UniCraic Limited ("UniCraic", "we", "us") is the data controller for personal data collected through the UniCraic app. We are a company incorporated in Ireland (company number 820740) with registered offices at Galway Technology Centre, Mervue Business Park, Galway H91 HE94. We process personal data in accordance with the EU General Data Protection Regulation (GDPR) and the Irish Data Protection Acts 1988–2018. Questions should be directed to hello@unicraic.ie.
We collect data you provide directly: your full name, student email address, password (stored as a secure hash), and the college you select. We collect data automatically: deals and events you view or save, features you interact with, device type and OS version, and — if you enable them — a push notification token used only to deliver alerts you've opted into. We do not collect your location — the Map shows all deals across Galway and does not use your device's GPS.
We use your data to: create and manage your account; personalise deal and event recommendations for your college; send in-app notifications about deals and events you have opted into; maintain App security; improve the App through anonymised analytics; and comply with our legal obligations. We do not use your data for automated decision-making that produces legal or similarly significant effects. We do not sell your data.
Contract (Art. 6(1)(b)) — to provide the services you signed up for. Legitimate interests (Art. 6(1)(f)) — to improve the App and detect fraud, where these interests are not overridden by your rights. Consent (Art. 6(1)(a)) — for optional marketing communications and non-essential analytics, which you may withdraw at any time via Manage consent in your Profile.
We do not sell your personal data. We share data only with: service providers operating the App (hosting, analytics, push notifications) under data processing agreements; your college, limited to enrolment verification (yes/no only); and law enforcement where legally required. All processors are located in the EU or in countries with an EU adequacy decision.
We retain your account data while your account is active. If you delete your account, we delete or anonymise your personal data within 30 days, except where retention is required by law (e.g. financial records for 7 years under Irish tax law). Anonymised analytics data may be retained indefinitely as it cannot be linked to you.
Under GDPR you have the right to: access a copy of your data; correct inaccurate data; request erasure ("right to be forgotten"); restrict or object to certain processing; receive your data in a portable format; and withdraw consent at any time. Contact hello@unicraic.ie to exercise these rights. You may also lodge a complaint with the Data Protection Commission Ireland at dataprotection.ie, 21 Fitzwilliam Square South, Dublin 2, D02 RD28.
The App uses a local session token to keep you logged in. We do not use third-party advertising cookies. Anonymised in-app analytics may be collected to understand feature usage. Manage all preferences via Manage consent in your Profile.
The App is not directed to children under 16. We do not knowingly collect personal data from anyone under 16 without verified parental consent. If you believe we have inadvertently done so, contact hello@unicraic.ie and we will delete it promptly.
We may update this policy from time to time and will notify you of material changes via the App before they take effect. Continued use after notification constitutes acceptance.
Reach us any time at hello@unicraic.ie.