Privacy Policy

1. Operator and contact

The data controller is the 3Burchak platform (Republic of Uzbekistan). For any privacy question, request or complaint, email support@3burchak.uz or contact us through the @the3Burchak_bot Telegram bot.

2. Data we collect

We collect only the data needed to run the Service. The categories are:

• Account data: first and last name, username, phone number, chosen language, profile picture (optional), date of birth (optional). When you sign in with Telegram we receive your Telegram ID, name and username. Passwords are stored only in hashed form.
• Student profile: grade, school (optional), strongest and hardest subjects, learning goals and difficulties.
• Learning activity: test and exam answers, scores, result history, homework, attendance and marks entered by the teacher, game and “Battle” results, achievements and in-app coins.
• Homework photos and files: images of homework uploaded by the student or parent, and teaching materials uploaded by the teacher.
• Chats and messages: conversations with the Ziya AI assistant, the family chat between parent and child, messages between parent and teacher, and class announcements.
• Parent data: parent profile, child-link requests and confirmations, notes about the child, and personality questionnaire results.
• Teacher data: classes and student lists, lesson plans, timetable, attendance, marks and uploaded materials.
• Payment data: plan, subscription status, payment date and amount, and the transaction ID issued by the payment system or app store. We do not store bank card numbers; they stay with the payment provider.
• Technical data: IP address, device and browser type, app version, sign-in dates, security logs (including records of SMS codes sent) and error reports.
• Cookies and local storage: to keep your sign-in session and remember your chosen language. We do not use advertising trackers.

3. Why we use the data

• To create your account, verify your phone number by SMS code or Telegram, and keep sign-in secure.
• To run the core features of the Service: tests, homework, lesson plans and results.
• To provide explanations, exercises and personalised recommendations through the Ziya AI assistant.
• To let parents see their child’s learning results and contact the teacher.
• To set up subscriptions, confirm payments and keep accounting records.
• To send notifications in the app, by SMS or through Telegram; you can manage them in settings.
• To prevent fraud and abuse, keep the Service secure and meet legal obligations.
• To improve the Service using aggregated statistics that cannot identify a person.

We do not sell your personal data and do not share it with third parties for advertising.

4. Children and parents

3Burchak is built for school students, so we treat minors’ data with particular care.

• A minor student’s account is created and used with the consent and under the supervision of a parent or legal guardian. The parent can create the account or link to an existing one.
• A linked parent can see the child’s results and homework and can ask us to correct or delete the data.
• We ask students only for the minimum data needed for learning. Children are not shown third-party advertising and their data is not used for marketing.
• The Ziya AI assistant is limited to learning topics and follows child-safe conversation rules. Conversations are deleted automatically after a short period (see section 6).
• If you believe your child’s account was created without your consent, email support@3burchak.uz. We will review the request and delete the account and its data.

5. Third-party services

We rely on the following providers to run the Service. Each receives only the data needed for its task:

• Eskiz (eskiz.uz): delivery of SMS verification codes. Shared: phone number and the code text.
• Telegram: sign-in and notifications through the @the3Burchak_bot bot. Shared and received: Telegram ID, name, username and sign-in code. Messages sent through Telegram are also covered by Telegram’s privacy policy.
• RevenueCat: subscription management in the iOS and Android apps. Shared: an app user ID that does not directly identify you, and the store purchase receipt. Name and phone number are not shared. The payment itself is processed by the Apple App Store or Google Play.
• Payme (Paycom): payments on the website. Card details are processed directly by Payme; we receive only the transaction status and ID.
• AI providers (OpenAI, Google Gemini): Ziya AI answers, test generation and checking, and analysis of uploaded text and images. Shared: question and answer text, chat messages and, where relevant, the uploaded image. Phone numbers and payment data are not shared. The providers process this data only to return a response to us under their API terms.
• Hosting and infrastructure: data is stored on our servers and is accessible only to authorised staff.

We may disclose data to competent public authorities where the law requires it or where it is necessary to protect the safety of our users.

6. Retention periods

• Account and profile data: for as long as the account is active. After the account is deleted, data is erased or anonymised within 30 days.
• Ziya AI conversations: 7 days, then deleted automatically. Only a short, non-personal summary may be kept so learning can continue.
• Homework photos and files: while the related assignment or class exists; they are deleted together with the account.
• Family chat and parent–teacher messages: while the account is active or until a participant asks for deletion.
• SMS and Telegram verification codes: 5 minutes. Sign-in sessions: up to 7 days.
• Security and audit logs: up to 12 months.
• Payment and accounting records: for the period required by law.
• Backups: destroyed in the next rotation cycle within 30 days of deletion.

7. Security

We transmit data over HTTPS (TLS), store passwords as hashes, restrict access by role and log sign-in attempts. Even so, no one can guarantee absolute security of transmission over the internet. Never share your password or verification codes with anyone.

8. Your rights

• To learn what data we hold about you and request a copy.
• To correct inaccurate or outdated data (most of it you can edit yourself in profile settings).
• To delete your account yourself through “Delete account” in the app profile, or to request deletion.
• To withdraw consent for optional data processing and to opt out of notifications.
• To lodge a complaint with the competent public authority.

Send requests to support@3burchak.uz. Once we have verified your identity we will respond within 30 days. A parent or legal guardian may act on behalf of their child.

9. Governing law

Personal data is processed in accordance with the Law of the Republic of Uzbekistan “On Personal Data” (No. ZRU-547 of 2 July 2019) and other applicable legislation.

10. Changes

We may update this Policy from time to time. We will announce material changes through the app or the website. The new version takes effect on the date it is published on this page.