Privacy policy

Who is responsible

Unite is run by Martin Flo, a private person in Norway, as a pilot: a first version of the app, tried by a small group of people. Martin Flo is responsible for the personal data Unite handles (its “controller”, in the words of the GDPR).

For anything about your data, or to see, download or delete it, write to privacy@unite-app.com. You get an answer within a month.

What Unite holds about you, and why

Your account

Your email address, and your Google account’s id if you continue with Google. To sign you in.

Your profile

Your name, your photo if you add one, your town if you give it, that you confirmed you’re 18 or over, and which terms you accepted. So the people you know can find you and see who’s going.

Friends and blocks

Who you’re friends with, your friend requests, and who you’ve blocked. Nobody is ever told that you blocked them.

Events and answers

The events you make (their title, time, place, cover and note, and who they’re for), your answers to invitations, and the public events you’re interested in.

Circles

The circles you’re in, your role in each, and invitations and requests to join.

Messages and boards

What you write in chats and on events’ and circles’ boards, what you like, and when you last read each chat.

Photos

Your profile photo, the covers you add, and the photos you add to events.

Notifications

What Unite tells you inside the app, the emails it sends you and your email switches, and, if you turn on phone notifications, the address your browser gives for sending them to that device.

Reports

What you report and why, and what was decided. Only the founder sees who reported something. When something is removed for breaking Unite’s rules, it’s kept for a while as evidence.

Where you are, roughly

For the public events near you, and to put nearby places first when you search for one, your town is worked out from your connection when you look, to within about ten kilometres. It’s never stored.

Error reports

When something breaks, a short description of the error, the page it happened on and the kind of browser, without your name or email address. Your internet address isn’t kept with it.

Server logs

The services Unite runs on keep short logs of requests, with internet addresses, to keep Unite running and safe.

The legal basis

To run Unite for you

As the terms describe (GDPR article 6(1)(b)): your account, profile, friends, events, circles, messages, photos and notifications, including the emails you leave switched on.

To keep Unite safe and working

Unite’s legitimate interests (article 6(1)(f)): reports and moderation, keeping removed content as evidence for a while, error reports and server logs. You can object to these.

When the law requires it

To keep or hand over something because the law says so (article 6(1)(c)).

Who sees what

An event is seen by the people it’s for: whoever you invited, a circle, your friends, their friends, or anyone on Unite, as you choose. Your name, your photo and your town, if you give it, are seen by people on Unite, but never by anyone you’ve blocked. Everything on Unite needs signing in; nothing is open on the web, and search engines don’t list it. A link you share (an invitation, your friend link or a circle’s link) shows a short preview to whoever has the link.

Who handles it for Unite

These services handle your data only to provide their service to Unite:

Supabase

The database, signing in, and photos, stored in Stockholm, Sweden.

Vercel

Runs the app and its website. Its servers for Unite are in Stockholm; pages may pass through its network elsewhere.

Brevo

Sends Unite’s emails and sign-in codes, from France.

Sentry

Receives error reports, stored in the EU.

Google

Only if you choose Continue with Google: Google tells Unite your name and email address, and knows that you signed in to Unite.

Apple, Google, Mozilla and Microsoft

Deliver phone notifications to the browser you turned them on in. What they carry is encrypted, so they can’t read it.

Photon, by komoot

Finds places when you search for one. Unite’s own server asks it, with your search and a point rounded to your town, so it never learns who searched.

OpenStreetMap

When a page shows a map, your browser loads the map’s pictures from OpenStreetMap’s servers, which see your internet address.

Some of these companies are based in the United States. Where your data could leave the EU and EEA, it’s protected by the EU’s standard contractual clauses or the EU–US Data Privacy Framework.

How long it’s kept

Your account and profile

Until you delete your account.

When you delete your account

Everything about you goes at once: your profile, friendships, answers, photos, settings and devices, the messages you wrote in any chat, your announcements, your 1-to-1 chats, and the events you hosted alone that have ended, with their chats and photos. The photos’ files go within two days. An event you host with others passes to a co-host, and a circle you ran alone to its longest-standing member. What stays: a blank record that an account was deleted, with no name or details; coming events you hosted alone, cancelled and their guests told, until their date has passed; reports you made, without your name; and, as evidence, what Unite’s moderator removed (for up to 90 days) and what someone else’s suspension hides (while the suspension lasts).

Notifications, the record of emails sent, and phone notifications waiting to go

90 days.

A photo you replaced or removed

Deleted within two days after nothing uses it.

Something removed for breaking Unite’s rules

Kept 90 days as evidence, then deleted, unless it’s put back.

Reports, once decided, and the record of what was decided

A year, or longer while a suspension they concern lasts.

Past events, with their chats and photos

Kept so the people in them can look back, until their host deletes their account. During the pilot they’re not deleted automatically otherwise.

Accounts nobody uses

Not deleted automatically during the pilot.

Server logs

A few days. Error reports: up to 90 days.

Backups

Up to 7 days. A copy made before a larger change is deleted within 30 days.

Your rights

• See what Unite holds about you, and get a copy.
• Download it in a file you can take elsewhere.
• Correct it. Most of it you can change yourself in the app.
• Delete it, by deleting your account.
• Object to what’s done to keep Unite safe and working, or ask for it to be limited.

To download your data or delete your account, use Settings → Account, where you can do both yourself at once, or write to privacy@unite-app.com.

If you think Unite handles your data wrongly, tell us first if you can. You can also complain to Datatilsynet, the Norwegian Data Protection Authority (datatilsynet.no).

Cookies and your device

Unite uses only the cookies it needs to work: the ones that keep you signed in, and, if you turn on phone notifications, one that remembers this device for them, kept for up to 400 days or until you sign out. There are no cookies for statistics or ads, so there’s no cookie banner.

Your browser also keeps a few things on your device only: what you were doing during a visit, such as an event you started making, and small notes such as which suggestions you’ve already closed and your friend link, so they aren’t made again.

What Unite never does

• Sell your data.
• Show ads, or let anyone track you for ads.
• Decide anything about you automatically: a person reads every report and decides.

18 and over

Unite is for people 18 and over. If we learn that someone younger has an account, it’s deleted.

Changes

When this policy changes, its date at the top changes too. For a change that matters, Unite asks you to read and accept it again the next time you open it.