Privacy Policy

No accounts, no profiles

The BFS app does not ask you to register, sign in, or give us your name, email address, phone number or any other personal details. There is no member profile.

What the app stores

When you install the app, it creates a random anonymous ID for that device. It is not linked to your name or email, and we cannot tell who you are from it. We use it to:

• register you for events and give you an entry QR code (we store the event, the time you registered, your QR code and, if you are scanned in, the check-in time);
• remember events you mark as a favourite;
• keep simple activity records, such as which opportunities you tap Apply on and which Insight articles you open. These count towards internal society engagement and are not shown to other people;
• send push notifications to your device if you allow them (we store your device's push notification token, a record of notifications sent to it, and your notification choices, such as which Career categories you want alerts for);
• show how many people are going to an event (a count only, never names).

What stays on your phone

Opportunities and Insight articles you save are stored only on your device. If you choose to add an event to your calendar, the app asks iOS for calendar access and creates that one event. It does not read, copy or store the rest of your calendar.

Camera and photos

The camera and photo library are only used by committee members who manage the app, to scan event QR codes and to attach images to events and articles. Ordinary users are never asked to share photos.

Committee sign-in

A small hidden area of the app is for committee members. Those accounts use an email address, a password and a two-factor code from an authenticator app. We store these account details, and the events, articles, opportunities and images committee members upload, so they can manage the app's content.

Services we use

The app relies on a few providers to work. Each processes only what it needs:

• Supabase hosts our database and handles the anonymous device sessions;
• Apple’s Push Notification service delivers notifications to your device;
• YouTube plays videos embedded in articles. When you play one, YouTube may receive information as described in Google’s own privacy policy.

Images and links

Posters, article images and company logos are loaded from our servers or from the organisations that publish them, so those servers can see your device's IP address when an image loads. Apply and registration links open the organisation's own website, which has its own privacy policy.

What we do not do

We do not use advertising, third-party analytics or tracking tools in the app. We do not sell your data or share it for marketing, we do not combine it with data from other apps or websites, and we do not use it to track you. The activity records described above are tied only to your anonymous ID and are used within BFS.

How long we keep data

Event registrations are kept while the event and its records are needed. If you delete the app, the data stored on your phone is removed. Because the app is anonymous, data held on our servers cannot be linked to you unless you contact us to help find it.

Your rights

Under UK data protection law you can ask us for a copy of your data, ask us to delete it, or object to how we use it. Email us and we will help remove registration data linked to your device. You can also complain to the Information Commissioner’s Office (ico.org.uk).

Children

The app is built for university students and is not directed at children under 13.

Changes

If we change how the app handles data, we will update this page and the date below.

Contact

Bath Finance Society, University of Bath, Claverton Down, Bath BA2 7AY. Questions or requests about your data: