Privacy Policy

Ubu is a language-learning service designed to help children and young learners study languages through lessons, exercises, vocabulary activities, and learning progress features.

In this Privacy Policy, “Ubu,” “we,” “our,” and “us” refer to the operator of the Ubu application and related services.

By using Ubu, you acknowledge that information may be processed as described in this Privacy Policy. Where consent from a parent or legal guardian is required by applicable law, Ubu should only be used after that consent has been provided.

We aim to collect only information reasonably necessary to provide, protect, and improve the Ubu service.

Account and authentication information

• Phone number used for registration or verification.
• Email address, if provided or used by the account.
• Authentication and session information required to keep an account securely signed in.
• Passwords or authentication credentials are handled securely and are not intended to be stored in readable plain-text form.

Profile information

• Name, nickname, or profile display name.
• Age group or similar information used to tailor learning.
• Selected school and grade, used to manage the learner profile and provide an appropriate learning experience.
• A permanent Student Code generated by Ubu to identify the learner’s Ubu account. The code is private and is not displayed publicly.
• Selected language and learning preferences.
• Learning goal or other onboarding preferences.

Learning activity

• Courses, units, lessons, and exercises accessed.
• Lesson and exercise completion status.
• Answers, scores, XP, progress, and similar learning data.
• Information necessary to resume and personalize the learning experience.

Technical and security information

• Basic request, device, network, and application information necessary to operate and secure the service.
• Error, security, and server logs used to diagnose failures, prevent abuse, and protect accounts.

We do not intentionally collect information that is unrelated to the operation of the Ubu service.

We may use information described above to:

• Create, authenticate, and manage Ubu accounts.
• Verify phone numbers and protect accounts from abuse.
• Create and maintain a learner profile.
• Identify the learner’s Ubu account using a private Student Code.
• Organize and personalize learning using the selected school and grade, including providing age-appropriate educational content.
• Provide lessons, exercises, and course content.
• Save and display learning progress.
• Maintain authenticated sessions.
• Provide customer and technical support.
• Detect fraud, misuse, security incidents, or system errors.
• Maintain, troubleshoot, and improve the Ubu service.
• Comply with applicable legal obligations.

Ubu does not sell personal information. We do not use children’s personal information for behavioral or targeted advertising.

Ubu is designed with children and young learners in mind. We therefore treat information associated with younger users with particular care and aim to limit collection to information needed for account operation, learning functionality, security, and support.

Where applicable law requires parental or guardian authorization before a child may provide personal information or use an online service, a parent or legal guardian is responsible for providing the required authorization.

We do not knowingly sell children’s personal information or use it for targeted advertising.

A parent or legal guardian who believes a child has provided personal information improperly may contact us at support@ubuapp.mn to request review or deletion.

Ubu may use a third-party verification provider to verify a phone number and protect account registration and authentication.

For users in supported regions, phone verification may involve sending a verification message to a designated short code. Ubu may transmit information necessary to perform this verification, such as the phone number, verification session information, and verification status.

Ubu currently uses verify.mn as a phone verification service provider where applicable. Information shared with a verification provider is limited to what is reasonably necessary to perform the verification service and prevent misuse.

Ubu does not require access to a user’s personal SMS inbox merely to read incoming verification messages through this verification flow.

We may use trusted service providers to operate parts of Ubu. These providers may process information only as necessary to provide services such as:

• Phone number verification.
• Cloud infrastructure and database hosting.
• Application hosting and network delivery.
• Security, monitoring, and technical support.

We do not sell or rent personal information to third parties.

School, grade, and Student Code are private account and profile data. They are not shared with third parties for advertising, are not used for advertising, and are not sent as advertising or analytics user properties or crash-report metadata.

We may also disclose information where reasonably necessary to comply with law, respond to lawful requests, protect users, investigate abuse or fraud, or protect the rights and security of Ubu and its users.

We use reasonable technical and organizational safeguards intended to protect personal information from unauthorized access, disclosure, alteration, loss, or misuse.

Our security practices may include:

• Encrypted HTTPS communication.
• Secure authentication and session mechanisms.
• Restricted access to production systems and databases.
• Password hashing and other appropriate credential-protection measures.
• Monitoring and logging used to identify technical and security issues.

No internet service or storage system can guarantee absolute security, but we work to use safeguards appropriate to the nature of the information we process.

We retain personal information for as long as reasonably necessary to operate an active Ubu account, provide learning services, maintain security, resolve disputes, comply with legal obligations, and enforce applicable agreements.

When an account is deleted, information associated with that account will be deleted or anonymized unless retention of particular information is required or permitted for legal, security, fraud-prevention, backup, or compliance purposes.

Backup copies may remain for a limited period as part of normal system backup and disaster-recovery processes before being overwritten or deleted.

Ubu keeps non-personal school reference records and aggregate sequence counter state after account deletion. The counter does not identify a user; it is retained only to preserve system integrity and ensure that a previously assigned Student Code is never issued again.

Users may request deletion of their Ubu account and associated personal information.

Account deletion may be initiated from within the Ubu app:

You may also review account deletion information at ubuapp.mn/account-deletion.

A valid deletion request results in deletion of the account and associated personal data, subject to limited information we may be required or permitted to retain for legal, fraud-prevention, security, or compliance purposes.

Account deletion is permanent and may remove saved learning progress, profile information—including the selected school, grade, and assigned Student Code—session information, and other account-associated records. Shared school reference records are not deleted, and non-personal sequence counters are not reset or reused.

Depending on your location and applicable law, you may have rights relating to your personal information, which may include the ability to:

• Request access to personal information about your account.
• Request correction of inaccurate information.
• Request deletion of your account and associated information.
• Ask questions about how personal information is collected, used, or shared.

Requests may be submitted to support@ubuapp.mn.

We may need to verify that a request relates to the correct account before fulfilling it.

Ubu may use infrastructure or service providers located in different countries. As a result, information may be processed or stored outside the country where a user resides.

Where required, we take reasonable steps to ensure that such processing is subject to appropriate protections.

We may update this Privacy Policy when Ubu changes, when our data practices change, or when legal or platform requirements require an update.

The current version will always be published at ubuapp.mn/privacy, together with the latest effective date.

Material changes may also be communicated through the application or another appropriate channel where required.

If you have questions, privacy requests, parental requests, or concerns about this Privacy Policy or Ubu’s handling of personal information, contact: