Student Privacy Charter & Academic Data Protection Policy
At UniPlan, we believe your degree trajectory and academic records belong entirely to you. Our software architecture is built on Privacy by Design, with an unwavering commitment to never commercialize, monetize, or sell student academic records.
100% Student-Owned
Your academic records and degree trajectory remain entirely yours. We never sell, monetize, or commercialize your data.
AES-256 & TLS 1.3
Academic data is protected using industry-standard encryption, both in transit and at rest.
Zero Behavioral Ads
We never use your academic activity, preferences, or degree data to build advertising profiles.
One-Click Erasure
You can request deletion of your academic data and account whenever you choose.
01. Overview & Academic Commitment
UniPlan is developed as an independent academic co-pilot built exclusively to empower collegiate scholars in navigating complex graduation criteria, elective sequencing, prerequisite chains, and dynamic GPA projections. Unlike ad-funded consumer utilities or campus surveillance solutions, UniPlan adheres to an unequivocal principle: Your degree roadmap is an intellectual asset that belongs to you alone.
Data Minimization Principle
UniPlan operates a strict data minimization. We do not collect, store, or index national identity numbers, civil registration IDs, financial billing information, or social security registries.All predictive GPA scenario simulations are computed either client-side within browser sandbox storage or via ephemeral tokenized memory caches that self-terminate immediately upon session close.
02. Information We Collect
To deliver predictive graduation tracking and degree audit validation, we collect only the scholastic datapoints you voluntarily author or synchronize through verified university Single Sign-On (SSO) integrations.
Account Data
- University SSO handle or primary email
- Display name or pseudonym
- Affiliated institution & campus department
- Targeted matriculation & graduation cohort
Academic Records
- Course codes, titles, & credit hours
- Semester grade notations (e.g. A, B+, Pass)
- Declared academic tracks & dual minors
- Pre-requisite fulfillment mappings
Technical Telemetry
- Client device architecture & OS family
- Local offline database schema revision
- Cloud synchronization delta timestamps
- Cryptographic audit challenge receipts
Zero-Knowledge Course Ingestion Flow
Local Plan Creation
Stored on device IndexedDB
Pseudonymized Hash
AES-256 cloud envelope
Verified Audit Graph
Zero-raw transcript exposure
05. Strict Non-Commercial Pledge (No Data Selling)
Zero Data Brokerage Guarantee
UniPlan does not and will never sell, lease, rent, license, or trade student academic transcripts, course schedules, GPA performance, or graduation timelines to corporate employers , headhunters, background check companies, or advertising exchanges under any circumstance.
We reject the prevalent software model that treats university students as advertising audiences. Processing exceptions are bounded strictly to:
- Student-Initiated Academic Share Links: When you generate a secure advisor review link or export token to share your curriculum plan with your official university faculty advisor.
- Statutory Legal Compliance: Compliance with bona fide court orders or judicial subpoenas strictly limited to the absolute minimum necessary information mandatorily enforceable by law.
06. Student Rights & Self-Service Control
You maintain total sovereign command over your study plans. You may invoke any of the following statutory entitlements directly inside your UniPlan Account Settings without waiting for ticket queues:
Data Portability
Instant, zero-cost export of your complete degree tree, course records, and calculations in standard JSON, PDF, and Microsoft Excel formats.
Available 24/7 in App
Instant Rectification
Live inline correction or override of misattributed course credits, repeated grades, or modified degree concentration paths anytime.
Real-time sync
Irrevocable Erasure
Execute a one-click deletion of all cloud accounts, associated devices, and backups. Guaranteed cryptographic wipe within 72 hours.
Self-serve trigger