Legal / Privacy Policy

1. Privacy Overview

At DreamyUni, your privacy is our priority. We collect only the information necessary to provide exceptional college admissions guidance. Your educational data is secure, confidential, and used exclusively to enhance your academic journey. We never sell, rent, or trade your personal information.

This policy applies to all DreamyUni services, including our website, mobile applications, AI chat systems, SAT preparation tools, essay assistance, and automated communication features.

2. Information We Collect

Account & Authentication

Google OAuth Data: Name and email address, profile photo (optional), account verification status.

Profile Information: High school and graduation year, intended college majors, geographic location (city/state).

Educational Data

Academic Records: GPA and class rank, course history and grades, AP/IB exam scores.

Test Scores: SAT and ACT scores, practice test results, PSAT/PreACT scores.

Application Materials & Activities

Essays & Writing: College application essays, personal statements, draft revisions and feedback, writing improvement metrics.

Extracurricular Activities: Clubs and organizations, leadership positions, volunteer work and service, sports and competitions.

Awards & Recognition: Academic honors, competition results, scholarships received, special recognitions.

Platform Usage & Technical Data

Interaction Data: AI chat conversations and context, feature usage patterns and preferences, study session duration and frequency, search queries and filter selections.

Technical Information: Device type, browser, and OS version, IP address and approximate location, session timestamps and duration, performance metrics and error logs.

3. How We Use Your Information

Core Service Delivery

AI-Powered Personalization: We analyze your academic profile to provide tailored college recommendations, personalized study plans, and targeted improvement strategies.

Academic Assessment: Your educational data helps us evaluate admission chances, identify strengths and weaknesses, and recommend optimal application strategies.

Platform Enhancement

AI Model Improvement: Anonymized interaction data helps train our AI to provide more accurate guidance and better understand student needs across diverse backgrounds.

Feature Development: Usage patterns guide our product roadmap, helping us build tools that genuinely solve student challenges and improve admission outcomes.

Automated Services & Communication

Cold Email Automation: With your explicit consent, we may send professional outreach emails to professors, admissions officers, or mentors on your behalf using your provided information and preferences. You maintain full control to review before sending, edit or cancel anytime, and opt-out completely.

4. Data Sharing & Disclosure

We never sell, rent, or trade your personal information. Your educational data remains confidential and is shared only in the limited circumstances outlined below.

Essential Service Providers

We share data with trusted service providers who help deliver our services:

• Google Cloud/Supabase: Secure data storage and processing
• OpenAI: AI-powered features with privacy controls
• Email Services: Transactional emails and notifications
• Analytics Providers: Anonymized usage insights only

Legal Requirements

We may disclose information when required by law: court orders or legal subpoenas, government agency requests with valid authority, protection against fraud or security threats, and enforcement of our Terms of Service.

Business Transfers

In the event of merger, acquisition, or sale, your data may transfer to the new entity under the same privacy protections.

5. Security & Protection

Your educational data is protected by enterprise-grade security measures. We employ multiple layers of protection to ensure your information remains safe and confidential.

Technical Safeguards

Encryption: AES-256 encryption at rest, TLS 1.3 for data in transit, end-to-end encryption for sensitive data.

Access Controls: Multi-factor authentication, role-based permissions, regular access reviews.

Operational Security

Monitoring: 24/7 security monitoring, automated threat detection, real-time incident response.

Compliance: Regular security audits, penetration testing, industry certifications.

AI Privacy Protections

Our AI systems are designed with privacy-first principles: data minimization (only process necessary information), local processing (keep sensitive data on our secure servers), no training on personal data (your essays won't train public models), and anonymization (remove identifiers before analysis).

6. Your Privacy Rights

You have the right to access, correct, or delete your personal information. You may also request data portability, opt-out of certain data uses, and withdraw consent at any time.

To exercise your rights, contact us at [email protected]. We respond to all requests within 30 days.

7. Data Retention

We retain your personal information for as long as your account is active or as needed to provide services. When you delete your account, we remove or anonymize your personal data within 90 days, except where we must retain information for legal compliance.

8. Children's Privacy

DreamyUni is designed for high school students. Users under 18 should have parental consent to use our services. We comply with applicable children's privacy laws and do not knowingly collect information from children under 13 without parental consent.

9. International Users

DreamyUni operates in the United States. If you access our services from outside the U.S., your information will be transferred to and stored in the U.S. We comply with GDPR and CCPA requirements for applicable users.

10. Policy Updates

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any material changes by email or through our platform. Your continued use of DreamyUni after such changes constitutes your acceptance of the updated policy.