Privacy Policy
Last updated: September 1, 2026. Uni Deals Trust Center.
1. Who We Are
Uni Deals (unideals.co) is a student discount platform serving universities and partner businesses in Sri Lanka. Uni Deals is not UNiDAYS and is not affiliated with myunidays.com. This Privacy Policy explains how we collect, use, protect, and disclose personal information when you use our website, mobile app, and related services.
2. Age Requirement
Uni Deals is not designed for children under 13. You must be at least 13 years old to create an account or use the service. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has created an account, contact us at unideals.lk@gmail.com and we will delete it.
3. Information We Collect
We may collect account and profile data such as name, email address, user role, university-related verification details, usage events, and saved deal interactions. Partner and admin users may also provide business and offer-management details relevant to campaign publishing. If you verify with a student ID, we collect photos of that document. If you use the Uni Deals mobile app and enable notifications, we store a device push token. We do not collect payment card details on Uni Deals.
4. How We Use Your Data
We use data to authenticate accounts, support student verification, assign and enforce role-based permissions, deliver relevant deals, prevent fraud, respond to support requests, send optional app notifications you enable, and improve service reliability and user experience.
5. Student ID Documents
ID photos are stored in a private storage bucket. They are not public files. When an admin reviews a request, they open the images through short-lived signed URLs that expire after about five minutes. We retain ID documents only as long as needed to complete verification, prevent duplicate or fraudulent enrolments, and meet legal obligations, then we delete them with your account or earlier when they are no longer required.
6. Camera and Push Notifications
Partner and admin users who scan in-store tickets may grant camera access on the partner scanner. Camera frames are processed on the device to read QR codes. We do not upload a live video stream of the scan. The mobile app may store Expo push tokens on your account so we can send optional deal or event alerts. You can disable notifications in the device settings. Tokens are removed when you delete your account.
7. Verification, Security, and Access Control
Uni Deals uses safeguards such as authenticated sessions, role-based authorization, controlled data access paths, and verification checks to reduce unauthorized access. While no system can be guaranteed 100% secure, we apply industry-standard measures to protect data in transit and at rest through our infrastructure providers.
8. Third-Party Partners and Service Providers
Deals shown on Uni Deals are provided by third-party partners. We may share only the minimum necessary information with trusted service providers and infrastructure vendors for hosting, authentication, analytics, and communications. Partner businesses are independently responsible for how they handle transactions and redemptions under their own policies.
9. Data Retention
We retain personal data only for as long as needed to provide the service, meet legal and compliance obligations, resolve disputes, and enforce platform terms. Retention periods may vary by data type and operational necessity. When you delete your account we remove the records described in Your Rights.
10. Cookies and Similar Technologies
We may use cookies or similar technologies for login persistence, security, and analytics. On the live site we use Google Analytics 4 and Microsoft Clarity to understand how pages are used. Clarity session recordings mask typed input, including student emails and registration IDs. You can manage browser preferences, but disabling certain cookies may affect platform functionality.
11. Your Rights
Subject to applicable law, including the Sri Lankan Personal Data Protection Act where applicable, you may request access or correction of your personal information. You can delete your Uni Deals account yourself at any time at https://www.unideals.co/delete-account. You do not need to email support to close an account. For other privacy questions, contact unideals.lk@gmail.com.
12. International Transfers
Our technology providers may process data in multiple jurisdictions. Where cross-border transfer occurs, we apply appropriate safeguards and contractual protections consistent with applicable legal requirements.
13. Contact
For privacy questions or requests, contact unideals.lk@gmail.com.