Privacy Policy
Hoodie
Company: What's On! Campus Pty Ltd
Effective: March 16, 2026
1. Information We Collect
To provide a secure and functional experience, What's On! Campus Pty Ltd collects the following data:
Account Data
Your name, email address, and university affiliation details that you provide during onboarding.
In the 留澳助手 AU WeChat Mini Program, WeChat Cloud Development provides a trusted account identifier to our server. We store a one-way derived subject key so the Mini Program can reconnect you to your verified SETU email account without placing your WeChat OpenID, email, or server credentials in client authorization requests.
When you connect the SETU China app and Mini Program, we assign one internal SETU account identifier to your verified email, authenticated app session, and derived WeChat subject. This lets both clients show the same Profile Vault, checklist, plans, household and evidence. Device session records and one-time handoff tokens are retained only as long as required for security, linking and fraud prevention.
Rental History & Evidence
Property addresses you link to your profile, tenancy checklists, and files (photos, PDFs, documents) you upload to the Evidence Vault.
If you use native device features, Hoodie may also request access to your camera or photo library so you can capture or attach housing evidence directly.
Location Data
If granted permission, we use your device's GPS to center the map and show nearby transport and safety alerts.
Official Event and Plan Data
Hoodie may ingest public official-event metadata from City of Sydney What's On through our own server-side cache so we can render nearby official listings on the map and event detail screens.
If you create or join a public plan, we store the meetup details you provide, your attendee status, and any public comments you post in that plan's thread.
Notifications
If granted permission, Hoodie may send local reminder notifications for incomplete tenancy health checks and similar in-app follow-ups. On native devices, Hoodie may also register a push notification token so we can deliver account-relevant alerts and route them to the right state, university, or suburb audience.
The WeChat Mini Program does not silently register for mobile push notifications. It asks for WeChat subscription-message permission when you explicitly enable a reminder, and stores your template preference and WeChat's authorization result.
Chat Logs
Conversations with the in-app guidance tools to provide context-aware triage and resource routing.
2. How We Use Your Data
Public Map Blips
When you report a Scam or Maintenance issue, the building address and the category of the issue are displayed publicly. Your name, unit number, and specific uploaded evidence remain strictly private and are not visible to the public.
Legal Dossiers
Your private evidence and profile details are only compiled into a PDF dossier when you explicitly trigger the "Generate Legal Dossier" action.
Service Improvement
To maintain platform security, prevent abuse, and improve AI triage accuracy.
Public Plan Visibility
Public plans are visible to signed-in users across supported app variants. When you create or join a plan, other users can see your display name in the format First L., the meetup details, the attendee count, and any public comments in that thread. Your email address is not shown publicly in the event experience.
3. Data Sharing & Disclosure
We do not sell your personal data.
We will only share your information under the following circumstances:
With Your Consent
When you choose to export and share your Legal Dossier with third parties (e.g., a tribunal or university).
Legal Compliance
If required by Australian law, a court order, or a valid request from law enforcement or regulatory authorities.
Moderation and Reports
If a plan or comment is reported, we may retain the report details, the associated public content, and the account-level identifiers necessary to investigate, respond to complaints, and take moderation or takedown action.
4. Data Security
We utilize industry-standard encryption (via Supabase) to protect your Evidence Vault and account details. However, no digital transmission is entirely secure, and we cannot guarantee absolute security.
WeChat Mini Program private requests pass through Cloud Development and a signed server-to-server gateway. AppSecret, gateway signing secrets, Supabase service credentials, AI credentials, and reviewer codes are stored only in server environments. Approved event and guide images may be copied into controlled cloud storage after host, MIME type, redirect, and file-size checks.
5. Your Rights
You have the right to access, modify, or permanently delete your account and all associated data (including map blips and evidence) through your Hoodie account controls or by contacting our support team from the email address associated with your account.
6. Contact Us
For privacy concerns, data deletion requests, or to dispute a map marker, please contact our support team:
Hoodie
What's On! Campus Pty Ltd