Privacy Policy

UniDoodle is operated by Visuality Limited, trading as UniDoodle, registered in Ireland under company number 751062. Registered office: NovaUCD, Belfield Innovation Park, University College Dublin, Dublin 4, D04 V2P1, Ireland.

Data protection contact: support@unidoodle.ie.

• Account details (name, email, role, country, and — for organisations — school name and job title).
• Learning data (questions attempted, answers submitted, images or sketches uploaded, progress and feedback).
• Billing metadata processed by Stripe (we do not store card numbers).
• Basic technical logs (IP, browser, referrer) used to keep the service reliable and secure.

• To provide the service you signed up for and improve feedback quality.
• To manage subscriptions, trials and referral credits.
• To communicate essential service messages (verification, receipts, changes).
• To detect abuse and keep student data safe.

We rely on: contract (to deliver the service you asked for), legitimate interests (product improvement, security, fraud prevention), consent (optional analytics cookies) and legal obligation (tax and accounting records).

UniDoodle is designed for learners aged 12+. Where students under the age of digital consent in their jurisdiction use the service through a school or organisation, we rely on that organisation to obtain the necessary parental consent. Accounts created directly by an individual require the user to confirm they are 16 or older, or that a parent or guardian has consented on their behalf.

We share data only with vetted subprocessors that help us run the service: EU-hosted cloud hosting and database infrastructure, email delivery, payments (Stripe), and AI model providers used for feedback. A current subprocessor list is available on request from support@unidoodle.ie.

Account data is retained for the life of your account and for up to 12 months after deletion for legal and dispute-resolution purposes. Billing records are retained for the period required by tax law.

The UniDoodle app lets students use the account their school or teacher created for them. You cannot create an account or buy anything in the app.

Signing in. We use your email address and password to sign you in. The app keeps your sign-in on your device in its secure storage (the iOS Keychain or Android Keystore).

Face ID, Touch ID and fingerprint (optional). If you turn this on, your email and password are saved in your device's secure storage and are only released after your device's own Face ID, Touch ID or fingerprint check succeeds. Your face or fingerprint data never leaves your device and is never sent to us. Turning the setting off, or another person signing in on the same device, deletes the saved details.

Camera and photos. The app uses the camera to scan your teacher's class QR code (the scan is processed on your device) and, when you choose to, to photograph your written working for an answer or for a question to Pip. A photo is only uploaded when you submit it with an answer or send it to Pip. On Android, the QR scanner is Google's ML Kit, which sends Google basic diagnostic information about the scanner (such as the phone model, app version, how long a scan took, any error codes and a random identifier for the installation) so Google can keep it working. It never includes the picture or what the code says.

Notifications (optional). If you allow notifications, your device's push token (an identifier issued by Apple or Google) is stored with your account so we can tell you when your class goes live, when your work is marked, when something is due, and send an optional daily reminder. You can switch each type off, and set quiet hours, in the app. Notifications are delivered through Apple Push Notification service on iPhone and iPad and Firebase Cloud Messaging (Google) on Android. Signing out removes the token. The in-app list of notifications is kept for 60 days.

Live class on your lock screen (iPhone). While you are in a live session, the app can show its progress on your lock screen and in the Dynamic Island. For this, a temporary token from Apple is stored for that session only and deleted when the session ends.

Your learning activity. We store your answers, marks and teacher feedback, the mistakes you mark as reviewed, the questions you save for later and your progress, so your teacher and you can see how you are doing and so the app can suggest a short daily plan.

Pip, the in-app assistant. Messages and photos you send to Pip are sent to OpenAI, which processes them on our behalf to write Pip's reply. We do not keep Pip conversations; OpenAI may keep them for up to 30 days to check for misuse before deleting them. You are shown a notice before your first message.

No advertising or tracking. The app has no advertising and no tracking, and apart from the scanner diagnostics described above it has no analytics tools. We do not sell your data or share it with advertisers.

Deleting your account. In the app, go to Profile → Request account deletion, or email support@unidoodle.ie from the email address on your account. We will act on your request within 30 days and confirm by email. As set out under Retention, some account records may be kept for up to 12 months after deletion for legal and dispute-resolution purposes.

You may request access, correction, deletion, portability, or objection to processing. Contact support@unidoodle.ie. You also have the right to lodge a complaint with your local supervisory authority (e.g. the Irish DPC or UK ICO).

Some subprocessors are based outside the UK/EEA. Where required we rely on Standard Contractual Clauses. We confirm the transfer mechanism for each subprocessor before it is used, and we can share those details on request.

We'll update this policy when the service or the law changes. Material changes will be notified by email or in-app before they take effect.