Privacy

Privacy Policy

Last updated 31 May 2026.

Draft for review. This is a plain-language first draft and not yet legal advice — please have it reviewed by counsel before launch.

Who we are

Cohyva is a directory that helps students in Groningen discover and join student clubs. The data controller is Cohyva s.r.o.. For any privacy question or request, contact us at contact@theghostcapital.com.

What we collect

  • Your email address — to create your account and send you the magic sign-in link.
  • Your chosen interests — to personalise your recommendations and intro-week matches.
  • Clubs you save and events you RSVP to — to show your saved list and your agenda.
  • An optional display name and language preference if you set them.
  • If you opt in, the fact that you want product/announcement emails.

We use privacy-friendly, cookieless analytics to understand which features are used (for example, how many people view the directory). This does not track you across sites and does not set advertising cookies.

Why we use it, and our lawful basis

We process this data on the basis of your consent, which you give when you create an account and tick the privacy box. Product/announcement emails are sent only if you separately opt in, and you can withdraw either consent at any time (see “Your choices”). We use the data solely to run the discovery experience described above — we do not sell it.

Where your data is stored

Your data is stored with our hosting providers in the European Union (Supabase, Frankfurt / eu-central-1). Authentication, database, and file storage are provided by Supabase; the app is hosted on Vercel.

How long we keep it

We keep your account data for as long as your account exists. When you delete your account, your profile, saved clubs, and event RSVPs are removed immediately. We may retain minimal, aggregated analytics that do not identify you.

Your choices and rights

Under the GDPR you can access, correct, export, or delete your data, and withdraw consent. You can edit your interests and details, and delete your account, from your account page. Deleting your account permanently removes your profile, saved clubs, and RSVPs. For any other request, email contact@theghostcapital.com.

Reporting content

If you believe a club page contains inappropriate or unlawful content, use the “Report content” link on that page, or email contact@theghostcapital.com. We review reports and act where appropriate.

Changes

We may update this policy as the product grows. We’ll update the date at the top and, for material changes, let you know in the app.