Privacy Policy

1. Who we are

SHUUR (shuur.uz) is operated by OXFORDER LLC, registered in Tashkent, Republic of Uzbekistan. In this policy "we" means OXFORDER. You can reach us about privacy at info@oxforder.uz.

2. Our approach in short

• •We collect only what the Service needs to work.
• •We never sell personal data, show ads, or use advertising trackers.
• •Students do not create accounts, and we do not build profiles of them.
• •You can delete your games, Materials and account, and ask us about your data at any time.

3. Teachers, Students and our role

For a Teacher's own account data, we decide how and why it is processed — we are the controller.

For Student play data, the Teacher decides why it is collected and how it is used in their classroom; we process it on the Teacher's behalf, following their instructions — the Teacher is the controller and we are the processor. Teachers are responsible for having the right basis to use the Service with their Students.

4. What we store about Teachers

When you sign in we receive your email address (and, with Google sign-in, your name and profile picture) from the sign-in provider. We store your account, the games and Materials you create, your settings, and basic usage and log data needed to run and secure the Service.

We use this to provide the Service, keep your account secure, and communicate with you about it.

5. What we store about Students

Students never create accounts. When a Student opens a game link we store the display name they type, their answers, scores and timing, and a random identifier saved in their browser so they can resume the same game on the same device. That identifier is not linked to a real-world identity.

This data exists to run the game and build the Teacher's report. We do not use it for advertising, and we do not knowingly collect more than the game needs. Students should use only a first name or nickname as their display name.

Because Students are often children, please also read section 15.

6. AI processing of your Materials

To turn Materials into questions, we send their text (and, for audio, images or video, the file or link) to Google Vertex AI, which processes it to generate Content and returns it to us. For the "name a topic" feature, we also use Google Search to research the topic; the sources used are shown to you.

Materials are processed to provide the Service to you and are not used to train third-party public models. Google processes this data as our service provider.

7. Payment information

If you buy a paid plan, payment is handled by licensed third-party payment providers. They receive the data needed to process your payment; we receive confirmation and limited billing details (such as plan, amount, and a masked card reference). We do not receive or store your full card number.

8. Cookies and local storage

We use one cookie to remember your interface language, and browser local storage to keep a Student's game progress and resume identifier on their device. We do not use advertising or cross-site tracking cookies.

9. How and why we use data

We use personal data to: provide and secure the Service; generate and display Content and reports; process payments; respond to you; and meet legal obligations.

Depending on the law that applies to you, our legal bases are: performing our contract with you (running your account and the Service); your or your school's consent where required (for example, for Students to take part); our legitimate interest in keeping the Service secure and working; and compliance with law.

10. Sharing and sub-processors

We do not sell personal data and do not share it except with the service providers that help us run SHUUR, under contracts that require them to protect it:

• •Google Cloud / Firebase — database, storage and hosting;
• •Google Vertex AI (and Google Search for topic research) — AI processing;
• •Vercel — application hosting;
• •payment providers — processing paid plans.

We may also disclose data if required by law, or to protect our rights, users or the public.

11. Where data lives and international transfers

Data is stored in Google Cloud (Firebase) in the European Union region. If you use the Service from Uzbekistan or elsewhere, your data is transferred to and processed in the EU by our providers.

By using the Service you consent to this processing location. We rely on our providers' safeguards for international transfers.

12. Retention and deletion

You can delete games and Materials from your dashboard at any time; deletion removes the stored content and its results. Extracted text and uploaded files for a game are removed with it.

We keep account data while your account is active. You can delete your whole account and its data yourself at any time, in Settings under "Security" — see shuur.uz/delete-account. If you cannot sign in, write to info@oxforder.uz and we will do it for you. We may keep limited records where the law requires.

13. How we protect data

Clients never access the database or storage directly; all access goes through our servers, and our database and storage deny all direct client access. We use reputable providers, encryption in transit, and access controls. No system is perfectly secure, but we work to protect your data and will notify you of a significant breach as the law requires.

14. Your rights

Subject to the law that applies to you, you may ask to access, correct, export, or delete your personal data, or to object to or restrict certain processing. Teachers can do much of this directly in the app.

To make a request, or if a Student or parent has a request about a Student's data, contact info@oxforder.uz (for Student data we may direct you to the Teacher, who controls it). You may also complain to your local data-protection authority.

15. Children's privacy

SHUUR is designed to be used with Students by their Teacher. We do not knowingly let children create accounts, and we minimise what we collect about Students to a display name and their in-game activity.

Where the law requires consent for a child to take part, the Teacher and school are responsible for obtaining it. If you believe a child has given us personal data without the proper basis, contact info@oxforder.uz and we will delete it.

16. What we never do

We do not sell personal data. We show no ads and use no advertising trackers. We do not build advertising profiles of Students, and we do not share your Materials or your Students' data with anyone except the service providers needed to run SHUUR.

17. Changes to this policy

If we change this policy we will update this page and the date above. For significant changes we will give reasonable notice, for example in the app.

18. Contact and complaints

For any privacy question or request, contact OXFORDER LLC at info@oxforder.uz. We answer every message, in Uzbek, Russian or English.