Privacy Policy

Last updated: 22 May 2026

⚠️ This is a template. A real privacy policy must be reviewed by a lawyer familiar with GDPR (if you serve EU users), Uzbekistan Personal Data Law No. ЗРУ-547, and applicable jurisdictions before public launch.

1. Who We Are

UniVelloAI is operated by Alisher Allanazarov (the "Operator"). Contact: alyoshallanazarov@gmail.com.

2. What Data We Collect

Category	Purpose
Email + password hash (Firebase Auth)	Account creation and sign-in
Name, date of birth, gender, country	Personalized university recommendations
Saved universities (favorites)	Restore your shortlist across devices
Reviews, ratings, stories you submit	Display on public pages
Search queries and clicks (anonymized)	Improve recommendations and add missing universities
Approximate country (from IP, via Cloudflare)	Show relevant content; no IP address stored
Google Analytics (cookieless via gtag)	Aggregated usage statistics

3. What We Do NOT Collect

We do not collect passport numbers, financial data, biometrics, or precise location.
We do not sell your personal data to third parties.
We do not run paid retargeting ads.

4. Who Processes Your Data

Google Firebase (Authentication + Firestore) — stores account and saved data. Firebase Privacy
Google Analytics — aggregated traffic statistics. Google Privacy
Cloudflare — DNS and country detection only.
Wikipedia, thum.io — fetch university photos (no personal data shared).

5. How Long We Keep Data

Account data: until you delete your account.
Anonymized analytics: up to 26 months (Google Analytics default).
User-submitted reviews: until you ask us to remove them.

6. Your Rights

Access and download your data — email us.
Correct inaccurate data — from your profile or by emailing us.
Delete your account and all linked data — from profile settings.
Withdraw consent at any time.
Lodge a complaint with the data protection authority in your country.

7. Children

The Service is intended for users aged 10 and older. We do not knowingly collect data from younger children. If you believe we have such data, email us and we will delete it.

8. Cookies & Local Storage

We use browser localStorage to remember your language, dark mode preference, saved universities, and photo cache. We do not use tracking cookies. Google Analytics uses its own cookieless tracking (gtag).

9. International Transfers

Firebase data is stored on Google Cloud servers (typically in the US/EU). By using the Service, you consent to this transfer.

10. Changes to This Policy

We may update this policy. Material changes will be announced via email and on the homepage banner. The "Last updated" date at the top reflects the latest revision.

11. Contact

Questions or requests? Email alyoshallanazarov@gmail.com. We aim to respond within 7 days.