Privacy Policy

You need an account only to host a session. Signing in is passwordless: we email a six-digit code to your address. We store no password, because there is not one.

An account holds your email address and the language you want your dashboard in. That is the whole list.

It also holds the sessions you build — their names, your questions, your options and the results. Those are yours. We hold them so you can run them and look back at them.

People joining a session need no account, no app and no email address. They type a code or scan a QR.

Multiple choice, rating, open text, word cloud, ranking and quiz answers are never linked to the person who gave them. That is built in rather than promised: the record we store for an answer has no name field at all, and no CSV a host downloads carries a column saying who answered what, for any question type. A test in our code checks it stays true.

Questions submitted to Q&A are anonymous too. No name travels with them.

There is one name in the product and it is a label, not attribution. A host can ask quiz players for a screen name so the leaderboard can show who is ahead, and can ask people to give a display name when they join so they can be spoken to during the session. Neither is attached to an answer, and neither appears in an export.

Signed-in hosts get a session cookie. It keeps you signed in and does nothing else.

Your theme — light or dark — and your language preference are kept in your own browser.

A participant's browser is given a random device identifier, stored on the device. It lets someone reload the page and keep their place, and lets a session count one person once. It says nothing about who they are.

The form asks for your name, your email address and your message. We email all three to support@uvofy.com and set your address as the reply-to, so a person can answer you.

Nothing else happens to it. It goes on no mailing list. The form takes one message a minute per address, which is there to stop it being used to send mail in bulk.

Cloudflare hosts all of it: the application, the database, the live state of a running session, and the email we send and receive. Cloudflare secures that infrastructure in line with its own published practices.

Stripe handles payment if you subscribe. Stripe stores your payment method. We never see or store a card number.

Those two are the whole list. We do not sell data and we do not pass it to advertisers.

Cloudflare runs a global network, so connection-level information such as your IP address is handled at its edge as part of serving pages and keeping the service from being abused. What Cloudflare logs, and for how long, is governed by its own policies rather than by ours.

The database sits in Cloudflare's Western Europe region. The live state of a running session runs on Cloudflare's network.

Cloudflare and Stripe both operate worldwide, so some processing happens outside the UK and the EEA as part of how their networks run.

We keep your account and its sessions for as long as the account exists. Ask us at support@uvofy.com to delete it and we will.

Anonymous answers are kept as part of a session's results. We cannot remove one person's answers on request, because we cannot tell which ones are theirs — that is the whole point of the design. You can delete a session, which takes its results with it.

Nothing is deleted automatically on a timer today. If that changes, it will be described here.

You can ask to see the personal data we hold about you, to have it corrected, or to have it deleted. You can also object to certain processing, or ask us to restrict it.

Send any of those to support@uvofy.com.

If you think we have handled your data badly you can complain to a supervisory authority. In the UK that is the Information Commissioner's Office. We would rather hear from you first, but you are not obliged to come to us.

Uvofy is used at work and in education — lectures, classrooms, training rooms. Account holders host the sessions, and must be old enough to enter into a contract.

Participants hand over nothing personal. They join anonymously, with no account and no email address, which is deliberate and is what makes the product straightforward to use with students.

The exception is a name field. If you switch on screen names, or ask people to give a display name to join, you choose what you ask your audience to type and you carry responsibility for it — including where that audience is under 18, and including whatever rules your school or employer sets.

If we change this policy we update the date at the top of this page. There is no separate email for policy changes, so come back and look if it matters to you.

Email support@uvofy.com with any question about this policy or about data we hold.

Uvofy.com, 19 Heathmans Road, Fulham, London, SW6 4TJ, United Kingdom.