Privacy Policy — Edura AI service UG

1. Quick summary (plain language)

• We collect the personal information necessary to prepare and submit university applications on your behalf (identity & contact details, academic records, passport and supporting documents).
• After we submit an application we anonymize academic records so we can measure acceptance/rejection ratios for different academic profiles. Anonymized data cannot be tied back to you.
• We use Google Analytics for non-identifying analytics. We use third-party payment processors (e.g., Stripe).
• We store personal data on servers located inside the EU and retain personal data until you delete your account. Anonymized analytics are retained for business analysis.
• You can access, correct, export or ask us to delete your personal data — contact support@appl-ai.me to exercise your rights.

2. Controller

3. What personal data we collect

We collect only the data required to provide our service (preparing and submitting university applications) and to operate and improve the service:

a. Identity & contact information

• Name, email address, telephone number and other contact details you provide as part of your account or application.

b. Application / academic data

• Academic records, transcripts, test scores, degree information, CV/resume, statement of purpose, recommendation letters, and other documents needed for an application.

c. Identification documents

• Passport and other identity documents necessary for application submission or verification.

d. Supporting documents

• Any documents you upload that are required to support an application (e.g., diplomas, certificates).

e. Payments & billing

• Transaction metadata necessary for billing and invoicing. Payment card data is handled by our third-party payment processor (e.g., Stripe) and is not stored by us.

f. Usage & analytics

• Technical and usage data collected automatically (IP address, device/browser information, cookies and similar technologies) via Google Analytics and similar services.

4. How we use your personal data (purposes)

We use your personal data for the following main purposes:

• To provide our services and perform the contract with you: preparing, submitting and tracking university applications on your behalf, communicating about the application process, and handling payments.
• To anonymize and analyze academic outcomes: after submission we anonymize academic records and retain aggregated/anonymized data to measure acceptance/rejection ratios and improve our service offering. This anonymized data cannot be linked back to individual users.
• Service operations and improvement: internal analytics, troubleshooting, performance monitoring and product development.
• Marketing and updates: to send you service-related messages, newsletters and promotional offers (you can opt out).
• Legal compliance and security: to comply with legal obligations, respond to lawful requests and protect our rights, service and users.

We do not use your personal data to train or improve general AI models.

5. Lawful basis for processing (where applicable)

Where applicable under data-protection law (e.g., GDPR), we rely on one or more of the following lawful bases for processing:

• Performance of a contract: to provide the application submission service you requested.
• Consent: where you give consent (for example, for certain cookies or direct marketing where required by law). You can withdraw consent at any time.
• Legitimate interests: for internal business operations (e.g., fraud prevention, service improvement, anonymized analytics), provided these interests do not override your rights and freedoms.
• Legal obligations: where processing is necessary to comply with a legal duty.

6. Sharing your data / third parties

We share personal data only as necessary to operate the service:

• Universities and application intermediaries: We submit your application and any required documents to the universities you choose and to authorized intermediaries (for example, Uni-Assist) or other official counterparts, as needed to process the application. Those recipients may become independent controllers for their own use of the data.
• Payment processors: For payments we use third-party providers such as Stripe. These processors handle payment card data under their own privacy terms.
• Analytics providers: Google Analytics and similar providers process usage and technical data.
• Hosting and infrastructure providers: cloud or hosting providers that store and process your data on our behalf.
• Legal / safety: where required by law, court order or to protect rights, safety or property.

We aim to keep data processing within the EU. However, some third-party providers may operate outside the EU. Where personal data is transferred outside the EU/EEA, we will ensure appropriate safeguards (for example, standard contractual clauses or other lawful transfer mechanisms) are in place.

7. Data retention

• Personal data (identifiable): retained on our servers until you request deletion of your account. After account deletion we will remove or irreversibly anonymize personal data in our systems, except where we must retain certain data to comply with legal obligations (e.g., accounting records) or to defend legal claims.
• Anonymized analytics / aggregated data: anonymized academic outcomes and aggregated statistics may be retained for business-analysis purposes for an indefinite period, because they no longer identify individuals.

8. Security

We implement appropriate technical and organizational measures to protect personal data against unauthorized access, loss, misuse or alteration. Measures include access controls and administrative safeguards. While we strive to protect your information, no security system is impenetrable — if we become aware of a data breach that creates a high risk to your rights and freedoms, we will notify you and the competent supervisory authority as required by law.

9. Your rights

Depending on applicable law (for example GDPR), you may have the following rights regarding your personal data:

• Right to access the personal data we hold about you.
• Right to correct or update inaccurate or incomplete data.
• Right to request erasure (deletion) of your personal data (subject to retention for legal reasons).
• Right to restrict or object to certain processing (including profiling or direct marketing).
• Right to data portability (to receive a machine-readable copy of the data you provided).
• Right to withdraw consent at any time where processing is based on consent.
• Right to lodge a complaint with a supervisory authority (for Germany, the competent authority is the Bavarian Data Protection Authority / Bayerisches Landesamt für Datenschutzaufsicht).

To exercise any of these rights, please contact us at support@appl-ai.me. We will respond within the timescales required by applicable law.

10. Marketing and communications

We may send you service-related messages and marketing communications where you have given consent or where otherwise permitted by law. Every marketing email includes an easy way to opt out (unsubscribe). You may also withdraw consent or opt out at any time by contacting support@appl-ai.me.

11. Cookies & analytics

We use cookies and similar technologies (including Google Analytics) to collect usage and technical information. Cookies help us operate the site, remember preferences and analyze usage. Where required by law, we will ask for your consent before placing cookies for analytics or marketing. You can manage or disable cookies through your browser settings or via available opt-out tools.

12. Minors

Our service is intended for adult students. We do not knowingly collect personal data from children under the age required by applicable law. If you believe we have collected personal data from a minor, please contact support@appl-ai.me and we will take steps to remove the information.

13. Automated decision-making & profiling

We do not make automated decisions about you that produce legal effects or similarly significant effects. We do create anonymized, aggregated profiles for statistical analysis of academic outcomes; these profiles are not used to make decisions about individuals.

14. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by posting the new policy with an updated effective date and, where appropriate, by other means (e.g., email). Continued use of our services after changes indicates acceptance of the updated policy.

15. Contact & complaints

If you have questions, want to exercise your rights, or have a complaint about our processing of personal data, contact us at:

If you are not satisfied with our response you have the right to lodge a complaint with the competent supervisory authority (e.g., the Bavarian Data Protection Authority).