Privacy

Privacy Policy

Last updated 25 June 2026.

Draft for review. This is a plain-language first draft and not yet legal advice — please have it reviewed by counsel before launch.

Who we are

Cohyva is a directory that helps students in Groningen discover and join student clubs. The data controller is Cohyva s.r.o.. For any privacy question or request, contact us at connect@cohyva.com.

What we collect

  • Your email address — to create your account and send you the magic sign-in link.
  • Your chosen interests — to personalise your recommendations and intro-week matches.
  • Clubs you save and events you RSVP to — to show your saved list and your agenda.
  • An optional display name, language preference, avatar, and social links if you set them.
  • If you opt in, the fact that you want product/announcement emails.

We use privacy-friendly, cookieless analytics to understand which features are used (for example, how many people view the directory). This does not track you across sites and does not set advertising cookies.

Public profiles and student search

Public profiles are off by default. If you enable yours, your display name, avatar, Cohyva join date, and optional social links can appear at your public profile link and in the public student search. Joined clubs and club history remain private unless you enable that separate setting. Saved clubs, RSVPs, check-ins, attendance-like actions, recommendation preferences, and reward ledgers are not shown in public search.

Why we use it, and our lawful basis

We process this data on the basis of your consent, which you give when you create an account and tick the privacy box. Product/announcement emails are sent only if you separately opt in, and you can withdraw either consent at any time (see “Your choices”). We use the data solely to run the discovery experience described above — we do not sell it.

Where your data is stored

Your data is stored with our hosting providers in the European Union. Authentication, database, and file storage are provided by Supabase; the app is hosted on Vercel.

How long we keep it

We keep your account data for as long as your account exists. When you delete your account, your profile, saved clubs, and event RSVPs are removed immediately. We may retain minimal, aggregated analytics that do not identify you.

Your choices and rights

Under the GDPR you can access, correct, export, or delete your data, and withdraw consent. You can edit your interests and details, and delete your account, from your account page. Deleting your account permanently removes your profile, saved clubs, and RSVPs. For any other request, email connect@cohyva.com.

Reporting content

If you believe a club page contains inappropriate or unlawful content, use the “Report content” link on that page, or email connect@cohyva.com. We review reports and act where appropriate.

Changes

We may update this policy as the product grows. We’ll update the date at the top and, for material changes, let you know in the app.