This policy explains what personal data Prees ("we", "us", "the app") collects, why we collect it, how we use and protect it, and the rights you have over it. Prees is a social app for university students to organise nights out. Please read it alongside our Terms of Service.
Who is responsible for your data. The data controller for Prees is the operator of Prees, contactable at hello@getprees.com. We are registered with the UK Information Commissioner's Office (ICO).
1. Who can use Prees
Prees is intended for verified university students aged 18 or over. The app is not directed at, and must not be used by, anyone under 18. We do not knowingly collect data from under-18s; if we learn that we have, we will delete it.
2. What data we collect
Information you give us
University email address — used to verify you are a student at a supported university. Your access to the app depends on holding a valid university email.
Account and profile information — your display name, year group, and any optional profile details you choose to add (such as a short bio, course, languages, interests, music taste, availability, social media handles, and profile photos).
Content you create — events you host, messages you send in event chats, expenses and settlements you record, items you claim to bring, and any reports you submit.
Information created as you use the app
Activity data — which events you request to join, are approved for, attend, or cancel; your reliability record (events committed to versus attended); and host ratings you give or receive.
Home-safe status — if you choose to mark yourself "home safe" during a live event, we record that status and the time, visible to others at that event. This is entirely voluntary (see section 6).
Technical data — basic information needed to operate the app and keep your session secure, such as device session tokens.
Push notification token — if you turn on notifications, we store a token for your device so we can send you alerts (for example, when someone requests to join your event, or a friend is heading out). You can turn notifications off at any time in your device settings.
Information we deliberately do NOT collect
We do not track your movements or store your location. On the Map screen, the app can use your device's location — only while you are actively using the app — to centre the map on you. This happens on your device only: your location is never stored, never linked to your account, and never shared with anyone else. The app shows the location of events, never of people.
We do not collect special-category data such as your ethnicity, religion, health, or sexual orientation.
We do not process payments. Expenses and balances in the app are a record-keeping tool only; no money moves through Prees.
3. How we use your data
To verify your eligibility and create and secure your account.
To provide the core features: hosting and discovering events, requesting and approving attendance, the bring list, the shared expense ledger, event chat, and the live event view.
To protect users — operating the block and report features and reviewing reports of objectionable content or behaviour.
To send you essential service messages, such as email verification.
To understand and improve how the app is used, and to diagnose problems (see section 5 on analytics).
Our lawful bases under UK GDPR are: performance of our agreement with you (to provide the service), our legitimate interests (to keep the app safe and working), and your consent where required (for example, optional profile details you choose to share).
4. Who can see your information
Different information is visible to different people by design:
Your minimal profile (name, avatar, year, reliability) is visible to other students at your university and to people you share an event with.
Your extended profile details are shown according to your profile visibility setting (everyone at your university, or friends only) — with the exception that people you are attending an event with can always see your minimal profile.
Exact event addresses are only ever shown to people the host has approved for that event. They are never shown publicly, never shown to people with only a pending request, and never appear on public event invite links.
Public invite links show only limited, non-sensitive details (event name, general area, date, host's first name, and how many people are going) — never the exact address or the guest list.
People you block cannot see you, and you cannot see them, across chats, attendee lists, and profiles.
5. Service providers and third parties
We use a small number of trusted providers to run the app. They process data on our behalf, under contract, only as needed to provide their service:
Supabase — secure database and authentication (stores your account and app data).
Resend — sending essential emails such as verification messages.
Vercel — hosting our website and public pages.
Expo — delivering push notifications to your device and checking for app updates.
Apple — delivering push notifications (APNs) and distributing the app.
Cloudflare — routing email sent to our hello@ address.
We may also use analytics and crash-reporting tools to understand usage and fix problems. Where we introduce a specific provider that processes personal data, we will update this policy to name it. We do not sell your personal data to anyone, and we do not allow advertisers to target you using your data.
Where your data is processed. Your account data is stored by Supabase in the United Kingdom (London). Some providers process limited data outside the UK — Resend (email), Expo (notifications and update checks), and Vercel (website hosting) operate in the United States. Where data leaves the UK, we rely on appropriate safeguards, such as the UK International Data Transfer Agreement or equivalent contractual protections.
6. The home-safe feature — what it is and isn't
The home-safe check is a voluntary way for friends to look out for each other. It is not a monitoring or emergency service.
Prees does not track anyone's location, does not automatically alert anyone if a person does not check in, and does not guarantee anyone's safety. Marking yourself "home safe" is always your choice. The feature helps a group coordinate; it is not a substitute for contacting friends directly or, in an emergency, the emergency services.
7. How long we keep your data
We keep your account data for as long as your account is active. Some records (such as attendance history) are retained to make features like reliability work. If you delete your account, we will delete or anonymise your personal data, except where we need to keep limited information to comply with the law or to resolve safety reports.
8. Your rights
Under UK data protection law you have the right to access the personal data we hold about you, to have inaccurate data corrected, to have your data deleted, to restrict or object to certain processing, and to data portability. To exercise any of these, email hello@getprees.com.
If you are unhappy with how we handle your data, you can complain to the UK Information Commissioner's Office at ico.org.uk.
9. Security
We protect your data using access controls that limit what each user can see to what they are permitted to see, encrypted connections, and secure authentication. No system is perfectly secure, but we take reasonable steps to protect your information.
10. Changes to this policy
We may update this policy as the app develops. If we make significant changes, we will make the updated policy available here and update the date at the top.