Privacy policy
Last updated 25 October 2026
This policy explains what personal data Unizy (unizy.uk) collects, why, and your rights. Unizy is run by Ammaar Hasan, who is the data controller. Contact: [email protected].
What we collect
- Your email address, if you create an account, so we can send you sign-in links and keep your account.
- Your study data, if you are signed in: your university, course, year and modules, and the notes, flashcards, test answers, progress and marked work you save. If you are not signed in, this stays in your browser on your device and we never receive it.
- Work you send to the AI: questions to the tutor, answers and essays you submit for marking, and photos of your work. These are sent to our AI provider to produce a reply. We don’t keep the photos. The marked result, including any transcription of your photos, is saved to your account so you can see it later.
- AI usage counts: how much of your daily AI allowance you have used.
- Technical data: our hosting providers process your IP address and basic request information to deliver the site and keep it secure.
We don’t use advertising or analytics trackers, and we don’t sell your data.
Why we use it (lawful basis)
- To provide the service you asked for: your account, saving your work, the AI tutor and marking (performance of a contract).
- To keep Unizy secure and prevent abuse, including daily AI limits (legitimate interests).
Who processes it for us
- Supabase: accounts and database, hosted in London (eu-west-2).
- Cloudflare: website hosting and delivery.
- Anthropic: the Claude AI models that power the tutor and marking. Anthropic processes what you send to produce a reply. Under its commercial terms, inputs sent through its API are not used to train its models by default. Anthropic may process data outside the UK under appropriate safeguards.
- Our email provider: sends sign-in emails.
- Google Fonts: serves the site’s fonts, which shares your IP address with Google when pages load.
Browser storage
Unizy uses your browser’s local storage to keep you signed in and to save your work on your device. This is strictly necessary for the service, so we don’t ask for cookie consent. We don’t set tracking cookies.
How long we keep it
We keep your account and study data until you delete your account. We delete accounts that have been inactive for 24 months. AI usage counts are kept for up to 12 months.
Your rights
Under UK data protection law you can ask to access, correct, delete or export your data, and object to or restrict how we use it. To delete your account and everything saved in it, or to use any of these rights, email [email protected]. We’ll respond within one month. You can also complain to the Information Commissioner’s Office (ico.org.uk).
Age
Unizy is for university students and is not intended for children under 16.
Changes
If we change this policy we’ll update the date above, and tell signed-in users about significant changes.