Privacy Policy

Who operates MY UNIVERSITY

MY UNIVERSITY is operated by Tuoheti Guzailinuer. For privacy questions or requests, contact lettherebelightboom@gmail.com.

Information we collect

When you create an account, you provide a username, password, and self-declared age category: under 14, 14–17, or 18+. We do not ask for your exact date of birth. We do not collect guardian email or guardian identity information.

Passwords are stored as salted scrypt hashes, not as readable passwords. The account record also contains generated account and student identifiers, the account creation time, age-category information, and whether and when you granted AI Processing Permission. Withdrawing permission removes the active permission record.

You can name your professors and may choose to provide your own name or other details in learning messages. Please only share personal information that is appropriate for your learning.

Learning information

To provide continuity, MY UNIVERSITY may store conversations with the Guide, Architect, Professor, and Critic; interests, questions, experiences, skills, projects, and uncertainties; directions, Starting Maps, curricula, and learning journeys; and professor names and conversation histories.

It may also store lessons, modules, goals, assignments, work and revisions you submit, feedback, critiques, assessments, evidence references, competencies, and progress. AI-generated observations and assessments may be included in your learning record and are not necessarily facts you have confirmed. Messages and work may contain personal information that you choose to provide.

How AI processing works

AI Processing Permission is required before AI learning features can be used. Relevant learning information—such as messages, recent conversation history, learning context, curriculum details, submitted work, revisions, and assessment information—may be sent by the MY UNIVERSITY backend to OpenAI to provide those features.

Your age category is not sent to OpenAI. Guardian information is not collected. Passwords and session cookies are not included in AI prompts. Learning requests may include an internal student-record identifier and information you have chosen to share in your learning activity.

You can withdraw AI Processing Permission in Account / Settings. AI learning features will then be unavailable unless you grant permission again.

OpenAI

MY UNIVERSITY uses the OpenAI API. The OpenAI organization settings for MY UNIVERSITY currently have model-feedback sharing, evaluation and fine-tuning data sharing, and voluntary input/output sharing for model improvement disabled.

Current MY UNIVERSITY Responses API requests set store: false. The OpenAI API call-logging setting is configured as “Enabled per call.” These settings do not amount to Zero Data Retention, and MY UNIVERSITY does not promise that OpenAI or other providers retain no data. Provider processing and retention may apply under their settings and terms; no fixed OpenAI retention period is promised here.

Age ranges and minor reminders

MY UNIVERSITY welcomes learners of all ages. Age category is self-declared and does not block learning or AI features. Users under 18 receive a non-blocking safety and purchase reminder advising them to speak with a parent or legal guardian and get permission before making a purchase.

MY UNIVERSITY does not currently verify a learner’s age or guardianship.

Membership subscriptions and payments

MY UNIVERSITY offers an optional auto-renewable monthly membership through Apple’s App Store. The Guide remains available without a paid membership. An active membership unlocks The Architect, The Professor, The Critic, and other faculty experiences designated as paid membership features.

Subscription purchases, billing, renewals, cancellations, refunds, and payment processing are handled by Apple through the App Store. MY UNIVERSITY does not directly collect, process, or store your credit card or bank payment details.

MY UNIVERSITY receives limited subscription entitlement information needed to determine whether membership access is active. This includes subscription status, the product identifier, transaction identifiers and entitlement information, purchase and expiration dates, revocation status, and an account-linking identifier used to associate the subscription with your signed-in MY UNIVERSITY account. Verified entitlement information is stored with your account and used only to provide and enforce paid access.

You can manage or cancel your subscription through your Apple Account / App Store subscription settings. On iPhone, open Settings, tap your name, then tap Subscriptions. Deleting your MY UNIVERSITY account does not cancel your Apple subscription; manage cancellation separately through Apple.

Cookies and sessions

The website uses an authentication cookie to keep you signed in. It is HttpOnly and SameSite=Strict, and it is Secure in production. Its configured lifetime is up to seven days, but a backend restart can invalidate the server-side session earlier. The iPhone app displays the website using WKWebView and its persistent website data store.

Data storage and retention

Account information and learning records are stored by the MY UNIVERSITY backend. Active account and learning information is kept while needed to provide the service. You can delete your account from Account / Settings. MY UNIVERSITY does not set a fixed retention period for active records in this policy.

Railway hosts the production application. Infrastructure or provider logs and backups, where applicable, may be governed by separate provider retention settings. Their configuration and retention periods are not specified here.

Account deletion

You can permanently delete your account from Account / Settings by entering your current password and confirming the deletion. The backend deletes the authenticated account record and its associated student learning record, revokes that account’s active in-memory sessions, and clears the current sign-in cookie. It does not target another user’s records.

Provider logs or backups, where applicable, and data retained separately by third-party services may follow their own retention settings and may not be removed by this account-deletion action.

Service providers

OpenAI processes relevant learning information to provide AI features. Railway hosts the production application. Apple handles App Store subscriptions and payments and provides subscription entitlement information used to verify membership access. The current application does not include an advertising SDK or analytics SDK.

Your choices and privacy requests

You choose what to include in learning conversations and submissions. You can grant or withdraw AI Processing Permission and delete your account. To ask a privacy question or make a privacy request, email lettherebelightboom@gmail.com.

Changes to this policy

If this policy changes, the updated version will be posted on this page with a new effective date.

Contact

For questions about this Privacy Policy or your information, contact Tuoheti Guzailinuer at lettherebelightboom@gmail.com.