Privacy Policy

1. Introduction

UniKnow, Inc. (the "Company", "we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you use the UniKnow service, formerly UniFlow Study (the "Service").

Please read this Privacy Policy carefully. If you do not agree with the terms of this Privacy Policy, please do not use the Service. By using the Service, you agree to the collection and use of information in accordance with this Privacy Policy.

2. Information We Collect

2.1 Information You Provide Directly

Account Information:

• Email address
• Password (stored encrypted)
• Display name (optional)
• Profile picture (optional)

Payment Information:

• Payments are processed by Stripe (some earlier subscriptions are processed by Creem); we do not directly store your full card or payment information
• We receive limited payment information from our payment processors, such as customer and transaction IDs, payment status, billing country (to calculate tax), and card brand and last four digits

User Content:

• Notes, documents, and other content you upload or create
• Conversation history with the AI assistant
• Voice transcription content

2.2 Information Collected Automatically

Usage Data:

• AI request count and type
• Feature usage statistics
• Subscription status and history
• Login times and session duration

Device and Technical Information:

• Device type and operating system
• Browser type and version
• IP address (for security and fraud prevention)
• Time zone settings

2.3 Information from Third Parties

School LMS Data, e.g. Canvas or Moodle (if you choose to connect):

• Course information (names, descriptions, schedules)
• Assignment details and due dates
• Course materials and files
• Announcements and discussions

Google Account Information (if you choose to sign in with Google):

• The email address, name, and profile picture Google shares with us

3. How We Use Your Information

We use the information we collect for the following purposes:

3.1 Providing and Maintaining the Service

• Creating and managing your account
• Processing and completing transactions
• Providing customer support
• Synchronizing and displaying course data from your school’s LMS

3.2 Improving the Service

• Analyzing usage patterns to improve features
• Identifying and fixing technical issues
• Developing new features and services

3.3 Communication

• Sending service-related notifications (such as account confirmation, security alerts)
• Responding to your inquiries and requests
• Sending product updates and marketing information (if you opt in)

3.4 Security and Compliance

• Detecting and preventing fraud and abuse
• Enforcing our Terms of Service
• Complying with legal obligations

4. AI Services and Other Third-Party Processing

When you use our AI features, your question — together with relevant passages retrieved from your course materials and any files or screenshots you attach — is sent to third-party providers to generate a response. Models and providers are configured by us. The providers we currently use, by purpose, are:

• AI models: OpenAI, DeepSeek, Google (Gemini), Anthropic, and API relay providers that forward requests through an OpenAI-compatible interface. Used for UniMind answers, class notes, Summarize this page, Screenshot & ask, and similar features.
• Speech recognition: Deepgram. During transcription, audio is streamed through our own relay server to Deepgram for recognition; lecture recording files stay on your device and are not uploaded.
• Translation: Google Translate (Google Cloud Translation) and DeepL. If you choose GPT or Gemini for translation, the corresponding AI model provider processes it.
• Web search: the model provider’s built-in search, or Tavily. Only search queries are sent to Tavily.
• Images in answers: Unsplash and Wikimedia Commons. Only the search terms used to find images are sent.
• Writing detection and rewriting: Phrasly and Undetectable.ai. Only when you use AI Shield, and only the text you submit for checking or rewriting.

Please note that these third-party providers have their own privacy policies and data handling practices, which you can review on their websites, for example:

• OpenAI: openai.com/privacy
• Google: policies.google.com/privacy

5. Information Sharing and Disclosure

We do not sell your personal information. We may share your information in the following circumstances:

5.1 Service Providers

We may share information with third-party service providers who help us operate the Service, including:

• Stripe (payment processing and tax calculation)
• Creem (payment processing for earlier subscriptions)
• Supabase (database and authentication)
• The AI, speech recognition, translation, search, and other providers listed in Section 4
• Resend (sending account emails such as verification codes and password resets, and service notifications)
• Cloudflare (bot protection at sign-up, plus domain and network services)
• DigitalOcean (server hosting for our website and speech recognition relay)
• Google Analytics (website traffic analytics)
• Crisp (live chat on our website; if you start a conversation, the messages and contact details you send are processed by Crisp)
• Google (authentication when you sign in with a Google account)

5.2 Legal Requirements

We may disclose your information if required by law or in response to valid legal process, such as court orders, subpoenas, or requests from government agencies.

5.3 Business Transfers

If we are involved in a merger, acquisition, or asset sale, your information may be transferred as part of that transaction. We will notify you before any such transfer and any different privacy policies that may apply.

5.4 Protection of Rights

We may disclose your information if we believe it is necessary to protect our rights, your safety or the safety of others, investigate fraud, or respond to government requests.

6. Data Storage and Security

6.1 Data Storage

Your data is stored in secure databases hosted by Supabase. We use Row Level Security (RLS) policies to ensure you can only access your own data.

6.2 Security Measures

Security measures we implement include:

• Encryption of data in transit and at rest
• Secure authentication mechanisms
• Access controls and permission management
• Regular security audits and updates
• Password hashing and salting

6.3 Data Retention

We retain your personal information for as long as necessary to provide the Service, or for longer periods as required or permitted by law. When you delete your account, we will delete or anonymize your personal information within a reasonable time, unless we are required by law to retain certain information.

7. Cookies and Tracking Technologies

7.1 Cookies We Use

Essential Cookies:

• Session cookies: to maintain your login status
• Security cookies: to prevent cross-site request forgery and other security threats

Analytics Cookies:

• Our website uses Google Analytics to understand how the site is used, such as which pages are visited and where visitors come from
• Google Analytics sets its own cookies, and its data handling is governed by Google’s privacy policy
• The live chat on our website (Crisp) sets its own cookies to keep your support conversation going

7.2 Managing Cookies

Most web browsers allow you to control cookies through browser settings. However, if you disable certain cookies, some features of the Service may not function properly.

8. Your Rights

Depending on applicable law, you may have the following rights:

8.1 Right to Access

You have the right to request a copy of the personal information we hold about you.

8.2 Right to Rectification

You have the right to request that we correct any information you believe is inaccurate and complete information you believe is incomplete.

8.3 Right to Erasure

You have the right to request that we delete your personal information under certain conditions. To delete your account, contact our support team at support@uniknow.ai.

8.4 Right to Restrict Processing

You have the right to request that we restrict the processing of your personal information under certain conditions.

8.5 Right to Data Portability

You have the right to request that we provide the data we have collected about you in a structured, commonly used, and machine-readable format.

8.6 Right to Object

You have the right to object to our processing of your personal information for certain purposes.

8.7 Right to Withdraw Consent

If we process your personal information based on your consent, you have the right to withdraw your consent at any time.

To exercise these rights, please contact us at privacy@uniknow.ai. We will respond to your request within 30 days of receiving it.

9. Children's Privacy

Our Service is not directed to children under 13 years of age (or a higher age as required by applicable law). We do not knowingly collect personal information from children under 13. If you are a parent or guardian and you are aware that your child has provided us with personal information, please contact us. If we become aware that we have collected personal information from children without verification of parental consent, we will take steps to delete that information.

10. International Data Transfers

Your information may be transferred to — and maintained on — computers located outside of your country or other governmental jurisdiction where data protection laws may differ from those in your jurisdiction. Our servers and databases are located in the United States. If you are located outside the United States and choose to provide information to us, please note that we transfer the data, including personal data, to the United States and process it there.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page. We will also update the "Last Updated" date at the top of this Privacy Policy.

For significant changes, we will provide advance notice via email or in-service notification before the changes take effect. We encourage you to review this Privacy Policy periodically for any changes.

12. Contact Us

If you have any questions, comments, or requests regarding this Privacy Policy or our data handling practices, please contact us at:

• Privacy inquiries: privacy@uniknow.ai
• General support: support@uniknow.ai
• Company: UniKnow, Inc.
• Mailing address: 131 Continental Dr, Suite 305, Newark, DE 19713, USA