Privacy Policy

• Your college email. We use it to sign you in with a one-time code and to check that it ends in .edu.
• Your college. We work it out from your email address.
• Your profile. Your first name, your major (optional), and your confirmation that you're 18 or older. You need a profile to earn points and redeem rewards.
• What you do in the app. Which deals you use (the shop and the day), the points you earn and spend, the rewards you redeem and their codes, invite codes you share or use, and any shops you ask us to add (shop name, address or neighborhood, and your college).
• On your phone. Your browser keeps the college you pick in the “Deals near” menu and a note of which deals you looked at during your visit. Staying signed in uses a secure sign-in session.

• When you open Deals, your phone asks if it can share your location. If you say yes, we sort shops by distance. To find featured or popular shops near you, we send a rounded location (about one city block) to our database. It is used for that lookup and isn't saved.
• When you use a deal, your phone's location is sent so our server can check you're within about 150 meters (roughly 500 feet) of the shop before points are added. We don't save your coordinates. We only save that a visit was confirmed, with the shop and the time.
• You can say no. You can still pick your college, see deals and show your pass. You just can't earn points.

• To sign you in and show your student pass.
• To show deals, keep track of points and rewards, and run invites.
• To keep things fair: one use per shop per day, and the location check.
• To count how popular deals are. A number of students is shown only when it is five or more.
• To contact you about your account or about security.

We do not use your data for advertising, and we do not sell or rent it.

• You can see your own profile, points and codes. The database only lets each student read their own records.
• Our administrators can see profiles, check-ins, redeemed rewards and shop requests, so we can run the program, hand out rewards and fix problems.
• Other students never see your name or email.
• Shops don't get your name, email or account. Your pass shows your college and a live clock.
• Services that run the app for us: Supabase (database, sign-in and photo storage), Vercel (hosting) and Resend (sends your sign-in code emails). They handle data only to provide those services.
• Google Maps. The Directions button opens Google Maps, which has its own privacy policy.
• The law. We may share information if the law requires it.

We keep your information while your account is open. If you ask us to delete your account, we delete your profile, points history and codes. Copies in our system backups may take a little longer to disappear.

• Turn location off in your phone or browser settings at any time.
• Clear the college you picked by choosing “My current location” in the menu.
• Email us to see, correct or delete your information: studentfirstnyc@gmail.com.

Student First is for college students. You need a .edu email to sign in. To earn points or redeem rewards you must confirm you are 18 or older. We don't knowingly collect information from children under 13.

We limit who can see your data and protect it with access rules in our database. No service is perfectly secure, so please keep access to your email safe.

If we change this policy, we'll update the date above. For big changes we'll also tell you in the app.

Questions? Email studentfirstnyc@gmail.com.