Privacy notice for UXie

Draft. The owner completes the bracketed parts and has the text approved through the institutional process (data protection officer, ethics) before launch (PRD §17.3, FR-8.5). When the text changes, raise PRIVACY_NOTICE_VERSION so every student acknowledges the new version.

Who is responsible

[Technische Hochschule Ingolstadt, address]. Product owner: Prof. Dr. Ignacio Alvarez. Data protection officer: [name, contact].

What UXie is for

UXie helps you understand the research papers of your course through dialogue. Using it is optional. Your conversations are not used for grading.

What we process and why

• Your account: your university email address and password (stored by our authentication provider), and a random pseudonym (for example S-3fa9c1d2e0) that identifies you everywhere else in UXie. Purpose: providing the service.
• Your conversations with UXie, your learning progress per paper, the project description you choose to enter, and your feedback on replies. Purpose: providing the tutoring service and improving it (teaching support).
• Usage data such as the number of turns per day, error codes and response times, which never contain what you wrote. Purpose: operating the service, limits and costs.
• Research use only with your consent. If you tick the separate research box, pseudonymous copies of your conversations may be used for research on teaching. You can withdraw at any time on your account page; this does not affect your access to UXie. Lawful basis: [consent, Art. 6(1)(a) GDPR]. Without consent, your conversations are never part of research exports.

Lawful basis for the service: [e.g. Art. 6(1)(e) GDPR with the relevant state higher-education law].

Who can see your data

• Your instructor can read conversations to improve teaching. They see your pseudonym, not your email address; revealing your identity is a separate, logged action.
• Hosting providers (processors with data processing agreements): Vercel (web application, EU region Frankfurt), Render (background processing, Frankfurt), Supabase (database and file storage, Frankfurt), [email provider] for sign-in emails.
• AI model provider: to answer you, the paper text and your messages are sent to the AI model provider configured by the instructor ([Anthropic by default; inference in the US/global regions]). Your name, email address and IDs are never sent. Providers whose terms allow training on inputs are not used.

How long we keep it

Conversations are deleted [6 months after the end of the semester], unless you consented to research and a documented reason to keep them exists. You can delete your account at any time.

Your rights

You can download your data and request deletion from your account page, and you have the rights of access, rectification, erasure, restriction, objection and to complain to a supervisory authority ([Bayerisches Landesamt für Datenschutzaufsicht / BayLfD]). Contact: [email].