At DreamyUni, we are committed to protecting your privacy and being transparent about how we collect, use, and protect your personal information. This Privacy Policy explains our data practices for DreamyUni's AI-powered college admissions platform.
Our Commitment: We only collect data necessary to provide you with the best college admissions guidance. Your educational information is secure, confidential, and used solely to enhance your admissions journey.
Account Information
- Authentication Data: Google account information (name, email, profile photo)
- Profile Information: Academic details, graduation year, target colleges
- Contact Information: Email address for communication and account recovery
Academic and Educational Data
- Academic Records: GPA, class rank, coursework, AP/IB scores
- Standardized Test Scores: SAT, ACT, PSAT scores and practice test results
- Essays and Writing: College essays, personal statements, and drafts
- Extracurricular Activities: Clubs, sports, volunteer work, leadership roles
- Awards and Achievements: Academic honors, competitions, recognition
- Demographics: Age, location, school information (for personalized guidance)
Platform Usage Data
- Chat Conversations: AI chat history and context for personalized responses
- Study Analytics: SAT prep progress, practice test performance, study patterns
- Feature Usage: Which tools you use, time spent on platform, click patterns
- Search and Filter Data: Extracurricular searches, college preferences
- Quest Progress: Gamification achievements and progress tracking
Technical Information
- Device Information: Browser type, operating system, device identifiers
- Log Data: IP addresses, access times, pages visited
- Cookies and Local Storage: Session data, preferences, authentication tokens
- Performance Data: Load times, error reports, feature usage analytics
Communication Data
- Email Communications: Cold emails sent through our platform (with your consent)
- Support Interactions: Help requests, feedback, and customer service communications
- Notifications: Delivery status and engagement with platform notifications
Core Service Delivery
- Personalized AI Guidance: Provide context-aware college admissions advice
- Academic Analysis: Assess your profile strength and improvement opportunities
- SAT Preparation: Create personalized study plans and track progress
- Essay Assistance: Provide AI-powered feedback and editing suggestions
- Activity Recommendations: Suggest relevant extracurricular opportunities
- Strategic Planning: Help develop 4-year high school and college prep plans
Platform Improvement
- AI Model Training: Improve our AI responses using anonymized interaction data
- Feature Development: Develop new tools based on user needs and usage patterns
- Performance Optimization: Enhance platform speed, reliability, and user experience
- Content Curation: Expand our extracurricular database and college information
Communication and Support
- Service Updates: Notify you about new features, maintenance, and important changes
- Educational Content: Send helpful college admissions tips and resources
- Customer Support: Respond to questions, resolve issues, and provide assistance
- Automated Outreach: Send cold emails to professors/contacts on your behalf (with explicit consent)
Security and Compliance
- Account Security: Detect suspicious activity and prevent unauthorized access
- Fraud Prevention: Identify and prevent misuse of our platform
- Legal Compliance: Meet legal obligations and respond to lawful requests
- Policy Enforcement: Ensure compliance with our Terms of Service
Our Promise
We do not sell, rent, or trade your personal information to third parties. Your educational data remains confidential and is used solely to provide DreamyUni services.
Limited Data Sharing
We may share information only in these specific circumstances:
Service Providers
- Cloud Infrastructure: Firebase/Google Cloud for secure data storage and processing
- AI Services: OpenAI for AI-powered features (with privacy protections)
- Analytics Providers: Anonymized usage data for platform improvement
- Email Services: Third-party services for transactional emails and notifications
Legal Requirements
- Compliance with court orders, subpoenas, or legal processes
- Protection of our rights, property, and safety or that of our users
- Investigation of fraud, security, or technical issues
- Enforcement of our Terms of Service
Business Transfers
In the event of a merger, acquisition, or sale of assets, your information may be transferred to the new entity, subject to the same privacy protections.
Aggregated and Anonymized Data
We may share aggregated, anonymized statistics about platform usage, admissions trends, and educational insights that do not identify individual users.
Security Measures
- Encryption: All data is encrypted in transit (HTTPS) and at rest
- Firebase Security: Enterprise-grade security with Google Cloud infrastructure
- Access Controls: Role-based access with multi-factor authentication
- Regular Audits: Ongoing security assessments and vulnerability testing
- Data Backup: Secure, encrypted backups with disaster recovery procedures
Privacy by Design
- Data Minimization: We collect only information necessary for our services
- Purpose Limitation: Data is used only for specified, legitimate purposes
- Retention Limits: Information is kept only as long as necessary
- User Control: You maintain control over your personal information
AI and Machine Learning Privacy
Our AI models are designed with privacy protections. Personal information is processed locally when possible, and any data sent to AI services is anonymized or pseudonymized. We do not train public AI models with your personal educational information.
Data Access and Control
- Access: View all personal information we have about you
- Correction: Update or correct inaccurate personal information
- Deletion: Request deletion of your account and associated data
- Portability: Export your data in a machine-readable format
- Restriction: Limit how we process your personal information
Communication Preferences
- Email Notifications: Opt out of non-essential communications
- Marketing: Unsubscribe from promotional emails at any time
- Cold Email Consent: Explicitly control when we send emails on your behalf
- Push Notifications: Manage notification preferences in your account settings
Cookie and Tracking Controls
- Browser Settings: Control cookies through your browser preferences
- Analytics Opt-out: Disable usage analytics and performance tracking
- Functional Cookies: Some cookies are necessary for platform functionality
How to Exercise Your Rights
To exercise any of these rights, please contact us at privacy@dreamyuni.com or use the account settings in your DreamyUni dashboard. We will respond to your request within 30 days.
Retention Periods
- Active Accounts: Data retained while your account is active and for legitimate business purposes
- Inactive Accounts: Data may be deleted after 3 years of account inactivity
- Communication Records: Support communications retained for 2 years
- Analytics Data: Anonymized usage data retained for platform improvement
- Legal Obligations: Some data may be retained longer to comply with legal requirements
Account Deletion
When you delete your account, we will remove your personal information within 30 days, except for data we are required to retain for legal reasons. Some anonymized data may be retained for analytical purposes.
Backup and Recovery
Data in our backup systems may persist for up to 90 days after deletion for disaster recovery purposes, after which it is permanently removed.
Important for Students Under 13
DreamyUni is designed for high school students planning for college. If you are under 13, you must have parental consent to use our platform.
Parental Rights
Parents of children under 13 have the right to:
- Review their child's personal information
- Consent to the collection and use of their child's information
- Delete their child's account and associated data
- Refuse further collection or use of their child's information
Educational Use
DreamyUni may be used in educational settings. Schools and educational institutions are responsible for obtaining necessary consents and ensuring compliance with applicable privacy laws including FERPA.
Global Service
DreamyUni is available internationally. Your information may be processed and stored in the United States and other countries where our service providers operate.
Data Protection Standards
We implement appropriate safeguards for international data transfers, including:
- Standard contractual clauses for data transfers
- Adequacy decisions where applicable
- Certification frameworks and codes of conduct
- Compliance with local data protection laws
Regional Rights
Users in certain regions (EU, UK, California, etc.) may have additional privacy rights under local laws. We honor these rights as applicable to your location.
Policy Updates
We may update this Privacy Policy periodically to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of significant changes through:
- Email notification to your registered email address
- Prominent notice on our platform
- Updated "Last Modified" date at the top of this policy
Continued Use
Your continued use of DreamyUni after we publish changes constitutes your acceptance of the updated Privacy Policy.
If you have questions about this Privacy Policy or our privacy practices, please contact us:
Privacy Officer: privacy@dreamyuni.com
General Contact: support@dreamyuni.com
Website: https://dreamyuni.com
Response Time: We respond to privacy inquiries within 48 hours
Data Subject Requests: Processed within 30 days as required by law