Privacy policy

This privacy policy explains how SkyBlox Systems LTD (“we”, “us”) collects and uses personal data when you use Univerra, including the Univerra website, web app and mobile apps (together, the “Service”). It is written with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018 in mind.

1. Who we are

The data controller for the Service is SkyBlox Systems LTD, company number [Registered company number — to be added], registered office [Registered office address — to be added]. You can contact us about privacy using the contact form or at [Privacy contact — to be added].

For legal review: Confirm whether a Data Protection Officer or UK representative is required and, if so, add their details. Confirm ICO registration status and reference.

2. Data we collect

Data you give us

• Account data: your name, email address, password (stored as a secure hash) and, optionally, your university, course and year of study.
• Study data: timetable entries, calendar events, assignments and tasks, study plans, availability, modules, assessments and grades, goals, habits and focus sessions.
• Documents: PDFs and notes you upload for AI revision, and the flashcards, quizzes and summaries generated from them.
• Budget data: income (such as maintenance loan amounts and payment dates), rent, recurring costs, transactions and category limits that you enter manually. Univerra does not require a bank connection.
• Study group data: sessions, tasks and resources you choose to share with a group.
• Messages: what you write to the AI assistant, and messages you send us through the contact or feedback forms.
• Early access sign-ups: your email address, optionally your university and a referral code, and your consent to be contacted.

Data collected automatically

• Technical data such as device type, operating system, app version, IP address and log data.
• Usage data about how features are used, to keep the Service reliable and improve it. [Describe analytics tools and cookies, if any]

Advertising data

Univerra is free and funded by ads from Google (AdMob in the Android and iOS apps, AdSense on the web). Google may collect device identifiers, IP address, cookies or similar technologies, and information about the ads you see and interact with. In the UK and EEA we ask for your consent, using Google's consent message, before Google uses this data to personalise ads. Without consent, Google may still show non-personalised ads, which use limited data such as your approximate location. You can change your choice at any time in Settings → Privacy & data → Ad choices.

We never share your notes, documents, grades, budget, calendar or assistant conversations with advertisers.

3. How we use your data and our lawful bases

For legal review: Confirm lawful bases for each purpose, any legitimate interests assessments, and whether any data (for example, information about health or disability in notes) could be special category data requiring an Article 9 condition. Confirm the advertising consent setup (Google-certified consent message for UK/EEA users, PECR consent for ad cookies on the web) and the wording on Google as a controller.

4. AI processing

• AI features run only when you use them. We send AI providers the minimum data needed for that request, such as the relevant passages of a document you uploaded or the details of the tasks you asked about.
• The AI assistant accesses your Univerra data only through secure, scoped functions, and only for the request you made.
• Study plans are scheduled deterministically. AI is used to explain plans and make recommendations, which you can accept or ignore.
• AI output can be wrong. Generated revision material includes references to your source documents so you can check it.
• AI providers: [AI provider(s)]. [Confirm provider terms on retention and on not using customer data for model training]

For legal review: Confirm whether any AI processing amounts to automated decision-making with legal or similarly significant effects (UK GDPR Art. 22). Confirm international transfer safeguards for AI providers.

5. Sharing your data

We do not sell your personal data. We share personal data only with service providers that help us run the Service, under contracts that require them to protect it, or where the law requires it.

• Hosting and infrastructure: [Hosting provider]
• Database and file storage: [Database / storage provider]
• AI processing: [AI provider(s)]
• Email delivery: [Email provider]
• Advertising: Google (AdMob and AdSense), as an independent controller for ad personalisation. See how Google uses information from sites or apps that use its services.
• Error monitoring and analytics: [Monitoring / analytics provider, if any]

Study groups only see what you choose to share with them. Your private calendar, budget, grades and documents are never shared with a group automatically.

6. International transfers

Some providers may process data outside the UK. Where they do, we use appropriate safeguards such as UK adequacy regulations or the International Data Transfer Agreement / UK Addendum. [List transfer locations and safeguards]

7. How long we keep data

• Account and study data: for as long as your account is active.
• After you delete your account: deleted from live systems within [X days] and from backups within [X days].
• Uploaded documents: until you delete them or your account.
• Early access sign-ups: until you unsubscribe, or [X months] after early access ends.
• Logs: [X days].

8. Your rights

Under UK data protection law you have the right to:

• access the personal data we hold about you;
• have inaccurate data corrected;
• export your data (data portability). You can export your data from your account settings [confirm location in app];
• delete your data (erasure). You can delete your account and its data from your account settings [confirm location in app];
• restrict or object to certain processing, including processing based on legitimate interests;
• withdraw consent at any time, where we rely on consent.

To exercise your rights, use the in-app settings or contact us using the contact form. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk.

9. Children

Univerra is intended for university students. You must be at least 16 years old, or the minimum age required by applicable law in your country, to use the Service.

For legal review: Confirm the minimum age and the approach to users under 18, including the ICO Age Appropriate Design Code (Children's Code) and parental consent requirements in other jurisdictions.

10. Security

We use technical and organisational measures to protect your data, including encryption in transit, [encryption at rest], access controls and secure password hashing. No system is completely secure; if a breach affects you, we will tell you where required by law.

11. Changes to this policy

We may update this policy. If changes are significant, we will tell you in the Service or by email before they take effect.