Privacy Policy
This document explains what personal data the myMet app collects, why, who can see it, how long it is kept, and what your rights are.
It also covers our website, mymet.app, and the web version of the app at app.mymet.app.
Summary
- We collect your MMU email, name, password (hashed), and, if you link it, your timetable.
- Friends are added by QR code.
- Friends see where you are only if you turn on sharing for them.
- Your timetable link is encrypted.
- We do not sell your data to third parties, nor do we use it for advertising or tracking.
- You can download or delete your data at any time.
- This app is not affiliated with or endorsed by Manchester Metropolitan University (MMU).
- Admins can view your account to handle support, requests, and abuse. Each occurrence is logged with the admin's name, timestamp and IP. Admins cannot see your password or timetable link.
Who we are
myMet is run by Jacob Walton and Cole Clare, joint controllers of your data. It is not affiliated with MMU.
Contact: [email protected]
What we collect
| Data | Why | Lawful Basis |
|---|---|---|
| MMU email | Login, account emails, proving you're at MMU | Contract |
| Name | Shown to you and your friends | Contract |
| Password (hashed) | Login | Contract |
| Timetable link | Fetching your timetable | Contract |
| Timetable (modules, groups, times, rooms, meeting links, staff names) | Showing your timetable | Contract |
| Friend code | Adding friends | Contract |
| Friends, requests, favourites | Friends feature | Contract |
| "Not in this lecture", "Not in today" | Keeping what friends see accurate | Contract |
| Presence sharing settings, ghost mode | Choosing who can see your location | Consent |
| App settings | Saving your preferences | Contract |
| Push notification token | Sending notifications | Consent |
| Device name, e.g. "iPhone 17 · iOS 27" | Recognising and signing out devices | Legitimate Interests (security) |
| Login times, failed attempts, sessions | Protecting your account, removing unused accounts | Legitimate Interests (security) |
| IP address | Rate limiting, and blocking repeated failed logins | Legitimate Interests (preventing abuse) |
| Two-step verification | Extra protection for your account | Legitimate Interests (security) |
| Browser and system, e.g. "Chrome on macOS" | Recognising and signing out devices | Legitimate Interests (security) |
| Emails you send us (sender, subject, dates) | Responding to your requests and ensuring timeliness | Legitimate Interests (support) |
| Privacy requests you make, and what we did | Showing we handled your request on time | Legal Obligation |
Contract means that we need this information to provide the service you sign up for. Consent means that we ask for your permission to use this information, which can be withdrawn at any time. Legitimate interest means that we need this information to keep accounts secure and prevent abuse. Legal obligation means the law requires us to keep this information.
Email, name, and password are required to create an account. Everything else is optional, and you can choose not to provide it.
Your timetable
We use your timetable link only to fetch your timetable, and store it encrypted. The app keeps a copy on your phone until you sign out. Unlinking deletes the link and your timetable.
Teaching staff
Staff names from timetables are shown only to the student whose timetable it is. Our basis is legitimate interest: students need to know who is teaching their classes.
Any member of staff who does not wish to have their name shown in the app can contact us to have it removed. We keep a list of removed names so they stay hidden.
Friends
Friends are added by scanning your QR code. This shows them your name. Nothing else is shared until you accept. You can reset your code at any time.
Friends see your name. If you turn on sharing for a friend, they also see one of:
- In class: building, room, and end time.
- Free: until your next class.
- Off campus: no more classes today, or you're not in.
Sharing is off by default. Ghost mode hides you from all friends at once. We don't store a history of where you've been. You can stop sharing or remove a friend at any time.
If you allow notifications, we notify you about friend requests. These include the other person's name.
How we look after accounts
Our admins can view your account to help with support, privacy requests, or abuse. Every view and change is logged, along with the reason for any change.
Admins can correct your name, change your email (only once the new address has confirmed it and the old one has been informed), sign you out of all devices, export your data, or delete your account. They cannot see your password or timetable link.
- Suspension: for abuse of the service. You're signed out, can't sign in, and friends can't see you. It may be temporary or permanent.
- Restriction: if you ask us to stop using your data. We will keep your data, but won't use it. You won't be able to sign in, friends won't see you, and your timetable won't be updated. You can ask us to remove the restriction at any time.
If you email [email protected], we keep the sender, subject, and dates to make sure we reply. The email itself is kept in our mailbox.
Who else handles your data
We don't sell your data or use ads or analytics. We share it only with these providers, or when the law requires it.
| Who | Role | Receives | Where |
|---|---|---|---|
| Hetzner | Server and database | Everything we store, request IP addresses | Germany |
| Zoho Mail (EU) | Support emails | Emails you send us and our replies | EU |
| ZeptoMail (EU) | Sending account emails | Your email address and email content | EU |
| Expo | Push notifications | Device token, notification content | US |
| Cloudflare | Network security and delivery | All traffic to our app and website, including IP addresses | Global (US company) |
The EU is covered by UK adequacy regulations. Cloudflare and Expo are certified under the UK Extension to the EU-US Data Privacy Framework.
How long we keep your data
| Data | Kept for |
|---|---|
| Account | Until you delete it. After 13 months without logging in, we email you and delete it 30 days later if you don't log in. Suspended or restricted accounts aren't deleted for inactivity. |
| Unverified accounts | 7 days |
| Timetable link | Until you unlink it or delete your account. |
| Timetable entries | 13 months after the session |
| "Not in this lecture", "Not in today" | Until the day is over |
| Friend code | Until you reset it or delete your account |
| Friend requests | 30 days, or until answered |
| Friendships and sharing settings | Until removed by either party |
| App settings | Until you delete your account |
| Push notification tokens | Until you sign out, or 60 days unused |
| Sessions and device names | Up to 90 days after login |
| Verification and reset links | 7 days after use or expiry |
| IP addresses | About a minute for rate limiting. Up to 15 minutes after a failed login. Up to 14 days if your request causes a server error. |
| Server logs | Up to 14 days, then deleted automatically. A small error log with no names or emails may be kept until it's overwritten |
| Backups | Up to 14 days, stored encrypted on our server, then deleted automatically |
| Admin activity logs | 2 years |
| Support email details | 2 years after the conversation, or after any related request closes |
| Privacy requests | 2 years after the request is closed |
| Two-step verification | Until you turn it off or delete your account |
Deleting your account removes everything immediately, except backups and logs, which expire as above.
Security
Passwords, login tokens, and email links are stored only as hashes. Timetable links are encrypted at rest. If a breach puts your data at risk, we will notify you and the ICO.
Two-step verification is available for all accounts and required for admins. Authenticator secrets ar encrypted, and recovery codes are stored as hashes.
Your rights
| Right | How |
|---|---|
| Get a copy of your data (JSON) | Settings > Download my data |
| Correct it | Edit your name in Settings, or email us |
| Delete it | Settings > Delete account, or unlink your timetable, or email us |
| Withdraw consent | Settings > Friends > Sharing settings, or ghost mode |
| Restrict or object to how we use it | Email us. Whilst restricted, your data is kept but not used. |
Email: [email protected]
We make no automated decisions about you. To complain, contact us, or the ICO at https://ico.org.uk/make-a-complaint/.
Send requests from the MMU email on your account so we know it's you. We'll reply automatically to confirm we have it, and respond within one month. For complexx requests, this can be extended by up to two months, and we'll tell you why. If we need to check it's you, the month starts once you've confirmed your identity.
Who can use myMet
Anyone with a valid MMU email can create an account. You must verify it to use friends.
Cookies
The website only uses cookies to keep you signed in. We don't use tracking or analytics cookies.
Changes
We will update the date at the top. For significant changes, such as new data or a new provider, we will email you to tell you what has changed and how it affects you.