Privacy Policy

Last updated: 18 July 2026

4UNI ("we", "us") helps students find universities and housing abroad. This policy explains what personal data we collect, why, and the rights you have under the EU General Data Protection Regulation (GDPR).

1. Data we collect

Account data. When you sign up we store your email address and, if you use Google sign-in, the basic profile information Google shares (name and email).
Housing profile. If you create a housing profile, we store the details you choose to provide (name, age, university, city, budget, preferences, photo) so other students can find you as a roommate.
Messages. Conversations you have with other users through 4UNI are stored so we can deliver them.
AI chat. Messages you send to the 4UNI assistant are processed by Anthropic (our AI provider) to generate a reply. Do not include sensitive personal data in the chat.
Technical data. We log IP addresses and basic usage events to prevent abuse (rate limiting, daily message caps) and to understand how the product is used.

2. Why we process it

We process your data to provide the service (contract, art. 6.1.b GDPR), to keep the platform secure and prevent abuse (legitimate interest, art. 6.1.f), and to comply with legal obligations (art. 6.1.c). We do not sell your data and we do not use it for advertising.

3. Where your data lives

Data is stored with Supabase (our database and authentication provider). AI chat messages are processed by Anthropic. Both act as processors on our behalf under their respective data processing agreements.

4. Cookies

4UNI only uses cookies that are strictly necessary to keep you signed in (authentication session cookies). We do not use tracking or advertising cookies, which is why you do not see a cookie banner.

5. Retention

We keep your data for as long as your account exists. If you delete your account, your profile, housing profile and messages are deleted. Technical logs are kept for a limited period for security purposes and then removed.

6. Your rights

Under the GDPR you can request access to, correction of, or deletion of your personal data, ask for a copy in a portable format, restrict or object to processing, and lodge a complaint with your local supervisory authority (in Italy, the Garante per la Protezione dei Dati Personali).

7. Contact

For any privacy request, write to nixonmalvezzi@gmail.com. We reply within 30 days as required by the GDPR.