We collect the following categories of information:

• Account information — name, email, institution, department, academic level, and selected courses.
• Usage data — questions asked, materials uploaded, study activity, and engagement metrics.
• Payment information — processed via Moniepoint. We do not store full card details; all payment data is handled by PCI‑DSS compliant processors.
• Device information — IP address, browser type, device type, and operating system for security and analytics purposes.
• Uploaded course materials — lecture notes, past questions, slides, and audio transcripts. These materials are not private and are shared with all students enrolled in the relevant course to foster collaborative learning.

Your data is used to:

• Provide personalised academic answers aligned with your enrolled courses.
• Track study progress and generate readiness reports.
• Facilitate community features such as study groups and discussion threads.
• Process payments and manage credit allocations.
• Improve the platform through aggregated analytics.
• Communicate important updates, exam reminders, and platform notifications.
• Train, refine, and improve our AI models — including the retrieval, enrichment, and answer-generation pipelines — using the materials you upload and the questions you ask.

Any lecture notes, past questions, slides, audio transcripts, or other academic content you upload to UniUI will be available to other students enrolled in the same course. These materials are not private.

By uploading content, you confirm that you have the right to share it and you grant UniUI a non‑exclusive, worldwide, royalty‑free licence to use, reproduce, modify, and distribute the content for the purpose of providing and improving the platform, including training our AI models.

To protect the academic community from copyright infringement, uploaded materials are automatically screened for abusive and copyright-infringing content. Materials that violate this policy may be removed and the responsible account may be restricted or terminated. You may delete your own uploads at any time; however, copies already used for AI training may persist.

You may delete your uploaded materials at any time. However, copies already used for AI training may persist in trained models and cannot be retroactively removed.

Your data is stored on secure cloud servers operated by trusted infrastructure providers, including:

• Supabase (authentication and database)
• Neon (AI data storage)
• Qdrant (vector search)
• Cloudflare R2 (asset storage)

All data is encrypted in transit (TLS 1.3) and at rest. We implement industry‑standard security practices, including regular audits, access controls, and vulnerability assessments. Your password is hashed using bcrypt and never stored in plain text.

We do not sell your personal data to third parties. Data sharing occurs only in the following circumstances:

• Uploaded course materials are shared with other students enrolled in the same course to support collaborative academic inquiry.
• Anonymised, aggregated data may be used for research purposes to improve educational outcomes.
• Course representatives can view anonymised engagement statistics for their respective courses.
• Legal requirements — we may disclose information when compelled by applicable law, court order, or governmental regulation.

You have the following rights regarding your personal data:

• Access & update — view and modify your personal data at any time via the Settings page.
• Export — download a complete copy of your data in a GDPR‑compliant format (JSON/CSV).
• Account deletion — request permanent removal of all associated data within 30 days.
• Delete uploaded materials— remove specific uploads from the platform. Note that AI models trained on those materials cannot be “untrained” retroactively.

We use cookies to enhance your experience:

• Essential cookies — required for authentication, session management, and security.
• Analytics cookies — help us understand platform usage patterns and performance bottlenecks.

You can disable non‑essential cookies in your browser settings. Disabling essential cookies may impair platform functionality.

We integrate with the following third‑party services, each with its own privacy policy:

• Supabase — authentication and database hosting.
• Neon — AI data storage and management.
• Qdrant — vector search and retrieval.
• Cloudinary — image hosting and optimisation.
• Cloudflare — frontend hosting, CDN, and asset storage.
• Moniepoint — payment processing and transaction verification.