Last updated: August 22, 2026 · Effective date: August 22, 2026 · Version: 2.1
UNIO is a social platform that lets you discover communities, events, and
people around you. Protecting your personal data isn't an afterthought —
it's part of the foundation the product is built on.
In this policy, "UNIO" or "we" refers to the provider of the service, and
"you" refers to the person using the app.
This policy applies to the UNIO mobile app and the UNIO website.
UNIO is currently operated by a natural person, not a legal entity. The
data controller is:
The list below is derived from the data the app actually stores.
### 3.1 Account and identity information
text; it is stored hashed by our authentication provider.
image.
### 3.2 Content you create
Posts, stories, comments, messages (text, photo, video, voice recording,
file), communities, events, collections, poll responses, reactions, and
reviews.
### 3.3 Interaction and relationship data
Who you follow and who follows you, who you've blocked, the communities
and events you've joined, the posts you've saved, profile visits, story
views, and reports/appeals you've submitted.
### 3.4 Usage and recommendation data
Interest signals derived from your in-app behavior (such as views, likes,
participation). These are used to personalize your feed and
recommendations.
### 3.5 Location data
Location data is conditional: it is only processed when you use a
feature that requires location and you have granted location permission
on your device. See section 6 for details.
### 3.6 Technical data
IP address, device and app version information, connection logs, error
and performance metrics, the device push-notification token (so we can
deliver notifications), and audit logs of administrative/security
actions.
### 3.7 Subscription data
If you have a UNIO+ subscription: plan, status, start/end dates, and
subscription events. Your card details never reach us (see section
9).
Purpose — Data used
Creating and authenticating your account — Account and identity information
Providing the service: feed, communities, events, stories, messaging — Content, interaction data
Running features that require location — Location data (with permission)
Personalizing the feed and recommendations — Usage and interest data
Ensuring security, preventing abuse and spam — Technical data, reports, audit logs
Sending notifications — Device push token, notification preferences
Managing your subscription — Subscription data
Responding to support requests — Contact and account information
Fixing bugs and measuring performance — Technical data
Complying with legal obligations — Relevant data
service, managing your subscription.
notifications (if any). You can withdraw consent at any time.
improvement, and core product metrics. This basis is not used as a
blanket justification for all processing — only for the cases listed.
law.
Location is an optional feature in UNIO.
content, or choose to share content that includes a location.
screen. If you decline, the rest of the app keeps working; only
location-based features are unavailable.
may see that location depending on the content's visibility setting.
entirely optional and works without using device location.
province for a map point, or search for an address, the relevant
coordinates or search text are sent to an address-resolution service
(OpenStreetMap Nominatim). Results are cached to avoid repeated
lookups.
data required to render the map is exchanged directly between your
device and Google.
You control who can see the content you share. However, you should be
clearly aware that:
seen by other users on the platform; these files are served via
hard-to-guess addresses.
community.
short-lived, signed links.
immediately; fully purging it from backups and technical logs may take
a short additional time.
reports can be reviewed and the service can function. We state this
explicitly so you don't assume otherwise.
extent necessary as part of a report, legal request, or security
investigation.
We do not sell your data. It is shared with the following recipients,
only to the extent necessary for the service to function:
Recipient — Purpose — Location
Supabase — Database, authentication, file storage, real-time infrastructure, sending account emails — Germany (European Union)
Hostinger — Hosting the application server — Germany (European Union)
Google Maps — Rendering the map on your device — Abroad
OpenStreetMap Nominatim — Address search and coordinate-to-neighborhood/district/province resolution — Abroad
Expo / Google Firebase Cloud Messaging — Push notification delivery — Abroad
Google Fonts — Font delivery on the website only — Abroad
Apple App Store / Google Play — Subscription purchase and verification (once active) — Abroad
Authorized public authorities — Where required by law — Turkey
Your payment details never reach us. Once subscription purchases are
active, payment is collected and processed by the relevant app store; we
never see or store your card details.
Advertising: UNIO does not currently show ads and does not share
your data with third parties for advertising purposes.
AI: UNIO does not currently send your data to any AI provider and
does not use it to train AI models.
Your account and content are stored on servers hosted in Germany
(European Union): the application server is on Hostinger, and the
database, authentication, and file storage are in Supabase's Frankfurt
region.
Beyond this, some limited data is processed abroad due to the services
marked "abroad" in the table above: data exchanged between your device
and Google for map rendering, coordinates and search text sent for
address resolution, the device token used for notification delivery, and
subscription verification.
These transfers are carried out within the scope of applicable data
protection law on international transfers, and only to the extent
necessary to provide the service; each service only receives the data it
needs to function.
Measures we actually apply:
access records they're authorized to see.
via short-lived signed links.
We do not claim any certification (e.g. ISO 27001) or unverified
security standard.
UNIO is not intended for children under 13. Date of birth is
requested at signup, and applications identified as being under 13 are
not accepted. If we learn that an account belongs to someone under 13,
we close it.
Data — Period
Account and profile information — As long as the account is open
Posts, comments, community and event content — Until you delete it or close your account
Stories — Removed from visibility 24 hours after posting
Story media files — Deleted within 30 days after expiry
Messages — Until either party deletes them
Technical logs and metrics — Limited to the period required by the processing purpose
Audit and moderation records — As long as required by legal obligation or the right of defense
For detailed category-based periods, see the
[Data Retention Schedule](/legal/retention).
Regarding your personal data, you have the right to: learn whether it is
being processed, request information, learn the purpose of processing,
know the recipients it has been transferred to, request correction if
processed incompletely or incorrectly, request its deletion or
destruction, request that these actions be notified to third parties it
was transferred to, object to a result arising solely from automated
analysis that is to your detriment, and request compensation for any
damage suffered.
Two rights you can exercise directly from within the app:
of the records associated with your account.
your password; your account is permanently deleted. Details and the
path for when you can't access the app:
[Account Deletion](/legal/account-deletion).
To exercise your rights, you can reach us at
kubilayceyhan90@gmail.com. Your request will be resolved within thirty
days at the latest. Your request must include the information necessary
for us to verify your identity.
If this policy changes, the effective date will be updated. You will be
notified in-app of material changes. The current version is always
accessible in the app and on the website.