Privacy Policy

Effective October 24, 2026. Version 2026-10-24.

This policy explains what Postgrads collects, why, who can see it, and how to get rid of it. It covers the Postgrads mobile app and the waitlist on postgrads.app, and nothing else.

Postgrads connects recent university graduates through small-group, in-person hangouts. Most of what we collect exists so we can put you in a group with people you would actually want to meet.

Information you give us

When you create an account we collect your email address and a password. We never see your password in readable form — it is hashed by our authentication provider before it is stored.

During onboarding and from your profile you may give us:

• Your first name
• Your graduation year and university
• Your city
• The activities and interests you select
• The weekly time slots you are free
• A short bio, if you write one
• A profile photo, if you upload one
• An Instagram handle, if you add one

Information collected automatically

If you allow notifications, we store a push notification token for your device so we can tell you when you have been matched to a hangout or when one is coming up tomorrow.

We store a record of notifications we send, including the title and body of the message and whether delivery succeeded. We do not store the content of your private messages in these records.

Postgrads does not collect your device's GPS location. Your city is the one you tell us, not one we detect.

The waitlist

If you join the waitlist on postgrads.app, we collect your email address and, if you give it, your city. We use them only to tell you when Postgrads is available and to understand where people want it. We do not share them with anyone except the service providers listed below, and we do not use them for anything else.

The website sets no cookies and uses no analytics or advertising trackers.

To be removed from the waitlist, email us at the address below and we will delete your entry.

How we use your information

We use what you give us to:

• Match you into hangouts with other members in your city, based on your availability and interests
• Show your profile to other members in your city who are browsing
• Let you send and receive message requests and messages
• Send you notifications about matches and upcoming hangouts
• Enforce our Terms of Service, including acting on reports and blocks
• Diagnose problems and keep the service working

We do not sell your personal information. We do not share it with advertisers. We do not use it to build advertising profiles.

What other members can see

Other members in your city who are browsing can see your first name, graduation year, university, bio, interests, and profile photo.

Your email address is never shown to other members. Your Instagram handle is deliberately excluded from browsing and from stranger profiles — it is visible only where you have chosen to share it inside a conversation.

People attending the same hangout as you can see each other's names, graduation years and photos.

You can turn off Discoverable in Account Settings at any time. That removes you from browsing and stops new message requests. It does not hide conversations you already have.

Blocking and reporting

If you block someone, you disappear from each other's browsing and neither of you can start a conversation with the other. Blocking is deliberately one-sided in what it reveals: the person you blocked is not told, and cannot find out.

If you report someone, we receive the reason you selected, any details you write, and a reference to the conversation. We use reports to enforce our Terms of Service.

Who we share information with

We share information with a small number of service providers who process it on our behalf:

• Supabase — hosts our database, authentication, and profile photo storage
• Resend — sends account emails, such as sign-up confirmations and password reset codes
• Cloudflare — hosts our website and forwards email sent to our support address
• Expo — delivers push notifications to your device, which in turn relies on Apple and Google's notification services
• Apple and Google — distribute the app and, through their notification services, deliver notifications

We may also disclose information if we are legally required to, or where we believe it is necessary to prevent harm.

Deleting your account

You can permanently delete your account from Account Settings inside the app. This is not a request queue and there is no waiting period — it happens immediately.

Deleting your account permanently removes your profile, your photo, your availability, your hangout history and attendance records, your blocks and reports, and every conversation you are part of, including the messages in them.

Because a conversation belongs to both people in it, deleting your account also removes that conversation from the other person's inbox. This cannot be undone and we cannot restore a deleted account.

Records we are required to keep for legal or safety reasons — for example a record that a report was filed — may be retained separately in a form that is not linked to your profile.

How long we keep things

We keep your information for as long as your account exists. If you delete your account, it is removed as described above.

Waitlist entries are kept until you ask us to remove them, or until we no longer need them to tell people that Postgrads is available.

Notification delivery logs and aggregate counts that contain no profile information may be retained for operational purposes.

Security

Data is transmitted over encrypted connections and stored with access controls that restrict each account to its own records. Cross-account access happens only through specific, audited server functions.

No system is perfectly secure. We cannot guarantee that unauthorised access will never occur, and you share information through Postgrads at your own risk.

Age requirement

Postgrads is for people 18 and older. It arranges in-person meetings between adults, and we do not knowingly collect information from anyone under 18. If we learn that we have, we will delete the account.

Your rights

Depending on where you live, you may have the right to access, correct, export or delete your personal information, and to object to certain processing.

You can see and edit most of your information directly in the app, and you can delete everything from Account Settings. For anything else, contact us at the address below and we will respond within 30 days.

Changes to this policy

If we change this policy in a way that materially affects you, we will notify you in the app before the change takes effect. The date at the top of this document always reflects the current version.

Contact

Questions about privacy, or a request about your data, go to our support address. It is listed in Get Help inside the app and at the bottom of this document.