Legal
Privacy Policy
How AI Learning Universe handles your data. Written to be read, not to be survived.
Last updated .
The short version
- You can read every lesson, lab, glossary entry and paper explanation without an account and without being tracked.
- There are no analytics, no advertising, no tracking pixels and no third-party trackers anywhere on this site.
- An account exists only to remember your learning progress. It is created with Google sign-in, which gives the site your name, email address and profile picture.
- Questions you ask the AI tutor are sent to Hugging Face and Google to be answered, and are not stored on this site afterwards.
- Email uvieai49@gmail.com to have your account and all of its data deleted.
Who is responsible
AI Learning Universe is run by an individual, not a company. Contact details and background are on the about page. For questions about your data, email uvieai49@gmail.com.
Browsing without an account
No sign-in is required to read anything. When you browse without an account, the site sets no identifying cookie and records no behavioural data about you.
The hosting provider, Vercel, writes ordinary server logs for every request as part of operating the service. These contain the URL requested, a timestamp, the browser’s user-agent string and the requesting IP address. They exist for reliability, security and abuse prevention; they are not used to build a profile of you, and they are not combined with account data.
What an account stores
Signing in is optional and is handled entirely by Google OAuth. This site never sees or stores your Google password. From Google it receives your name, email address and profile picture URL, and stores them so that the site can greet you and so that your progress has an owner.
Everything else in your account is generated by your own use:
- Which lessons you have started and completed, and when.
- Quiz and exercise attempts, including the answers you selected and whether they were correct.
- Mastery estimates and review scheduling derived from those attempts.
- Bookmarks and any notes you write.
- Interactive lab sessions, so a simulation can be resumed where you left it.
- Learning events — a timestamped record of actions such as completing a lesson — used to power your dashboard and skills map.
All of it is stored in Supabase with row-level security enabled on every table, which means the database itself enforces that your rows are readable only by your own signed-in session.
The AI tutor
The tutor answers using retrieval-augmented generation, and that involves two external services on every question:
- Hugging Face receives your question text in order to turn it into an embedding vector so the site can find the relevant lesson passages.
- Google (Gemini) receives your question together with the retrieved lesson text, and returns the answer that is streamed back to you.
Your conversation with the tutor is not written to the database. There is no chat or message table in this project, so once the browser tab is closed the conversation is gone from this site. What those two providers do with the request on their side is governed by their own terms, so treat the tutor the way you would treat any chatbot: do not paste anything into it that you would not want leaving your machine.
Rate limiting is applied in memory on the server to prevent abuse. It counts recent requests and stores nothing durable.
Cookies
The site uses functional cookies only, and there is no consent banner because there is nothing to consent to beyond what is strictly needed to make the site work:
- A Supabase authentication cookie that keeps you signed in. It is set only after you sign in, and removing it signs you out.
- A small preference value remembering your light or dark theme choice.
No advertising, analytics, fingerprinting or cross-site tracking cookies are set by this site.
Where your data goes
These are the only third parties that process data on behalf of the site:
- Supabase — database and authentication. The database is hosted in Tokyo, Japan.
- Vercel — hosting, content delivery and server logs.
- Google — OAuth sign-in, and the Gemini model that generates tutor answers.
- Hugging Face — embedding model used for tutor retrieval.
Because the database is in Japan and the other providers operate globally, using an account means your data is transferred outside India. Your data is never sold, rented or shared with advertisers, and there are no data brokers involved.
How long data is kept
Account data is kept for as long as the account exists, because its entire purpose is to remember your progress across sessions. When you ask for deletion, it is deleted.
Deleting your account and data
Email uvieai49@gmail.com from the address you signed in with, and say that you want your account deleted. Everything listed above — profile, progress, mastery, attempts, bookmarks, notes, lab sessions and learning events — is removed. There is no self-service delete button yet; when there is one, this page will say so.
Age requirement
The lessons are written to be useful at any age, and reading them requires no account and no personal data at all.
Creating an account is different, because it processes personal data. You must be 18 or older to create an account. If you are under 18, a parent or guardian must give consent and hold the account with you. This follows the Digital Personal Data Protection Act, 2023, which requires verifiable parental consent before a child’s personal data is processed. If you believe a child has created an account without that consent, email uvieai49@gmail.com and it will be deleted.
Your rights
Under the Digital Personal Data Protection Act, 2023, you can ask for:
- a copy of the personal data held about you, and a summary of how it is processed;
- correction of anything inaccurate or incomplete;
- erasure of your data, as described above;
- withdrawal of consent, which in practice means deleting the account — you can keep reading the site afterwards without one.
All of these go to the same address: uvieai49@gmail.com. This is a one-person project, so replies are best-effort rather than same-day, but requests are acted on.
Security
Sign-in is delegated to Google, so no passwords are held here. Every database table enforces row-level security. Server-only credentials stay on the server and are never sent to the browser. No system is perfect, and this one is maintained by one person; if you find a security problem, reporting it to uvieai49@gmail.com is genuinely appreciated.
Changes to this policy
When this policy changes, the date at the top of the page changes with it. Material changes to what is collected or who it is shared with will be described here rather than quietly edited in.
Governing law
This policy is governed by the laws of India. The related terms of use apply alongside it.