Payment and privacy
Procedure for Payment and Refund of Funds
1. Payment Procedure
1.1. The User pays for a Premium Subscription or a pack of crystals through the electronic payment systems of the Platform, including Uzum Bank.
1.2. Successful payment confirms acceptance of the public offer and of this policy.
1.3. The price is taken from the shop screen at the time of the order and is shown in soums. After successful payment, the price of that order does not change.
1.4. An order that has not reached the bank remains open for a limited time and is then closed. Pressing "Pay" again for the same plan during that short time may continue the same order.
1.5. The Platform does not receive or store the card number, the expiry date, or the security code. Uzum Bank processes those data.
1.6. The Provider does not add a hidden fee on top of the price on the screen. A bank fee, if any, is set by the bank's rules.
2. Refund Procedure
2.1. If the paid access has not yet been opened, the money is returned on the User's request. A fee of the bank or of the payment organization that the law allows them to keep is not returned.
2.2. If the Subscription has already been opened, the refund is calculated from unused calendar days. The refund amount equals the price of the Subscription multiplied by the number of unused calendar days and divided by the total number of calendar days in the paid period. The used period starts on the day the access was actually opened.
2.3. Crystals the User has already spent inside the Platform are not returned. An unspent remainder of a pack is returned under clause 2.1 if the payment organization can return the money to the same means of payment.
2.4. If access was not opened through the fault of the Provider, the User chooses a full refund or a credit of the payment toward another Subscription period.
2.5. The request is sent to the contacts in Section 16 of the public offer. The request includes details that make it possible to confirm identity and payment.
2.6. The request is considered within 10 (ten) business days. The money is sent to the means of payment from which the payment was made, under the rules of Uzum Bank and the legislation of the Republic of Uzbekistan.
2.7. If the bank cancels a payment that has already been recorded, the Subscription of that order is closed, and the crystals of that order are debited up to the balance on the account.
3. Final Provisions
3.1. Payment and refund are governed by the legislation of the Republic of Uzbekistan and by the public offer.
3.2. A dispute is first settled by negotiation. If agreement is not reached, it is considered by a court of the Republic of Uzbekistan.
Privacy
What data is processed
The Provider processes only the data needed to run the Platform.
Account data: name, email, a mark that the email is confirmed, the password in a form that cannot be read back, nick, interface language, Telegram identifier, Telegram username, the telephone number from Telegram if it was sent, and the technical address used for Telegram login.
Survey: aim of study, minutes per day, field, faculty, year, and form of study.
Study: lesson progress, experience, day streak, league, achievements, hearts, answers in exercises, bookmarks and marks in laws.
Communication: forum texts, class assignments and answers, the User's own games and pictures for questions, follows of other Users.
Profile: the chosen avatar, the built image, and an uploaded photo with a Subscription.
Payment: order identifier, plan, amount, status, Subscription period, and crystal balance. The card number is not stored.
Session technical data: IP address, device information, login time, and session lifetime. The User sees the session IP address in the list of their devices.
Approximate place of login: country and city determined from the IP address. They are shown in the User's list of devices.
Notifications: if the User allowed them in the browser, the subscription address of that browser is stored. It is needed to send study reminders (no more than once a day) and messages about forum replies. The permission can be withdrawn in the browser or profile settings.
AI explanation: the text of the task and the messages of that explanation are sent to the model provider for the time of the reply. An article explanation and a law test use only the text of the law, without the User's data.
Why the data is needed
The data is needed to recognize the User and open the Account, to save the survey, to show lessons and progress, to count the streak, the league, and achievements, to run friends, the forum, classes, and reminders, to carry out payment and refund, to protect against abuse, to answer a request, and to give a learning explanation of a mistake.
Grounds for processing
Consent that the User gives by the tick at registration. Before the tick, this section states the purposes, the data, the rights, and the recipients.
Performance of the Agreement, including access to lessons and to the paid period.
The Provider's duties under legislation, including keeping payment information.
The Provider does not process special categories, biometric templates, or genetic data. A profile photo is used to show the avatar and to check for prohibited content. It is not used to establish identity.
Mandatory storage in the territory of the Republic of Uzbekistan and registration of a database in the state register, under the law, concern biometric data, genetic data, and data of subscribers of communications operators. The Provider does not keep those categories.
Where data is stored
Account, progress, and order data are stored in the Platform database of the Provider. The site is served over HTTPS. The password is not stored in open form. The card number is not in the Platform database.
Transfer outside the Republic of Uzbekistan is made only with the User's consent given by the tick, and only in the volume needed for Google or Telegram login, the email with the code, speaking a word, or the AI explanation. The Provider does not state that the recipient's country is on the list of states with adequate protection. The basis of the transfer is consent.
How long data is kept
Account data is kept while the Account exists.
After a deletion request, the Provider deletes or anonymizes data to the extent the law allows deletion.
Payment information is kept for the period required by accounting and tax legislation.
A session is kept until it expires or until the User ends it.
Forum and class texts are kept until the author deletes them or until the Provider hides them under the offer. A hidden message may remain in the database without being shown to other Users.
Who receives the data
Google, if the User signs in with Google: to the extent needed for login.
Telegram, if the User signs in with Telegram or opens the mini app: the identifier and the details Telegram sends for login.
The email service: the email address and the text of the message with the confirmation code.
Uzum Bank: the order identifier and the amount. The User enters the card number on the Uzum Bank side.
The model provider for the explanation of a mistake: the text of the task and the messages of that explanation, without email, telephone, password, or card.
The voice service: the lesson word to be spoken, without name or email.
The server hosting provider: storage of the database, without the right to use the data for its own purposes.
Cloudflare: protection and delivery of the site, technical data of the request.
Browser notification services (Google, Apple, Mozilla), if the User allowed notifications: the subscription address and the text of the notification.
A contractor receives only the volume needed for its service and may not use the data otherwise. The Provider does not sell personal data.
User rights
The User has the right to know whether their data is processed and which data, to receive information about the processing, to demand correction of incomplete or inaccurate data, to suspend processing if the data is inaccurate or not needed for the stated purpose, to withdraw consent, and to demand deletion when the purpose is achieved or consent is withdrawn and the law does not require further storage.
A request is sent to [email protected] or to Telegram @aileader_manager in the same form in which consent was given, or by a letter. The Provider checks that the writer is the holder of the email or Telegram of that Account.
Inaccurate data is corrected no later than 3 days after the request, and without delay once the inaccuracy is established. The User may correct the name, nick, and study details in the profile. A change of some fields may spend crystals. The price is shown before confirmation.
On a request about the data, the Provider states which data is processed, on what ground, for what purpose, to whom it may be transferred, including a cross-border transfer, and how long it is kept. A refusal of that information is sent in writing within 10 days, with the grounds.
Withdrawal of consent may make impossible the functions that cannot work without that data, including login and payment. Processing that the law requires to continue, including storage of payment information, does not stop because of the withdrawal.
The User has the right to appeal the Provider's decision to the authorized state body for personal data or to a court.
An explanation of a mistake and game scores are not a decision that by itself creates legal consequences for the User. A restriction of access for a breach of the offer or a suspicion of fraud is made by the Provider. The User may send an explanation to the email in the details.
Cookies
The Platform uses only necessary cookies and browser storage: the session cookie for login, the interface language cookie, the chosen language and theme, the record of the choice in the cookie notice, and the place where the User stopped in a law.
The Provider does not set advertising or analytics cookies of third-party networks. The provider of the site's protection and delivery (Cloudflare) may use technical cookies to protect against attacks.
On the first visit a notice with the buttons "Accept" and "Decline" is shown. There are no optional cookies now, so "Decline" leaves only the necessary ones and "Accept" adds nothing. If optional cookies appear, the Provider will turn them on only after consent and will update this section. Until a choice is made, the notice is shown on every visit. The choice can be reset by clearing the site data in the browser.
Switching off the session cookie in the browser closes login. A lesson and payment are then unavailable until the User signs in again.
Measures to Limit and Control Fraud Risks
The Provider informs clients and partners of measures against fraudulent operations in accordance with the legislation of the Republic of Uzbekistan and the requirements of the bank.
The Provider checks payments for signs of fraud, limits suspicious operations, uses protected channels, verifies the payer at payment, may pause an operation, and works with the bank.
The User does not give the password and confirmation codes to third parties, reports a suspicious operation at once, and follows the rules of electronic payments.
The Provider has the right to reject or limit an operation where there are signs of fraud or a breach of security rules.
We Accept
Payments protected by 3D Secure and PCI DSS.
Visa, Mastercard, Humo, and Uzcard cards are accepted, as well as payments through Uzum Bank.
The payment is processed by Uzum Bank under the rules of 3-D Secure and PCI DSS. The card number is not stored on the Platform.
