Privacy Policy

1. Who is responsible for your data

TələbəHub is the data controller for the personal data described here — meaning we decide what is collected and how it's used. You can reach us about any privacy matter at [email protected] or through Profile → Contact support in the app.

2. What we collect

• Account and profile: your name, email address, university, chosen language, and a password (stored only as a secure hash — we never see it in plain text). If you offer services, your provider profile also holds the skills you list, a short description, your prices, and any portfolio photos you upload.
• Things you post and send: gig requests, housing listings, event postings, in-app chat messages and any images or PDFs you attach, the ratings and reviews you leave, and messages you send to support.
• Activity: your bookings and their status, Chill Zone posts, the categories you browse, and your notification preferences.
• Verification: a photo of your student ID (handled as described in section 3).
• Automatic / technical: a push-notification token if you enable notifications; and basic server logs (IP address, date and time, the request made, and any errors) that we keep briefly to run the service securely and fix problems.

We do not collect your precise GPS location. When you type an address for an event or a housing listing, that is text you enter — not tracking of your device.

3. Student ID verification (sensitive data)

To keep the community genuine and adults-only, we ask you to upload a photo of your student ID. We treat this as sensitive data and handle it carefully:

• The photo is stored in a private area, separate from public content, and is never shown to other users.
• A member of our team reviews it manually, only to confirm you are a real student aged 18 or over.
• Immediately after the decision (approved or rejected), the photo is permanently deleted. We keep no copy, and we do not transcribe your date of birth, ID number, or any other detail from it.
• The only things we retain are whether your account is verified and the date of that decision.

Because verification gates access, withdrawing consent to this step means you will not be able to use most of the app.

4. The Chill Zone and anonymity

The Chill Zone is a casual space where you can post under your real name or as "Anonymous Student". Even anonymous posts are linked internally to your real account. Other users never see who is behind an anonymous post. Only administrators can see this link — and only to investigate a report, respond to a genuine safety concern, or meet a legal obligation. Posts that are reported are reviewed by our moderation team.

5. How we use your information

We use your data to:

• create and run your account and provider profile;
• let students find each other, chat, agree bookings, and post housing and events;
• send you the notifications and account emails you'd expect (verification, password resets, replies, booking updates, moderation decisions), in your chosen language;
• keep the community safe — reviewing reports, enforcing blocks, removing content that breaks our rules, and preventing fraud and abuse;
• keep the service reliable and secure, and diagnose technical problems;
• comply with the law and respond to lawful requests.

We do not use your data for third-party advertising, and we do not sell it.

6. Our legal basis

Depending on the situation, we rely on: performance of our agreement with you (to provide the app you signed up for); your consent (for student-ID verification and for optional notifications); our legitimate interests (keeping the platform safe, reliable, and free of abuse); and legal obligations (where the law requires us to keep or disclose certain information).

7. Who we share it with

With other students: your public profile — your name, university, provider description, listed services and prices, ratings, and the events or housing you post — is visible to other users. Your email address, chat messages, student ID, and the real identity behind any anonymous Chill Zone post are not.

With service providers (processors) who help us run the platform, under contracts that limit them to our instructions:

• Cloudflare — content delivery, DNS, TLS encryption, and the secure connection to our servers;
• Expo (Expo Application Services) — delivering push notifications to your device;
• Google Maps Platform — only when you use map or address-search features, to look up places.

If we ever add an email or other provider, it will act as our processor on the same basis. We do not sell your personal data, and we do not share it with advertisers. We may disclose data where required by a valid legal request, or to protect the rights and safety of our users.

8. Where your data is stored and transferred

Our servers and some of our processors may be located outside Azerbaijan. Where personal data is transferred across borders, we take reasonable steps to ensure it remains protected to the standard described in this policy.

9. How long we keep it

• Your account and the content tied to it: for as long as your account is active.
• Student ID photo: deleted immediately after the verification decision (section 3).
• Server logs: kept only briefly (typically a few days) for security and debugging, then discarded.
• After you delete your account: we remove your personal data within 30 days, except a minimal set of records we're required to keep for legal, security, or dispute-resolution reasons.
• Reports and moderation records: kept for as long as needed to keep the community safe.

10. Your rights

Under Azerbaijan's Law on Personal Data (No. 998-IIIQ) and, if you are in the EU/EEA, the GDPR, you have the right to:

• access the personal data we hold about you;
• correct data that is wrong or out of date;
• delete your account and data (section 11);
• restrict or object to certain processing;
• receive your data in a portable form;
• withdraw consent at any time (for example, for notifications);
• lodge a complaint with the relevant data-protection authority.

To exercise any of these, email [email protected]. We'll respond within a reasonable time, and may need to verify your identity first.

11. Deleting your account

You can delete your account and data at any time from Profile → Delete my account in the app, or from telebehub.com/legal/delete-account. If you can't sign in, email us from your account's email address at [email protected] and we'll handle it. Deletion is permanent.

12. How we protect your data

All traffic between the app and our servers is encrypted with HTTPS/TLS. Passwords are stored only as salted hashes — never in plain text. Student ID photos live in a private area that is not publicly served and is wiped after review. We limit staff access to personal data to those who need it to run and moderate the service.

13. Children and age

TələbəHub is for university students and is not intended for anyone under 18. Our ID-verification step exists to enforce this. If we learn that we hold data about someone under 18, we will delete it.

14. Cookies and analytics

The mobile app does not use advertising cookies or third-party ad trackers. This website uses only what's necessary to serve the pages you request.

15. Changes to this policy

If we change this policy, we'll update the date at the top and, for significant changes, let you know in the app. Continuing to use TələbəHub after a change means you accept the updated policy.

16. Contact us

Questions, requests, or complaints about privacy? Email [email protected], or use Profile → Contact support in the app. We read every message.