隐私协议

最近更新：2026-11-05

Unimatcha（下称「抹茶」「我们」）是面向大学生的校园生活平台。我们深知匹配与社交数据的敏感性，本协议说明我们收集什么、为什么收集、如何使用与保护，以及你拥有的权利。

1. 我们收集的信息

账号信息：注册用的邮箱（不必是学校邮箱）、昵称、头像。
资料与问卷：建立资料时必填的姓名、性别和生日（生日用来确认你年满 18 岁）。其他资料、匹配偏好和问卷答案由你自愿填写，用来展示你的资料、为你计算匹配。
学生认证（可选）：你提交的学校邮箱或学生卡照片。学生卡照片单独存放、不公开，只有我们的审核人员和你学校学生会的审核人员能看。审核有结果后删除；传了没提交的，7 天后删除；注销账号时一起删除。学校邮箱保留到你注销账号。我们保留认证结果（已认证、哪所学校）和审核时录入的学生卡号，也保留到你注销账号。
内容信息：你在校园墙发布的帖子、评论与互动。选择匿名发布时，其他用户只能看到化名。
聊天消息：你在聊天里发送的文字、图片、语音、视频和文件。我们存储这些内容，让你和对方都能看到。
情侣空间：你们在情侣空间里留下的纪念日、照片和内容。我们存储这些内容，让你们两人都能看到。
问题反馈：你提交的问题描述和截图，用来排查问题；选「付款和退款」时，还有你选的那一笔付款，用来核对这一笔。注销账号后截图一并删除。
Mochii 记住的事：Mochii 只保存你同意它记住的内容——你在它的回复下点了「记住」，或者直接跟它说「记住……」。这些内容只在你和 Mochii 的私聊里用；在评论或聊天里 @ 它时，回复别人也看得到，所以不用。它们不用于匹配。只有你选择把某一条加进 TA 或朋友的匹配偏好，那一句才会写进你的匹配偏好，之后和你自己写的内容一样，在那里修改或删除。清空和 Mochii 的对话，不会清掉它记住的事。你点了「不用」的那句，我们保留 90 天，只用来不再重复问你，这期间会随对话规则一起交给 AI 服务商；清空对话时，Mochii 回复下面其余的记忆提示一并删除。
课程资料与笔记：你在「课程资料」里上传或粘贴的课件、照片、文字（比如你的笔记）和链接。文件存在我们的服务器上，只有你本人能看到；不用于匹配，也不给其他用户看。Mochii 按你的要求整理的笔记和练习题也存进你的课程资料，同样只有你能看到、不用于匹配。
待办：你自己加的，或在 Mochii 提议后点了「加上」的待办（标题、截止时间、课程、备注）。待办存在我们的服务器上，只有你本人能看到，不用于匹配。
学习平台日历：你在待办页连上学习平台（Moodle、Blackboard 或 Canvas）时粘贴的日历订阅链接。链接加密保存，只用来读取你自己日历里的截止日期；我们定时向你的学校平台请求这个链接，读到的截止日期作为待办保存，并标明来自学习平台。链接不交给 AI 服务商，不给别人看，不用于匹配。
订阅的网页：你在「学校动态」里订阅的学生会、院系网页，和你自己加的网页地址。存在我们的服务器上，只用来给你看这些网页的动态和提醒你，不给别人看，不用于匹配。我们每天通过 AI 服务商的网页读取服务读一遍这些公开网页，再由它列出里面的条目；交给它的只有网页地址和网页内容，不带你的账号信息。这家服务商位于中国（见第 3 节），这些内容会在英国以外处理。目录里的学生会、院系网页上新出现的公开新闻和活动，Mochii 会用自己的话写成帖子发到那所学校的校园墙，底下附原文链接（为了找到原文链接，我们的服务器会直接打开这些公开网页）；帖子不显示、也不看是谁订阅的。
课表（可选）：你在「课表」里粘贴学校给你的课表订阅链接后（现在只支持华威 Tabula 的订阅链接），我们加密保存这个链接，以及未来约四周（从前一天算起）的课程时间、课名和教室。只在你连接、点「现在更新」、打开课表页或问 Mochii 课表时向学校读取课表，只用来给你看课表、回答你问 Mochii 的课表问题和发上课提醒；不用于匹配，不进 Mochii 记住的事，也不向其他用户展示。你打开上课提醒后，我们每天读取一次你的课表，按课程开始时间给你发提醒；锁屏是否显示课名和教室跟着「显示消息内容」；关掉上课提醒就不再每天读取。课表里的个人导师面谈这类私人安排，我们会跳过，不保存，也不交给 AI 服务商。30 天没用过课表（没打开课表页、没问过 Mochii 课表，也没开上课提醒），我们删除保存的那份课表（链接留着，下次用时再读）。Mochii 回复里附的课表会随断开连接删除；断开连接或注销账号时，链接和课表一并删除。链接本身不交给 AI 服务商。
从 Moodle 导入（仅 iOS，可选）：你在 iOS App 里登录学校的 Moodle 时，密码只输在学校自己的页面上，我们看不到，也不保存。登录状态只保存在你的手机上，不发给我们。你选中的课件和页面由手机从 Moodle 下载，作为课程资料存进你的账号，和其他课程资料一样只有你本人能看到、不用于匹配；我们另外只记下每一项来自 Moodle 的哪门课、哪一项（编号），用来标出已导入的、不重复导入。我们的服务器不访问你的 Moodle。你在 App 里让 Mochii 看 Moodle 时，它用这台手机上的登录状态查看（只读，不提交、不改动；它替你打开的那几项，Moodle 会和你自己打开一样记作被你查看过），读到的课程名、课程目录和你问到的那几项的文字会交给 AI 服务商生成回答（见第 3 节），我们不另外保存这些原文。Mochii 的回答（可能引用读到的内容），以及它提议导入时卡片上列的课件标题和课程名，会和其他对话一样留在你和 Mochii 的对话记录里，清空对话或注销账号时删除。登录状态仍然只在你的手机上。在「设置 → 隐私」里退出登录，会清掉手机上的登录状态。
使用数据：登录时间、功能使用情况等必要的运行日志，用于改进产品与保障安全。
浏览与反馈记录：你在校园墙看到、点开了哪些帖子，在帖子里停留了多久；配对之后的互动——有没有看对方的卡片和资料、有没有聊天、确认、解除、举报或拉黑（只记有没有发生，不记聊天和举报的内容）；你在 Mochii 回复下面点的「有用 / 没用」和选的原因。这些记录不对外展示、不卖，也不用来给任何人打分。
位置信息：只在你打开「附近」或发帖时，经你在系统中授权后获取。浏览「附近」时，位置只用于当次计算距离，不保存；发帖时，位置截到约 100 米精度后随帖保存，让这条帖子能出现在附近的人的「附近」里。其他用户只能看到大致的距离档位（如 1 公里内、1–3 公里），看不到你的位置或精确距离。不授权也可以正常发帖和使用其他功能。
官网提交：你在官网加入候补名单或提交赞助申请时填写的邮箱、组织与留言。
举报：你举报帖子、评论、用户或 Mochii 的回复时，我们会看到被举报的内容和你写的原因，只用来审核和处理。举报 Mochii 的回复时，只带那一条回复，不带你和 Mochii 的其他对话。
老师目录的更正申请：你在「这是你吗？申请修改或下线」里写的说明、选填的邮箱，以及提交时用的账号，只用来处理这条申请和回复你。注销账号时，申请里的账号和邮箱一并去掉。
支付信息：网页上的付款（包括赞助商为钱包充值）由 Stripe 处理。银行卡号等支付凭据直接提交给 Stripe（使用支付宝或微信支付时则提交给对应的支付机构），我们从不接收或存储。我们保留的订单记录包括金额、币种、时间，以及 Stripe 的订单号与付款编号；你在网页上买方糖时，订单上还记着你确认马上到账、放弃 14 天撤销权的时间，到账后我们把确认邮件（金额、订单号）发到你的注册邮箱。通过 App Store 购买时，付款由 Apple 处理，银行卡号等支付信息只交给 Apple，我们收不到；我们保存 Apple 发来的交易记录：交易号、商品和数量、价格与币种、App Store 所在的国家或地区、购买时间，以及是否退款。

2. 我们如何使用

运行每周匹配算法，并在每周五 20:00（英国时间）公布结果；
向匹配成功的双方展示彼此的公开资料并解锁聊天；
在「附近」里按距离为你排列帖子；
在你和 Mochii 的私聊里，结合它记住的事和你的课程资料回答你；
按你的要求，用你选的课程资料整理笔记、出练习题、分析往年卷的题型，或从一门课的资料里找出截止日期；
你连上学习平台日历后，定时读取里面的截止日期，加进你的待办；
每天读一遍你订阅的公开网页，有新的条目时提醒你；
用校园墙的浏览记录改进帖子推荐的顺序，用配对后的互动改进匹配，用你对 Mochii 回复的评价改进它的回答——只看评价，不拿你和 Mochii 的对话去训练模型；
维护社区安全：处理举报、拦截违规内容、防止刷量与滥用；
发送与你相关的通知（匹配结果、互动提醒等）；
你加入一轮匹配后，把这一轮的结果发到你的注册邮箱。邮件里没有对方的信息。

我们不会出售你的个人信息。匹配理由与算法特征仅在服务器内部使用，不会向任何第三方披露；我们也从不向任何人展示所谓「匹配分数」。

其他用户：仅展示你选择公开的资料；匿名内容仅显示化名。
服务提供方：为运行服务所必需的基础设施（如云服务器、邮件发送），受合同约束仅按我们的指示处理数据。
推送服务：你打开推送通知后，通知经 Apple 推送服务（iPhone App）或你浏览器的推送服务（网页版）送到你的设备；它们会收到设备的推送标识和通知的标题与正文。新消息默认只写「发来一条消息」，待办提醒和每日待办摘要（你打开才有）默认不写待办标题；在「设置 › 通知」里打开「显示消息内容」后，才会带上消息开头和待办标题。学校动态的通知写的是网页名和新条目数（比如「华威学生会活动 2 条」）；你自己加的网页默认只写「你加的网页」，打开「显示消息内容」后才写网页名。上课提醒（你打开才有）默认只写上课时间（比如「10:00 有一节课」），打开「显示消息内容」后才写课名和教室。关掉推送或退出登录后，我们删除这台设备的推送标识。
支付服务商：Stripe（我们是英国公司，对应的是 Stripe Payments UK Limited 及其关联公司）负责付款处理、防范欺诈与退款，并接收完成这些工作所需的信息——支付方式信息、邮箱、账单信息、设备与网络信息，以及我们的订单号与账号编号。其中部分数据由 Stripe 作为独立的数据控制者、按其自己的隐私政策处理（stripe.com/privacy）。使用支付宝或微信支付时，对应的支付机构也会按其自身条款处理这笔付款。通过 App Store 购买时，付款由 Apple 按其自己的条款和隐私政策处理。
AI 服务商：Mochii（应用内的 AI 助手）的回答和消息翻译由第三方 AI 服务商 DeepSeek（Hangzhou DeepSeek Artificial Intelligence Co., Ltd.）生成，语音转文字同样由第三方 AI 服务商生成。只有在你同意之后，你使用这些功能时的相关内容才会交给它们处理——你发给 Mochii 的话、在评论或对话里 @ 它时所在的那段内容（在评论里还包括那条帖子）、你要翻译的消息、你在聊天或社区里选中交给 Mochii 的文字、你选择转成文字的语音（转出的文字会保存）。在对话或评论里 @ Mochii 时，别人没有同意，ta 的消息和评论不会被送出。你和 Mochii 私聊时，它记住的事、你的课程名和资料标题，以及和你问题相关的资料内容节选，也会交给服务商来生成回答。你问 Mochii 待办相关的问题时（比如这周要交什么），相关的待办条目（标题、截止时间、课程名）也会交给服务商。你问 Mochii 学生会、院系最近有什么时，你订阅的网页最近的条目也会交给服务商。你问 Mochii 课表时，相关的那几节课（时间、课名、教室）也会交给服务商；课表链接不会。你在 iOS App 里让 Mochii 看 Moodle 时，它在你手机上读到的课程名、课程目录和你问到的那几项的文字也会交给服务商；Moodle 的登录状态不会。你问 Mochii 找书、找论文或某门课的阅读清单时，你资料里填的学校（或它的图书馆名）也会交给服务商。你问 Mochii 老师、实验室或开放课程时，我们目录里相关的公开条目（学校官方页面上的职业信息，和我们写的研究方向概括、课程介绍）也会交给服务商。你让 Mochii 整理笔记、出练习题或分析考试题型时，所选资料的文字（可能是整份）和你写的补充要求也会交给服务商；让它找截止日期时，那门课资料的文字（可能是整份）也会交给服务商。Mochii 联网查资料时，搜索词会交给 DeepSeek 的搜索服务，网页也由它代为读取，只读搜到的网页和你发来的网址。DeepSeek 位于中国，Mochii 回答（含笔记、练习题、考试题型分析和找截止日期）、联网搜索和消息翻译的内容会在英国以外处理；英国尚未认定中国提供与英国相当的数据保护。我们不用这些内容训练模型，DeepSeek 的政策没有排除用它们改进自己的模型。可以随时在「设置 → 隐私 → AI 功能」里关掉。
法律要求：仅在法律法规要求或保护用户人身安全所必需时披露。

4. 存储与安全

数据以加密方式传输（TLS）并存储在受访问控制保护的服务器中。问卷与匹配数据与账号权限隔离，仅匹配服务可读。我们会在实现目的所需的期限内保留数据，账号注销后按第 5 条删除。Mochii 记住的事和你的课程资料（含上传的文件）会一直保留，直到你删除它们或注销账号。未完成的待办保留到你删除它或注销账号；完成的待办 30 天后删除（从学习平台加进来的，过了截止日期才删）。学习平台日历的订阅链接在你断开或注销账号时删除；从学习平台加进来的截止日期和其他待办一样保留，断开时也可以选择一起删。你删掉的那几条，我们只记一个编号（不含标题和时间），免得同步时再加回来，断开时选择一起删或注销账号时删除。你让 Mochii 整理笔记、出练习题、分析考试题型、找截止日期的记录（用了哪门课的哪些资料、什么时候做的）保留到你注销账号；你写的补充要求、找到的截止日期清单在你清空和 Mochii 的对话时删除，你勾选加进待办的按待办保留。Mochii 查资料、联网的使用记录（用了哪种工具、什么时候、成没成功，不含搜索词和网址）保留到你注销账号，用来计算每天的次数。调用 AI 服务的用量记录（Mochii 回答、翻译、联网搜索、读网页、语音转文字各是哪项功能、用了多少、用时多久、成没成功，不含任何内容）保留 90 天，用来核对成本、看服务是否正常；注销账号时，这些记录不再关联你的账号。你订阅了哪些网页保留到你取消订阅或注销账号；你自己加的网页没人订阅后 30 天删除，注销账号时，你自己加、又没有别人订阅的网页连同读到的条目一起删除；从订阅的网页读到的条目 60 天没再出现在网页上就删除。校园墙的浏览记录（看到、点开、停留多久）保留 180 天，注销账号时删除。你对 Mochii 回复的评价随那条回复一起删除——清空和 Mochii 的对话或注销账号时。配对后的互动记录（以及揭晓时用于匹配计算的数据）最多保留 2 年，注销账号时删除。支付与订单记录按英国会计法规的要求保留（一般为六年），账号注销后也不例外。

5. 你的权利

随时在应用内查看、修改你的资料与匹配偏好；
撤回匿名/公开选择、删除自己发布的帖子；
在「设置 → Mochii 对你的了解」查看、修改、删除 Mochii 记住的事，或一键清空；在「课程资料」里随时删除你的资料；在「待办」里随时修改或删除待办，在待办页底部随时断开学习平台日历；在「学校动态」里随时取消订阅；
申请导出你的数据副本；
注销账号：我们将在 30 天内删除你的个人信息（法律要求保留的除外）。你在校园墙留下的帖子和评论不会随注销删除，只是不再显示你的名字：帖子想删的请在注销前删掉，评论要删的话写信给我们。你发出的聊天消息、情侣空间里的照片和内容不会随注销删除，对方仍然能看到。因违规被下架的内容，我们保留用于处理举报和申诉。

老师和实验室目录：App 里「老师和开放课程」只放学校官方页面上公开的职业信息（姓名、院系、官方主页、实验室；页面写明了才写职称和招不招博士生），研究方向是我们自己写的概括；不放邮箱、电话、办公室、照片，也不搬简介原文。这些信息不是从老师本人那里拿到的，来源是学校的官方页面；用途是帮学生了解研究方向、找导师。我们处理这些信息的法律依据是正当利益（英国 GDPR 第 6(1)(f) 条）。有人问 Mochii 时，相关的条目会交给 AI 服务商来回答（见第 3 节）。官方页面上不再有的条目，下一次核对时下线，下线满 180 天删除；申请下线或被我们下线的条目不再显示，后台只留下这一条，用来处理申请、避免之后又被放出来。目录里的老师可以随时反对这样的处理，或申请修改：在自己那一条下面点「这是你吗？申请修改或下线」，或写信到 contact@unimatcha.ai。申请下线的，我们先下线再核对，同一个人在其他院系的条目一起下线。

6. 未成年人

抹茶仅面向年满 18 周岁的在校大学生。我们不会有意收集未满 18 周岁人士的信息；一经发现，将停用相关账号并删除其信息。

7. 协议更新

本协议如有重大变更，我们会在应用内与官网显著位置提前通知。继续使用即表示同意更新后的协议。

8. 联系我们

任何隐私相关的问题或请求，请联系 contact@unimatcha.ai，我们会在 7 个工作日内回复。另请参阅《用户协议》。

Privacy Policy

Last updated: 2026-11-05

Unimatcha ("we", "us") is a campus-life platform for university students. We know how sensitive matching and social data is. This policy explains what we collect, why, how we use and protect it, and the rights you have.

1. What we collect

Account: the email you sign up with (it doesn’t have to be a university one), nickname and avatar.
Profile & questionnaire: your name, gender and birthday, which you need to set up a profile (your birthday confirms you’re 18 or over). Other profile details, preferences and questionnaire answers are up to you, and we use them to show your profile and compute your matches.
Student verification (optional): the university email or student card photo you submit. The card photo is stored privately, and only our reviewers and reviewers from your own university’s student union can see it. We delete it once the review has a result, after 7 days if you upload it but don’t submit, and when you delete your account. We keep your university email, the result (verified, and which university) and the student number recorded at review until you delete your account.
Content: posts, comments and interactions on the campus wall. When you post anonymously, other users only ever see a pseudonym.
Chat messages: the text, photos, voice messages, videos and files you send in chats. We store them so you and the other person can see them.
Couple space: the anniversaries, photos and entries the two of you add. We store them so both of you can see them.
Problem reports: what you describe and any screenshots you attach, used to fix the problem. When you choose Payments and refunds, also the payment you pick, so we can check it. Screenshots are deleted after you delete your account.
What Mochii remembers: Mochii only keeps what you've agreed it can remember — when you tap Remember under one of its replies, or tell it to remember something. It uses these only in your private chat with Mochii, not when you @ it in a comment or chat, where other people can see the reply. They aren't used for matching. If you choose to add one to your Dating or Friend preferences, that sentence becomes part of those preferences, and you edit or remove it there like anything else you wrote. Clearing your chat with Mochii doesn't clear what it remembers. If you tap No when Mochii asks to remember something, we keep that sentence for 90 days only so it doesn't ask again; during that time it goes to the AI provider with the chat rules. Clearing the chat removes the other memory prompts under Mochii's replies.
Course materials & notes: the slides, photos, text (your notes, for example) and links you upload or paste into Course materials. Files are stored on our servers and only you can see them. They aren't used for matching or shown to anyone else. Notes and practice questions Mochii writes at your request are saved in your Course materials too; only you can see them, and they aren't used for matching.
To-dos: the to-dos you add yourself, or add by tapping Add when Mochii suggests one (title, due date and time, course, note). They're stored on our servers, only you can see them, and they aren't used for matching.
Learning platform calendar: the calendar subscription link you paste when you connect your learning platform (Moodle, Blackboard or Canvas) in To-dos. We store it encrypted and use it only to read the deadlines in your own calendar. We request this link from your university's platform on a schedule, and the deadlines we read are saved as to-dos, marked as coming from your learning platform. The link isn't sent to the AI provider, shown to anyone, or used for matching.
Pages you subscribe to: the SU and department pages you subscribe to in Campus updates, and the addresses of web pages you add yourself. We store them on our servers and use them only to show you what's new on those pages and to notify you. They aren't shown to anyone else or used for matching. Once a day we read these public pages through the AI provider's web reading service, which also lists the items on them; it gets only the page address and the page's content, not your account details. This provider is based in China (see section 3), so this content is processed outside the UK. Mochii also writes up new public news and events from the SU and department pages in our list as posts on that university's campus wall, in its own words and with a link to the original (to find that link, our servers open these public pages directly). The posts don't show or depend on who subscribes.
Timetable (optional): if you paste your university's timetable subscription link into Timetable (only Warwick's Tabula link for now), we store the link and about the next four weeks (from the day before) of class times, module names and rooms, encrypted. We only read your timetable from your university when you connect, tap Update now, open the timetable page or ask Mochii about it, and use it only to show you your timetable, answer your timetable questions to Mochii and send class reminders. It isn't used for matching, kept in what Mochii remembers, or shown to other users. When you turn on class reminders, we read your timetable once a day and send reminders based on when your classes start; whether the lock screen shows module names and rooms follows your message preview setting. Turn class reminders off and the daily read stops. Personal tutor meetings and other private entries are skipped: we don't store them or send them to the AI provider. If you haven't used your timetable for 30 days (no timetable page, no timetable questions to Mochii and class reminders off), we delete the saved timetable (the link stays, and we read it again the next time you use it). Class lists in Mochii's replies are removed when you disconnect, and the link and timetable are deleted when you disconnect or delete your account. The link itself isn't sent to the AI provider.
Importing from Moodle (iOS only, optional): when you sign in to your university's Moodle in the iOS app, you type your password on your university's own page. We never see or store it. The sign-in stays on your phone and isn't sent to us. The files and pages you pick are downloaded from Moodle by your phone and saved to your account as course materials: like the rest of your course materials, only you can see them and they aren't used for matching. We also note which Moodle course and item each one came from (their ID numbers), so we can show what you've already imported and avoid duplicates. Our servers don't access your Moodle. When you ask Mochii about your Moodle in the app, it looks with the sign-in on this phone (read-only: nothing is submitted or changed; Moodle records the items it opens for you as viewed by you, just as if you had opened them). The course names, course contents and text of the items you ask about go to the AI provider so it can answer (see section 3), and we don't keep that text separately. Mochii's replies (which may quote what it read), and the item titles and course name on an import card it suggests, stay in your chat with Mochii like the rest of the conversation until you clear the chat or delete your account. The sign-in still stays on your phone. Signing out in Settings → Privacy clears the sign-in from your phone.
Usage data: sign-in times and feature usage logs needed to run, improve and secure the service.
Browsing and feedback records: which campus wall posts you see and open, and how long you stay on them; what happens after a match — whether you look at their card and profile, chat, confirm, end it, report or block (we record that it happened, not what was said in chats or reports); and the Helpful or Not helpful you tap under Mochii's replies, with any reason you pick. These records aren't shown to anyone, sold, or used to score anyone.
Location: collected only when you open Nearby or make a post, and only after you allow it in your device settings. When you browse Nearby, your location is used to work out distances for that request and is not kept. When you post, it is rounded to roughly 100 m and stored with the post so it can appear in Nearby for people close by. Other users only see a rough distance band (such as under 1 km or 1–3 km), never your location or an exact distance. You can decline and still post and use everything else.
Website submissions: the email, organisation and message you provide when joining the waitlist or applying for sponsorship.
Reports: when you report a post, a comment, a person or a reply from Mochii, we see the reported content and the reason you give, and use them only to review and act on the report. When you report a reply from Mochii, we see only that reply, not the rest of your chat with Mochii.
Faculty directory requests: what you write in “Is this you? Ask to correct or remove it”, the email address you choose to add, and the account you sent it from. We use them only to handle the request and reply to you. When you delete your account, we remove the account and email address from the request.
Payments: payments on the web, including sponsors topping up their wallet, are handled by Stripe. Card numbers and other payment credentials go straight to Stripe (or, for Alipay and WeChat Pay, to that provider) — we never receive or store them. We keep an order record of the amount, currency, time, and the Stripe order and payment references. When you buy sugar cubes on the web, the order also records when you confirmed you wanted them straight away and gave up the 14-day right to cancel, and we email a confirmation (amount and order number) to your sign-up address. When you buy through the App Store, Apple handles the payment and your card details go only to Apple; we never receive them. We keep the transaction record Apple sends us: the transaction ID, product and quantity, price and currency, the App Store country or region, the purchase time, and whether it was refunded.

2. How we use it

To run the weekly matching algorithm and reveal results every Friday at 20:00 UK time;
To show matched users each other's public profiles and unlock chat;
To sort posts by distance in Nearby;
To answer you in your private chat with Mochii, using what it remembers and your course materials;
To write notes and practice questions from the course materials you choose, analyse the past papers you choose, or find the deadlines in a course's materials, when you ask;
If you connect your learning platform calendar, to read its deadlines on a schedule and add them to your to-dos;
To check the public pages you subscribe to once a day and let you know when there's something new;
To improve the order of recommended posts using campus wall browsing records, to improve matching using what happens after matches, and to improve Mochii's answers using your ratings. We look at the ratings only; we don't train models on your chats with Mochii;
To keep the community safe: handling reports, blocking abusive content, preventing spam and fraud;
To send you relevant notifications (match results, interactions);
When you join a matching round, to email the result of that round to your sign-up address. The email says nothing about the other person.

We never sell your personal information. Match reasoning and algorithm features stay on our servers and are never disclosed to third parties — and we never show anyone a "match score".

Other users: only the profile fields you choose to make public; anonymous content shows a pseudonym only.
Service providers: infrastructure required to run the service (cloud hosting, email delivery), bound by contract to process data only on our instructions.
Push services: when you turn on push notifications, they reach your device through Apple's push service (iPhone app) or your browser's push service (web version), which receive your device's push token and the notification's title and text. New messages just say "Sent you a message", and to-do reminders and the morning to-do summary (only if you turn it on) leave out to-do titles, unless you turn on message previews in Settings → Notifications. Campus updates notifications name the pages and how many new items each has (for example, "Warwick SU Events 2"); pages you added yourself just say "Pages you added" unless you turn on message previews. Class reminders (only if you turn them on) just give the start time (for example, "Class at 10:00") unless you turn on message previews, which adds the module name and room. When you turn push off or sign out, we delete that device's push token.
Payment provider: Stripe (as we are a UK company, that is Stripe Payments UK Limited and its affiliates) handles payment processing, fraud prevention and refunds, and receives the information it needs to do so — payment method details, email, billing details, device and network information, and our order and account reference numbers. Stripe also handles some of this data as an independent controller under its own privacy policy (stripe.com/privacy). When you pay with Alipay or WeChat Pay, that provider also processes the payment under its own terms. Purchases through the App Store are processed by Apple under its own terms and privacy policy.
AI provider: Replies from Mochii (the in-app AI assistant) and message translations are generated by DeepSeek (Hangzhou DeepSeek Artificial Intelligence Co., Ltd.), a third-party AI provider; voice-to-text also uses a third-party AI provider. Only after you agree does the related content go to them when you use these features — what you send to Mochii, the comment or chat you @ it in and the post you’re commenting on, messages you translate, text you select in chats or the community and hand to Mochii, and voice messages you choose to turn into text (the text is kept). When you @ Mochii in a chat or comment, other people’s messages and comments are not sent unless they have agreed. In your private chat with Mochii, what it remembers, your course names and material titles, and excerpts from materials that relate to your question also go to the provider so it can answer. When you ask Mochii about your to-dos (what's due this week, for example), the relevant to-dos (title, due date and time, course name) also go to the provider. When you ask Mochii what's on at your SU or department, recent items from the pages you subscribe to also go to the provider. When you ask Mochii about your timetable, the classes involved (times, module names, rooms) also go to the provider; your timetable link doesn't. When you ask Mochii about your Moodle in the iOS app, the course names, course contents and text of the items you ask about that it reads on your phone also go to the provider; your Moodle sign-in doesn't. When you ask Mochii to find a book or paper, or a course's reading list, the university on your profile (or its library's name) also goes to the provider. When you ask Mochii about staff, labs or open courses, the matching entries from our public directory (professional information from official university pages, and our own research summaries and course descriptions) also go to the provider. When you ask Mochii to write notes or practice questions, or to analyse past papers, the text of the materials you pick (possibly in full) and any extra request you write also go to the provider; when you ask it to find deadlines, the text of that course's materials (possibly in full) does too. When Mochii looks something up online, your search terms go to DeepSeek's search service, which also reads web pages for it: only pages from the search results and links you sent. DeepSeek is based in China, so Mochii's replies (including notes, practice questions, past paper analysis and deadline finding), web searches and translations are processed outside the UK; the UK has not recognised China as offering an adequate level of data protection. We don't train models on this content; DeepSeek's policy doesn't rule out using it to improve its own models. You can turn this off anytime in Settings → Privacy → AI features.
Legal: only where required by law or necessary to protect users' safety.

4. Storage & security

Data is encrypted in transit (TLS) and stored on access-controlled servers. Questionnaire and matching data is isolated from account permissions and readable only by the matching service. We keep data only as long as needed; on account deletion see section 5. What Mochii remembers and your course materials (including uploaded files) are kept until you delete them or delete your account. Open to-dos are kept until you delete them or delete your account; completed to-dos are deleted after 30 days (for deadlines added from your learning platform, not before the deadline has passed). Your learning platform calendar link is deleted when you disconnect it or delete your account; deadlines added from it are kept like other to-dos, and you can choose to remove them when you disconnect. For deadlines you delete, we keep only an ID (no title or time) so syncing doesn't add them back, until you remove them when disconnecting or delete your account. Records of the notes, practice questions, past paper analyses and deadline searches you ask Mochii for (which course materials were used, and when) are kept until you delete your account; any extra request you wrote, and the lists of deadlines it found, are deleted when you clear your chat with Mochii. Deadlines you tick and add are kept like other to-dos. Records of Mochii's lookups (which tool it used, when, and whether it worked; not your search terms or web addresses) are kept until you delete your account, to count daily limits. Usage records for AI services (for each Mochii reply, translation, web search, page read or voice-to-text: which feature, how much was used, how long it took and whether it worked; never the content) are kept for 90 days to check costs and service health; when you delete your account, they're no longer linked to it. Your subscriptions are kept until you unsubscribe or delete your account. A page you added yourself is deleted 30 days after no one is subscribed to it; when you delete your account, pages you added that no one else subscribes to are deleted along with the items read from them. Items read from subscribed pages are deleted once they haven't appeared on the page for 60 days. Campus wall browsing records (posts seen, opened, and how long you stayed) are kept for 180 days and deleted when you delete your account. Your ratings of Mochii's replies are deleted along with those replies, when you clear your chat with Mochii or delete your account. Records of what happens after matches (and the data used to compute a match when it's revealed) are kept for up to 2 years and deleted when you delete your account. Payment and order records are kept as long as UK accounting rules require (generally six years), even after an account is deleted.

5. Your rights

View and edit your profile and matching preferences in the app at any time;
Switch anonymity on or off, and delete posts you made;
See, edit or delete what Mochii remembers, or clear it all, in Settings → What Mochii knows about you; delete your course materials anytime in Course materials; edit or delete your to-dos anytime in To-dos, and disconnect your learning platform calendar at the bottom of To-dos; unsubscribe from pages anytime in Campus updates;
Request an export of your data;
Delete your account: we erase your personal data within 30 days (except where law requires retention). Posts and comments you left on the campus wall stay up without your name. Delete any posts you want gone first; to remove comments, email us. Messages you sent, and the photos and entries in a couple space, are not deleted and stay visible to the other person. Content removed for breaking the rules is kept so we can handle reports and appeals.

Faculty and labs directory: Faculty and open courses in the app only shows public professional information from official university pages (name, department, official profile and lab; job title and whether they take PhD students only if a page says so), with our own short summary of research interests. It has no email addresses, phone numbers, offices or photos, and no copied biographies. We don't get this information from the staff themselves: it comes from official university pages, and we use it to help students learn about research areas and find supervisors. Our legal basis is legitimate interests (UK GDPR Article 6(1)(f)). When someone asks Mochii about it, the matching entries go to the AI provider so it can answer (see section 3). An entry that's no longer on the official pages is taken down at our next check and deleted 180 days later. An entry taken down at someone's request, or by us, is no longer shown; we keep the record only to handle the request and to make sure it isn't put back. Staff can object to this at any time, or ask for a correction, with “Is this you? Ask to correct or remove it” under their entry, or by emailing contact@unimatcha.ai. A removal request takes the entry down first, along with that person's entries in other departments; then we check.

6. Minors

Unimatcha is only for university students aged 18 or over. We do not knowingly collect data from anyone under 18; if we find such an account, we close it and delete its data.

7. Changes

If this policy changes materially, we will notify you in the app and on this website in advance. Continued use means you accept the updated policy.

8. Contact

For any privacy question or request, email contact@unimatcha.ai — we reply within 7 working days. See also the Terms of Service.

Also read Terms of Service The rules for using Unimatcha.

contact@unimatcha.ai

unimatcha.ai/privacy.html