Privacy Policy
Last updated: 11 September 2026
1. Who controls your data
Sayed Nas, operating Student Homeys, is the data controller for the personal data described here. Contact: hello@studenthomeys.com.
2. What we collect
When you sign up:
- Your University of Manchester email address
- Your password (stored encrypted — we never see it)
- Your name, course, and year of study
- A profile photo, if you upload one
When you use the Platform:
- Listings you post, including photos, prices, locations, and descriptions
- Messages you send to other users
- Reports you submit
- Basic technical data such as IP address and browser type, kept by our hosting provider
3. Why we use it, and our lawful basis
| What we do | Why | Lawful basis |
|---|---|---|
| Create and secure your account | So you can use the service | Contract |
| Verify your university email | So users can trust other users are real UoM students | Contract |
| Show your listings and profile to other users | It's the point of the service | Contract |
| Deliver your messages | It's the point of the service | Contract |
| Investigate reports and remove bad actors | To keep users safe | Legitimate interests |
| Keep the service running and secure | To prevent abuse and fix faults | Legitimate interests |
We do not use your data for advertising and we do not sell it.
4. What other users can see
Other verified users can see: your name, course, year of study, profile photo, and any listings you post.
Other users cannot see your email address. Only the person you are messaging can see your messages.
5. Who we share it with
We use these providers to run the service:
- Supabase — database, authentication, and file storage (hosted in the EU)
- Postmark — sending verification emails
- Vercel — hosting the website
- Cloudflare — domain, DNS, and email forwarding
They process data on our instructions only. We do not share your data with anyone else, except where we are legally required to, or where it is necessary to investigate fraud or protect someone's safety.
6. How long we keep it
- Account data: while your account is active, and for 30 days after you delete it
- Listings: until you delete them or your account
- Messages: while your account is active, so conversations stay readable for both people
- Reports and moderation records: up to 2 years, so we can spot repeat problems
7. Your rights
Under UK GDPR you can ask us to:
- Give you a copy of your data
- Correct anything wrong
- Delete your data
- Restrict or object to how we use it
- Send your data to you or another service in a portable format
Email hello@studenthomeys.com and we will respond within one month.
If you are unhappy with how we handle your data, you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.
8. Security
Passwords are encrypted. Access to your messages and listings is restricted at the database level so other users cannot read data that is not theirs. No system is perfectly secure, but we take reasonable steps to protect your data and will tell you and the ICO if a breach puts you at risk.
9. Cookies
We use only the cookies needed to keep you logged in and keep the service secure. We do not use advertising or tracking cookies.
10. Changes
We may update this policy. If we make a significant change we will tell you by email or on the Platform.