Complex Privacy Policy

What we collect

You give us: your name, username, email, student email, matriculation number, university, phone number, profile photo, bio, and anything you write in listings, reviews or messages.

Created by using the app: listings, orders, wallet transactions, favourites, reviews, reports and blocks.

Collected automatically: device push token, app version, and error logs when something breaks.

We do not collect your location, contacts, photos beyond the images you choose to upload, or advertising identifiers.

Why we collect it

To verify you are a student. We send a one-time code to your student email address. This is the only way we can keep the marketplace to students.
To run trades. Buyers and sellers see each other's username, profile photo and rating. The hand-off code and order details are shared between the two parties to a trade.
To hold money safely. Payments and payouts are processed by Paystack.
To keep people safe. Reports and blocks are used to review behaviour and remove accounts.
To notify you. Order updates and messages, via push notification.

We do not sell your data, and we do not use it for advertising.

Who we share it with

Paystack — payments and payouts. They receive what they need to process a transaction, under their own privacy policy.
SendByte — sending verification and account emails.
Amazon Web Services — hosting and image storage.
Law enforcement — only where we are legally required to.

Other users see only your public profile: username, photo, bio, university, listings, and seller rating. Your email, phone number, matriculation number and wallet balance are never shown to other users.

How long we keep it

While your account is open. When you delete your account, identifying information — name, email, student email, matriculation number, phone number, photo, bio — is permanently overwritten.

Records of completed orders and payments are kept in an anonymised form, because they are also the trading history of the person on the other side of the transaction, and because financial records must be retained. Those records can no longer be linked back to you.

Your rights

You can view and edit your profile in the app, and delete your account from Settings → Delete account. To request a copy of your data or ask a question about this policy, email support@unicomplex.app.

Security

Passwords are hashed and never stored in readable form. Traffic between the app and our servers is encrypted with TLS. No system is perfectly secure, and we will tell affected users promptly if a breach puts their data at risk.

Children

Complex is for university students and is not directed at children under 13.

Changes

We will notify you in the app before a material change takes effect.

Contact

support@unicomplex.app