Privacy policy

Last updated 2 November 2026

Unlecture stores only what it needs to run your account: your email, the notes you write and your study progress. There is no advertising, no selling of data and no tracking across other websites.

Who is responsible

Unlecture is run by Unlecture, a student project run by its three founders. It is a student project and not an official product of IE University. For anything about your data, write to support@unlecture.app.

What we store and why

• Your account: your email address and your password. The password is stored only as a scrambled hash by our login provider, Supabase; nobody at Unlecture can read it. We need these to log you in. Legal basis: running the account you asked for (contract).
• Your notes: the text you write, the course and part it belongs to, the moment in the video or the quiz question it refers to, and when you wrote it. We need these to show them back to you as a summary or a PDF. Legal basis: contract.
• Your progress: which parts you finished, your quiz answers, your open answers and self-grades, your mock exam attempts and scores, and the exam date and time zone you entered. Legal basis: contract.
• Study time: how many seconds you studied each day, per guide and part. Only the date, the part and the number of seconds are stored, never what you did. We use it to show your progress and to see which parts students find hard, so we can improve the guides. Legal basis: our legitimate interest in improving the guides. You can object (see your rights).
• Technical logs: our hosting and database providers keep short-lived server logs (your IP address, browser type and the time of a request) for security and to find faults. Legal basis: legitimate interest in keeping the service secure.
• Anonymous visit counts: Vercel Web Analytics counts page views without cookies and without a profile of you. We see how many people visit which page, not who.

What we do not do

• No advertising and no advertising trackers.
• We never sell, rent or share your data for someone else's purposes.
• No profiling and no automated decisions about you.
• No marketing emails. Today the app sends no emails at all. If we add one, such as a password reset, it is only sent when you ask for it.
• No data stored in your browser beyond the login cookie (see the cookie policy).

Who can see your data

Your notes and your progress are shown only to you, in your account. The database enforces this for every request (row level security).

The founders of Unlecture can see, on a private admin page, the list of accounts with their email address, each student's progress and study time. We use this to run the project and to improve the guides, for example to find the questions most students get wrong. We do not read your notes. The people who administer the database can technically reach everything in it; we only do that to fix a fault or when you ask us to.

Services we use

These companies process data for us, under their own data processing agreements. They may not use it for their own purposes.

• Supabase (login and database): stores your account, notes and progress. The database is in the European Union.
• Vercel (hosting and anonymous visit counts): runs the website. Some of its servers and logs may be outside the EU; transfers are covered by the standard contractual clauses in its data processing agreement.
• Cloudflare (video delivery): the course videos are delivered from Cloudflare storage. When a video loads, Cloudflare sees your IP address, as any website does. It sets no cookies for Unlecture.
• YouTube (Google): a few videos are hosted on YouTube in privacy-enhanced mode. Nothing loads from Google until you press play. From then on, Google's privacy policy applies to that player.

The fonts are served from our own site, so no request goes to a font provider.

How long we keep it

As long as your account exists. When you delete your account on your account page, your account, notes, progress and study time are deleted from the live database at once. Backup copies and logs kept by our providers expire on their own within a short period. Anonymous visit counts contain nothing about you.

Your rights

Under the EU General Data Protection Regulation (GDPR) you can:

• See and download everything we store about you: the “Download my data” button on your account page gives you a file with your account, notes, progress and study time.
• Correct it: edit your notes in the app, or write to us for anything else.
• Delete it: the “Delete my account” button on your account page, or write to us.
• Take it with you (portability): the same download, in a common machine-readable format.
• Object to our use of study time, or ask us to restrict what we do. Write to us; we will answer within one month.
• Complain to a data protection authority, for example the Spanish Data Protection Agency (AEPD, www.aepd.es), or the authority of the country you live in.

To use a right by email, write to support@unlecture.app from the address of your account, so we know it is you.

Age

Unlecture is for university students. You must be at least 16 years old to create an account. We do not knowingly collect data from anyone younger; if that happened, write to us and we delete it.

Changes to this policy

The date at the top says when this page last changed. If a change matters for you, for example a new service provider or a new use of your data, we say so in the app before it takes effect.

See also the terms of use and the cookie policy.