

Who we are

Unmet is run by Saleh Fayyaz (individual controller, pilot), based in Barcelona, Spain. That person is the data controller.

For any privacy question, or to use any of your rights, write to hello@unmet.app.

What we collect

Only what you type or say, plus what happens at the table:

• Your university email (that's how you log in, and how we know your campus).
• Your answers: name, department, year, the languages you'd lunch in, and the three things you told us — something you're into, something you'd do more of on campus, something a stranger should know about you. If you spoke them, your browser's own dictation (Apple or Google, depending on your device) turned your voice into text: we receive only the text, never any audio.
• If you choose to tell us: your gender, and whether you'd like a women-only table.
• Your language for the app and emails.
• Which weeks you said "I'm in", which table you sat at, its colour, and the one line we wrote about it.
• Your "how was it?" answers: whether you made it, who was there, who you'd lunch with again, and any note.
• Events you post or say you're going to.
• A 6-digit login code that stops working after 10 minutes, the poster tag you scanned (if any), timestamps — and your IP address, kept in memory only (never on disk) to limit abuse, until the app restarts.
• If you report a problem at a table: what you wrote, who it was about, and whether you asked never to be seated with them again.
• Two cookies: one keeps you logged in (60 days), one remembers your language (1 year). No analytics cookies.

No photos, no location, no chat, no tracking pixels, no analytics scripts.

What we do with it

• Seat you at a table of three to five (usually four) with people from other departments and years, in a language you share.
• Write one line about why your table might click, from what each of you wrote.
• Propose a few small events on campus, from what members wrote they'd do more of.
• Email you: your login code, a note when lunches on your campus start, your table the day before, "how was it?" the evening after, and a note if a week didn't form.

We don't advertise, sell data, or build profiles for anyone else.

Who sees what

• Your tablemates see your first name, your department, your year, and the line about your table.
• Everyone on your campus sees the events posted — the text, the first name of who posted it, and the first names of who's going.
• Nobody sees your email, your full answers, your gender, or your feedback except the person running Unmet, who reads full profiles to form and check the tables.
• A report is read only by the person running Unmet. The person it is about is never told, but if you asked never to sit with them again, we keep that so the tables respect it.

Who helps us run it

• Fly.io — hosts the app and the database, in the European Union.
• Resend — delivers the emails.
• Anthropic (Claude) — reads the three things you wrote, tagged by department and year only, to write the table's line and to propose events. Your name and email are never sent. Anthropic is a US company; its API doesn't train on this data and keeps each request only briefly.

Legal basis

Your consent (GDPR Art. 6(1)(a)) — given when you save your answers — for everything above. Legitimate interest (Art. 6(1)(f)) for keeping the service safe from abuse. Nothing here is used to infer anything sensitive about you.

How long we keep it

Until you delete your account. Login codes stop working after 10 minutes and are deleted within the hour. Nothing is kept on a schedule you can't see.

Your rights

• Download my data — in You, one tap gives you everything as a file.
• Delete account — in You. We erase your profile, your answers, your lunches and your feedback right away, and remove your first name and id from your tablemates' records and from your tables' lines.
• Anything else — correct, restrict, object, or complain to the Spanish data authority (AEPD) — write to hello@unmet.app.

Changes

If this page changes in a way that matters, we email you before it applies.