Version of September 25, 2026

Privacy policy

What personal data Learn Up processes, why, and how.

The seller's details are not filled in yet — this document is still a template.

1. Operator

Your personal data is processed by [Sole proprietor Full Name] (taxpayer ID [STIR], address: [Region, district, street, building]), the operator of the Learn Up platform. Contact: privacy@learn-up.uz.

Processing is carried out under the Law of the Republic of Uzbekistan “On Personal Data”.

2. What data is collected

Account: first and last name, email, password (stored only as a hash), profile photo, phone number (if provided).
Learning: enrolled courses, lesson progress, notes, quiz answers, assignments, attendance, grades, certificates.
Events during a quiz (for example, leaving the quiz window) — to keep assessments fair.
Communication: comments, questions, group chat messages, support requests.
Payments: amount, date, payment system and status. Bank card details are NOT passed to us — only Payme or Click process them.
Teacher applications: specialisation, experience, diploma and CV files.
Technical: IP address, browser and device type, sign-in sessions — for account security.

3. Purposes and legal basis

Providing courses and performing the public offer (contract).
Accepting payments; fiscal and accounting obligations (legal requirement).
Issuing certificates and allowing them to be verified publicly on the website.
Service messages: verification codes, session reminders, notifications.
Security: preventing fraud and account takeover.
Reporting to the competent state authority on educational activity where the law requires it.
Improving the service — aggregated (non-identifying) statistics only.

By registering you consent to this policy; the date of consent and the document version are stored. Marketing emails are sent only with your separate consent.

4. Who can see and receive the data

The teacher of a course you are enrolled in — your name, progress, assignments, attendance and grades.
Other students of a live group — your name; if the teacher opens the group journal, also attendance, grades and ranking position.
Anyone verifying a certificate — by its serial number: name, course title and issue date.
Payment systems (Payme, Click) — the data needed to process a payment.
Technical providers: hosting and email delivery — only to deliver their services.
State authorities — in the cases and manner prescribed by law.

5. Recording of live sessions

As required by law, live sessions may be recorded (audio and video) and kept for at least 1 month. Turning on your camera and microphone is optional. Recordings are available only to the group and to competent authorities.

6. Storage location and cross-border transfer

Data is stored on servers located in: [Country where servers are located]. Email delivery and backup services may process part of the data abroad — only in countries that ensure adequate protection of personal data and are on the list established by law.

7. Retention

Account data — while the account is active. On a deletion request — deleted or anonymised within 30 days.
Payment records — for the period required by tax law (5 years).
Certificate data — so that certificates remain verifiable.
Security logs — 6 months.

8. Your rights

To know which of your data is processed and why, and to receive a copy.
To have inaccurate data corrected — within 3 days of the request.
To demand deletion or the end of processing; to withdraw consent.
To complain to the competent state authority or a court.

Send your request to privacy@learn-up.uz from your registration email. You can also edit your profile data yourself in your personal account.

9. Minors

Users under 18 use the platform with the consent of a parent or guardian. Parents may contact us at the address above about their child's data.

10. Cookies

Only necessary cookies are used: the sign-in session (secure, not readable by JavaScript), the chosen language and theme. No advertising or tracking cookies are used.

11. Security

Connections are encrypted with HTTPS, passwords are stored as hashes, files and videos are served only through short-lived signed links, staff access is limited by role, and backups are stored encrypted.

12. Changes

A new version of this policy is published on this page with its date. Significant changes are announced by email or notification.

2. What data is collected

Account: first and last name, email, password (stored only as a hash), profile photo, phone number (if provided).

Learning: enrolled courses, lesson progress, notes, quiz answers, assignments, attendance, grades, certificates.

Events during a quiz (for example, leaving the quiz window) — to keep assessments fair.

Communication: comments, questions, group chat messages, support requests.

Payments: amount, date, payment system and status. Bank card details are NOT passed to us — only Payme or Click process them.

Teacher applications: specialisation, experience, diploma and CV files.

Technical: IP address, browser and device type, sign-in sessions — for account security.

3. Purposes and legal basis

Providing courses and performing the public offer (contract).

Accepting payments; fiscal and accounting obligations (legal requirement).

Issuing certificates and allowing them to be verified publicly on the website.

Service messages: verification codes, session reminders, notifications.

Security: preventing fraud and account takeover.

Reporting to the competent state authority on educational activity where the law requires it.

Improving the service — aggregated (non-identifying) statistics only.

By registering you consent to this policy; the date of consent and the document version are stored. Marketing emails are sent only with your separate consent.

4. Who can see and receive the data

The teacher of a course you are enrolled in — your name, progress, assignments, attendance and grades.

Other students of a live group — your name; if the teacher opens the group journal, also attendance, grades and ranking position.

Anyone verifying a certificate — by its serial number: name, course title and issue date.

Payment systems (Payme, Click) — the data needed to process a payment.

Technical providers: hosting and email delivery — only to deliver their services.

State authorities — in the cases and manner prescribed by law.

8. Your rights

To know which of your data is processed and why, and to receive a copy.

To have inaccurate data corrected — within 3 days of the request.

To demand deletion or the end of processing; to withdraw consent.

To complain to the competent state authority or a court.

Send your request to privacy@learn-up.uz from your registration email. You can also edit your profile data yourself in your personal account.