Our privacy and security approach, stated precisely.
UNIVIRA treats students' data as theirs. This page describes the platform's current approach; it is not the final privacy policy.
Important: the comprehensive security review and the Jordanian legal compliance review are not yet fully closed. UNIVIRA therefore does not claim full legal compliance, complete security, or any accreditation or independent certification. The final privacy policy and terms of use will be published after legal review, before the platform opens to any student.
Account protection
- Strong passwords are mandatory, and short-lived verification codes are sent to the university e-mail.
- Progressive lockout after repeated failed attempts.
- Two-step verification is required for every administrative role.
Access control
- Permissions are enforced on the server, not by hiding buttons in the interface.
- Each student's data is separated from others', and each university's groups are for its students only.
- Scoped administrative roles, and an append-only audit log of every administrative decision.
Data minimisation
The platform collects what it needs to work: university e-mail, first and last name, university, major, year and courses, and what the student posts. A WhatsApp number is optional, for those who want to be contacted in the market or as a tutor.
It does not collect: precise location, contacts, student ID numbers, grades, or images of official documents. It does not use the microphone.
University community membership
A student's real name is shown only to signed-in students of the same university. “Ask without my name” shows a pseudonymous number; moderators see the account behind it only when it is reported, and that access is logged.
Data handling
- Encryption in transit and at rest; files are kept in private storage and opened only through short-lived links.
- No sale of data, no advertising, no external analytics or tracking tools at present, and no automated profiling of student behaviour.
- Private content is not used to train AI models.
- Where data is stored, and any transfer outside Jordan, is disclosed to students in the privacy policy.
Privacy rights
From settings, a student can download their data in one file, request account deletion, delete assistant conversations and files, withdraw their WhatsApp number, and request a name correction.
Retention and deletion
Per the current design; the final periods will be confirmed in the privacy policy after legal review:
- On account deletion the account is disabled immediately, can be restored within 30 days, and is then permanently deleted.
- Posted content remains after account deletion without the author's name or any link to their identity, to keep discussions intact.
- Market listings stop showing after 30 days.
This website
www.univira.app uses no cookies and no analytics or tracking tools, and does not store anything you type into its forms.
Privacy inquiries
For any question about privacy or data: univira.official@gmail.com