Privacy Policy

UniDoodle is operated by Visuality Limited, trading as UniDoodle, registered in Ireland under company number 751062. Registered office: NovaUCD, Belfield Innovation Park, University College Dublin, Dublin 4, D04 V2P1, Ireland.

Data protection contact: privacy@unidoodle.com.

• Account details (name, email, role, country, and — for organisations — school name and job title).
• Learning data (questions attempted, answers submitted, images or sketches uploaded, progress and feedback).
• Billing metadata processed by Stripe (we do not store card numbers).
• Basic technical logs (IP, browser, referrer) used to keep the service reliable and secure.

• To provide the service you signed up for and improve feedback quality.
• To manage subscriptions, trials and referral credits.
• To communicate essential service messages (verification, receipts, changes).
• To detect abuse and keep student data safe.

We rely on: contract (to deliver the service you asked for), legitimate interests (product improvement, security, fraud prevention), consent (optional analytics cookies) and legal obligation (tax and accounting records).

UniDoodle is designed for learners aged 12+. Where students under the age of digital consent in their jurisdiction use the service through a school or organisation, we rely on that organisation to obtain the necessary parental consent. Accounts created directly by an individual require the user to confirm they are 16 or older, or that a parent or guardian has consented on their behalf.

We share data only with vetted subprocessors that help us run the service: hosting and database (Lovable Cloud / Supabase), email delivery (Resend), payments (Stripe), and AI model providers used for feedback. A current subprocessor list is available on request from privacy@unidoodle.com.

Account data is retained for the life of your account and for up to 12 months after deletion for legal and dispute-resolution purposes. Billing records are retained for the period required by tax law.

You may request access, correction, deletion, portability, or objection to processing. Contact privacy@unidoodle.com. You also have the right to lodge a complaint with your local supervisory authority (e.g. the Irish DPC or UK ICO).

Some subprocessors are based outside the UK/EEA. Where required we rely on Standard Contractual Clauses. We confirm the transfer mechanism for each subprocessor before it is used, and we can share those details on request.

We'll update this policy when the service or the law changes. Material changes will be notified by email or in-app before they take effect.