Конфиденциальность

• We do not sell your personal data.
• We do not share your watch history with advertisers or data brokers, and Upgram shows no ads.
• We do not read your messages to target ads.
• We do not track you across other companies' apps or websites.

Upgram is run by Upgram LLC, a Maryland limited liability company, which is responsible for your personal data (the "controller"). Privacy questions and requests: [email protected]. Our team works from Armenia and can access personal data to run the service.

Your account. Your email address, which is how you sign in with a one-time code and how we reach you; if you use Sign in with Apple or Google, the email address (or Apple's private relay address) and identifier they share, and the name Apple shares the first time. Your username (required) and, if you add them, your full name, profile photo and bio, which are public. Which sign-in methods are connected.

Your date of birth. Asked once, to apply the minimum age and the protections for people under 18. If you are 14 or older we keep only the year and month, never the day, where no other user can see them. If you are under 14 we keep nothing you entered.

Onboarding answers. Your learning goals, at least three subjects you are interested in, your content languages, and your answer to the analytics question. Learning reminders are scheduled on your device.

What you create. Videos and shorts with their sound, thumbnails, titles, descriptions and tags; courses, lessons and quizzes; comments, course reviews and ratings, quiz answers and reports; direct messages, message requests and course group-chat messages with the photos, videos and files you send. From the sound of every uploaded video we create a transcript, used for captions, summaries, tags, search and safety screening.

Your activity on Upgram. What you watch and how far, views, likes, follows, enrolments, lesson progress, quiz attempts, certificates, and your "not interested" and mute choices. We use this to keep your place, run your courses and personalise your feeds. The text you search for is sent to our AI provider to understand its meaning and is cached without any link to your account; your recent searches stay on your device.

Devices and notifications. A push token and installation identifier for your device so we can send notifications, and the device type, operating system and app version.

Analytics and crash reports, only with your consent. If you agree (during sign-up, or later in Settings, Privacy, Share usage data), we collect usage analytics through Amplitude (screens opened, onboarding steps, course enrolments and completions, session events, an account identifier, a device identifier, and your country) and crash reports through Firebase Crashlytics. If you do not agree, none of this is collected. If you are under 16, we do not ask and do not collect it.

Purchases. When you buy a course, the App Store or Google Play takes the payment. Through our purchase processor RevenueCat we receive the transaction identifier, the product, the price and currency, the store's tax and commission figures, and the country of your store account. We never receive card or bank details.

Instructor applications. If you apply to teach: your email, full legal name, country, the subjects you teach, audience size if you give it, links to your CV and a course sample, your education, a bio, and links to your social profiles. A person on our team reads every application. Before we pay an instructor, we check the names they gave us against the US Treasury's sanctions list (OFAC's SDN list); a possible match pauses the payment until a person on our team reviews it.

Instructor payouts and tax forms. To pay instructors we use Payoneer (payments) and Tax1099 (US tax forms, W-8BEN or W-9). You give your bank or Payoneer details and your tax form, including your taxpayer identification number, directly to those providers. We keep the form type, its status, your country of tax residence, any treaty rate claimed, the signing and expiry dates and the provider's reference, the email address (and, if you give it, the payee ID) of the Payoneer account you want to be paid to, plus your earnings, withholding and payment records.

Contacting us. The emails you send us and the messages you send through the contact form on upgram.org, which reach our support inbox by email.

On the website. upgram.org uses no advertising cookies. It sets only the cookies needed for what you ask it to do: sign-in session cookies, a language cookie when a signed-in user picks a language, and a cookie that remembers an age refusal. Some things are kept in your browser's local storage (recent searches, upload drafts, and your answer to the analytics question). Our forms use Cloudflare Turnstile to stop bots.

Website analytics, only if you accept. The website asks once, in a banner with Accept and Decline side by side. Until you accept, nothing is collected and the analytics code is not even loaded. If you accept, we use Amplitude, in the United States, to see how the site is used: the pages and screens you view, which buttons and controls you press (by a fixed name, never what you typed), the features you use (for example starting a video, posting a comment, searching or publishing), your browser and device type, the site's language, your country (taken from your browser's language setting), and an account identifier when you are signed in. No IP address is stored, and we never collect what you search for, the text of your comments or the messages you send. Amplitude keeps a device identifier in your browser's local storage; it sets no cookie. The answer is kept in this browser, and your answer in the app is separate. You can change your mind at any time from "Cookie & analytics settings" at the bottom of the site or in Settings; declining stops collection at once and deletes what the analytics code stored in your browser.

• To run the service you asked for: your account, sign-in, publishing what you post, delivering messages, playing video, keeping your progress, and giving you the courses you enrol in or buy.
• To make content accessible and findable: transcripts, captions, summaries, tags and search.
• To recommend content you are likely to find worth watching, based on your activity, subjects and languages. You can steer it with Not interested and Mute.
• To keep the service safe: screening uploads and chat images, handling reports, blocking, protecting people under 18, and preventing fraud and abuse.
• To pay instructors, to check payees against US sanctions lists, and to keep the tax and accounting records the law requires.
• To send the notifications you allow.
• To understand crashes and usage, only if you agreed.

If you are in the EU or the UK, we rely on these legal bases: performing our contract with you (running your account and the service), our legitimate interests (safety, recommendations, making content findable), legal obligations (tax records, responding to lawful requests), and your consent (analytics and crash reports), which you can withdraw at any time. Our safety screening uses automated tools, including AI, and can take content down before a person reviews it; you can ask us to look again, and a person will.

Other users. Your username, name, photo, bio, public videos, shorts, courses, comments, reviews and certificates are visible to others, some of them to anyone on upgram.org. A private account limits who sees your content. In a course group chat you choose to join, other members and the instructor see your name and messages.

Service providers that process data for us, under contract and only for these purposes:

• Supabase (database, sign-in, file storage, server functions), in the United States.
• Cloudflare (video storage and playback, bot protection on our forms).
• Stream (chat).
• OpenAI, in the United States (transcripts, summaries, tags, search and safety screening). It receives video sound, titles, descriptions, transcripts, thumbnails, frames, chat images and search text, and for profile screening your username, name, bio and photo, never your email address.
• RevenueCat, in the United States (purchases between the app and the stores).
• Google Firebase, in the United States (push notifications; crash reports with your consent).
• Amplitude, in the United States (usage analytics in the apps and on upgram.org, only with your consent).
• Resend, in the United States (sending email).
• Hostinger (hosting upgram.org).

Apple and Google process your purchases and store accounts under their own privacy policies, and deliver push notifications. We disclose data when the law requires it, to protect someone's safety or to address fraud or security issues, and we report child sexual abuse material to the authorities. If Upgram is merged or acquired, your data may pass to the new owner, who must honour this policy.

Upgram LLC is a US company, our main providers are in the United States, and our team works from Armenia, so your data is processed outside your country. Where our providers receive data from the EU or the UK, we rely on the European Commission's Standard Contractual Clauses (with the UK addendum) or on the provider's certification under the EU–US Data Privacy Framework. You can ask us about these safeguards.

• Your account and profile: until you delete your account.
• Your date of birth (year and month): until you delete your account.
• What you publish: until you delete it. Deleted videos are removed from our video provider within minutes. Drafts and archived items left untouched for 90 days are deleted after a warning at 60 days.
• Messages: until they are deleted. When you delete your account, your chat account is deleted and the text of your messages is erased.
• Watch history, likes, follows, progress and quiz attempts: until you delete your account.
• Notifications: read ones after 180 days, all after 365 days. Devices registered for push: after 180 days without use, or when you delete your account.
• What we showed you in your feeds: 90 days. Cached search text, which is not linked to you: 30 days after it was last used.
• Purchase records, and instructor payout and tax records: as long as tax and accounting law requires. If you delete your account, purchase records are unlinked from you.
• Instructor applications, reports and moderation decisions: kept as a record of our decisions. You can ask us to delete your application.
• Server logs: 7 days. Backups: deleted data can remain in our daily backups until they expire, about a week later.

• Analytics and crash reports: Settings, Privacy, Share usage data. Turning it off stops collection on that device at once.
• Website analytics: "Cookie & analytics settings" at the bottom of upgram.org, or in Settings on the website. Declining stops collection in that browser at once.
• Push notifications: your phone's settings, and the switches for each type in Settings, Notifications.
• Emails: every activity and chat-summary email has an unsubscribe link. Sign-in code emails cannot be turned off, because they are how you sign in. We send no marketing email and no text messages.
• Edit or delete anything you published, change your profile, or make your account private, at any time.

Depending on where you live, you can ask us for a copy of your data, to correct it, to delete it, to restrict or object to how we use it, and to withdraw consent. Write to [email protected] from the address you sign in with. We answer within one month and may need to confirm it is you. We treat you no differently for using these rights. If you are in the EU or the UK, you can also complain to your data protection authority. We do not sell or share personal information as California law defines those terms.

Delete your account in the app (Settings, Help & Support, Delete Account) or at upgram.org (Settings, Delete account), or write to [email protected] from your sign-in address. Deletion is immediate and cannot be undone. Your profile, sign-in identity, followers and following, likes, blocks, learning progress, quiz attempts, watch history, notifications, registered devices, chat account and message text are deleted, and you lose access to your courses.

Videos, shorts and courses you published, and your comments and reviews, stay on Upgram without your name, and certificates you earned stop being linked to you. If you want your published content deleted too, delete it before you delete your account, or ask us at [email protected] and we will remove it. An instructor account with payout records is closed by us on request, after the final payout. Details are on our delete account page.

Upgram is not for anyone under 14. We ask for your date of birth when you sign up; if you are under 14 you cannot create an account, and we keep nothing you entered. If we learn that someone under 14 has an account, we close it and delete its data. If you are a parent and believe your child has an account, write to [email protected].

If you are 14 to 17, you should use Upgram with a parent's or guardian's permission, and we apply extra protections: no analytics or crash reports while you are under 16, and a new direct message or message request reaches you only from an account you follow.

We encrypt data in transit everywhere, limit staff access to what each role needs (with two-factor sign-in for staff tools), keep each person's private data to that person with database access rules, and protect paid course video with signed, expiring links. No system is perfectly secure; if a breach affects you, we will tell you and the authorities as the law requires.

If we change this policy in a way that matters to you, we will tell you in the app before the change takes effect and update the date above. Questions and requests: [email protected]. Upgram LLC, a Maryland limited liability company.