Privacy Policy

The short version

We collect only what Kupeed needs to work and to keep students safe. We do not sell your data. Your birth date and school email are never shown to other students. Student ID photos are deleted after review. Your chats are encrypted, and moderators cannot read them.

1. Who we are

[add the operating organisation’s name] runs Kupeed and is responsible for your personal data under the Nigeria Data Protection Act 2023 (NDPA). Contact: [add the support email address].

2. What we collect

• Account: your email address and a password (stored securely, never in readable form).
• Profile: first name, birth date, gender and who you want to see, course, year, optional hall, photos, prompts and stickers, and what you are looking for.
• Verification: your school email or a photo of your student ID, and the result of the check.
• Using Kupeed: who you said Interested or Pass to, your matches, your messages (stored encrypted), and when you were last active.
• Safety: blocks, hides and reports, and the messages saved with a report.
• Meetup plans: the place and time you plan with a match, whether you accepted, and when you checked in that you were safe.
• Games: your answers and moves in games you play in a chat.
• Couples mode: if you and a match turn it on, the notes, memories (photos and short notes) and planned dates you keep together.
• Campus: your RSVPs to events, and your answers to the question of the day and to campus votes.
• Notifications: if you turn on push notifications, a token from your browser that lets us send them.
• Consents: which documents and options you accepted, which version, when, and the browser details sent with that choice (user agent).

The waitlist (before you have an account)

If you join the Kupeed waitlist on our website, we collect only:

• your email address
• your year level
• your tick that you are 18 or older, with the version of the wording you agreed to
• where you came from, if the link you used carried a source (for example a campaign name)

We use these to confirm your email, to tell you when Kupeed opens, and to count how many people are interested. You confirm by clicking a link in an email, and every email we send has an unsubscribe link. Sign-ups that are not confirmed within 14 days are deleted. If you unsubscribe, we keep your email only so that we never email you by mistake, and we delete it if you ask. Confirmed emails are kept until Kupeed opens, and you can ask us to delete yours at any time.

To stop bots and repeated sign-ups we use Cloudflare's Turnstile check on the form, and we keep a one-way scrambled version (a hash) of your connection address for up to a day. We do not keep the address itself.

3. Why we use it

• To run the service: showing you a few people a day, matching you, and delivering chats.
• To confirm you are a real student aged 18 or over.
• To keep people safe: handling reports, blocks and misuse.
• To keep a record of what you agreed to.
• To send you the notifications you turned on.
• To send news about events and partners, only if you opt in. This is off by default and you can change it at any time in Me.

4. Who sees what

• Other students see only what your profile card shows: your first name, photos, prompts, stickers and course, plus your year or hall only if you choose to show them. They never see your birth date or email.
• Nobody is told who passed on them, hid them or blocked them.
• A trusted friend, if you choose. When you share a meetup plan, we make a private link. Anyone who has the link can open it without signing in and see your first name, your match's first name and whether they are verified, the place, the time, and whether you have checked in. They see nothing else. The link stops working 12 hours after the meetup starts. Only send it to someone you trust.
• Couples mode notes, memories and dates are visible only to you and your partner. If either of you reports the other, they can be saved with the report so our team can review them.
• Events and votes: other students and our team see only totals, never who RSVP'd or how anyone voted. Answers to the question of the day appear only as percentages.
• Games: your hidden answers stay hidden until both of you have finished. The games you play appear in your chat, so they can be reported like any message.
• Your chats are encrypted when we store them and while they travel. They are not end-to-end encrypted: our servers unlock a message to show it to you and the person you are chatting with, and no screen our team uses shows chat text. If you report someone, the most recent messages in that chat (up to 100) are copied into the report and locked, so our safety team can review them. Only the people who handle reports can open them, and each time one of them does, it is recorded. How chats are protected
• Moderators see reports and the evidence saved with them. They cannot browse anyone's chats.
• Verification reviewers see your student ID photo only while reviewing it.

5. Student ID photos and emails

Your ID photo is used only to check you are a student, and is deleted a few days after it has been reviewed. We keep the outcome of the check. Where we only need to compare email addresses, for example to stop a banned person coming back, we store a scrambled (hashed) version instead of the address.

6. Who we share data with

We do not sell your data or share it for advertising. We use service providers to host Kupeed and keep its database and files (Supabase and Vercel), to send emails (Resend), to check our sign-up form for bots (Cloudflare), and to deliver notifications through your browser's push service. They may process data only on our instructions. Some of them may store data on servers outside Nigeria. We may share information with the authorities where the law requires it or to protect someone from serious harm.

7. How long we keep it

We keep your profile and messages while your account is open. When you delete your account (Me, then Settings), we delete your profile, photos, chats, and your Couples mode notes and memories. If Couples mode ends without you deleting your account, you and your partner can still look at your memories for 30 days, and then we delete them. We keep a small number of records where there is a safety or legal reason: the moderation log, reports already made, and the record of your consents.

8. Cookies

Kupeed uses one cookie to keep you signed in. We also keep small things in your browser, such as the links that load your photos faster and whether you have already seen an animation. We do not use advertising or tracking cookies.

9. Your rights

Under the NDPA you can ask to see your data, correct it, delete it, object to how we use it, or take back a consent. You can change most things in the app. For the rest, contact [add the support email address]. You can also complain to the Nigeria Data Protection Commission.

10. Security

Access to personal data is limited by database rules, and photos are only viewable by the people allowed to see them. No system is perfectly secure, so use a strong, unique password.

11. Age

Kupeed is only for people aged 18 and over. If we learn that someone is under 18, we remove their account.

12. Changes

If we change this policy in a way that matters, we will show you what changed and ask you to accept the new version.