What we collect, why we collect it, and what you can do about it.
Last updated 8 August 2026
Draft — not legal advice
This document was drafted from the systems this product actually uses and has not been reviewed by a lawyer. Have counsel review it before you rely on it or present it as final. Anything below that does not match how Univation really operates should be corrected rather than published.
Univation is an education platform that connects students, educators, mentors and institutions, and provides AI-assisted teaching and learning tools. This policy explains how we handle personal data across the website and the platform.
To be completed: the registered legal entity, its address, and the contact point for data protection enquiries (and a Data Protection Officer, if one is appointed).
We collect the following, depending on how you use Univation:
We do not sell personal data, and we do not use your class content or AI conversations to train our own models.
These providers process personal data as part of delivering the service. Each one only receives what its function requires.
To be completed: where each provider stores data, and the transfer safeguards that apply where data leaves your jurisdiction.
Students may join a class either with a full account or as a guest via a class code. A guest roster entry deliberately holds no date of birth and no guardian details — it exists only to attribute work within one class.
Where a student account records a date of birth, it is used to determine whether the student is a minor, and where they are, guardian contact details and a consent record are kept alongside the account.
To be completed: the minimum age for a Univation account, how guardian consent is obtained and verified, and how this policy maps to the child-privacy rules that apply in the markets you operate in.
Access is enforced in the database itself, not merely in the interface. Each row carries a policy describing who may read or change it, so a profile marked private stays private whichever part of the product asks for it.
In practice: your profile is visible according to the visibility you choose; class material and messages are visible to members of that class and its instructors; institution records in the public directory are public by design.
We keep personal data for as long as your account is active. When you delete your account, associated personal data is deleted or anonymised.
To be completed: concrete retention periods per data category, and how long backups persist after deletion.
Depending on where you live, you may have the right to access the personal data we hold about you, to correct it, to delete it, to receive a portable copy, to object to certain processing, and to withdraw consent you have given.
To exercise any of these, contact us. You also have the right to complain to your local data protection authority.
We will update this page when our practices change, and will revise the date at the top. Where a change materially affects you, we will tell you directly.
