Privacy Policy

This policy explains how Exchange Year ("we", "us") handles your information when you use the Exchange Year mobile app and the services behind it. If you have questions, contact us at hello@exyexchange.com.

Information we collect

Information you give us

• Account details: your name and email address, and the sign-in method you chose (email and password, Google or Apple).
• Profile details: your student type (aspirant, current or former exchange student), and optionally your phone number, a short bio and a profile photo.
• Photos and posts: photos you share through the Photo Booth, with any caption, place name or link you add.
• Verification documents: if you choose to verify, a photo or PDF of your student ID or admission letter.
• Program applications: the programs you apply to and any message you include.
• Social activity: the people you follow and the posts you like.

Information collected automatically

Our servers record standard technical information, such as IP address, request time and app version, to operate and secure the service. We do not use advertising identifiers, and the app contains no advertising or analytics SDKs.

Information that stays on your device

Time capsule notes, your welcome letter and some profile extras are stored only on your device. We never receive them.

Device permissions

• Camera: to take Photo Booth pictures and to photograph a verification document. Only when you use these features.
• Photos / media: to choose existing pictures or documents to upload.

The app does not access your location, contacts or microphone. A place name on a post is text you type yourself.

How we use information

• To create and secure your account and sign you in.
• To show your profile and posts to other signed-in Exchange Year users.
• To review verification documents and confirm your student status.
• To process program applications and share them with the agency running that program.
• To send you in-app notices about your account and the community.
• To keep the service safe, prevent abuse and meet legal obligations.

Who can see your information

• Other users: your name, photo, bio, student type, posts, followers and following are visible to other signed-in users.
• Our staff: authorised staff can see account details, verification documents and applications to run the service.
• Partner agencies: when you apply to a program, the agency that runs it receives your application.
• Service providers: Google Firebase handles authentication; if you use Google or Apple sign-in, that provider handles your sign-in. Our hosting provider stores data on our behalf.

We do not sell your personal information and do not share it for advertising.

Security

All data is sent over encrypted HTTPS connections. Access to personal data and documents is limited to authorised staff.

Retention and deletion

We keep your information while your account is active. You can delete your own posts at any time in the app. To delete your account and associated data, follow the steps on our Account Deletion page. Some records may be retained where the law requires it.

Children

Exchange Year is intended for students taking part in, or planning, an exchange programme. If you are under the age of digital consent in your country, use the app only with a parent or guardian's permission. If you believe a child has given us information without permission, contact hello@exyexchange.com and we will delete it.

Your rights

Depending on where you live, you may have the right to access, correct, export or delete your personal information, or to object to certain processing. Contact hello@exyexchange.com to make a request.

Changes to this policy

We will update this page when our practices change. The "last updated" date above shows the latest version.

Contact

Exchange Year

Email: hello@exyexchange.com