URYVA Privacy Policy
Effective date: 1 October 2026
Last updated: 1 October 2026
1. Who we are
URYVA is an external workspace for human thought. You shape thoughts into Folios with an AI guide called Sorush, explore knowledge Galaxies, and follow and message people. URYVA is available at https://uryva.com and https://app.uryva.com. This policy also applies if you use one of our apps, where available.
URYVA is operated by Edutainment Corp., 131 Continental Dr Ste 305, Newark, DE 19713-4324, United States ("URYVA", "we", "us"). Edutainment Corp. decides how and why your personal data is used, which makes it the "controller" under data protection law.
Privacy contact: privacy@uryva.com
Help with URYVA: support@uryva.com
2. The short version
- You sign in with Google, LinkedIn, Apple or a code sent to your e-mail. We keep what we need to run your account.
- What you create is yours. Some features send your prompts and content to AI providers (OpenAI and Anthropic, and in one optional case xAI) so the features can work. By default, under their API terms, those providers do not use that data to train their models (section 5.2).
- Folios you publish are public unless you choose Private when you publish. Your profile is visible to other people on URYVA.
- We do not sell your data. We do not show ads. We use no advertising or analytics cookies, and no third-party analytics.
- In Settings you can download a copy of your key data, reset your Mindscape, turn AI processing off, and delete your account.
3. What we collect
3.1 When you sign in
| Sign-in method | What we ask for | What we keep |
|---|---|---|
the email and profile permissions | Google account ID, e-mail address and whether Google has verified it, first and last name, profile photo | |
the openid, profile and email permissions | LinkedIn member ID, e-mail address and whether LinkedIn has verified it, first and last name, profile photo | |
| Sign in with Apple | your name and e-mail address | your Apple ID, your e-mail address (Apple may give us a private relay address instead of your real one), and your first and last name (Apple sends the name only the first time you sign in) |
| E-mail code | your e-mail address | your e-mail address; we send you a 6-digit code and a sign-in link |
| Password (only if your account has one) | e-mail and password | your e-mail address and your password in hashed (scrambled) form, never the password itself |
We copy your Google or LinkedIn profile photo into our own storage so it can appear on your profile. The access tokens that Google, LinkedIn or Apple give us are used only during sign-in. We do not store them, and we do not ask for ongoing access to your Google, LinkedIn or Apple account.
We create or link an account only when the sign-in provider confirms that your e-mail address is verified.
3.2 Your profile and settings
We keep:
- your name, photo, bio, interests, the cultures you choose and your language;
- whether your account is private;
- your AI setting, and when you last changed it;
- when you accepted the Community Guidelines.
Theme, font and similar display choices are saved in your browser (see section 10). If you give us a date of birth, we store it and do not show it to other people.
3.3 What you create
We keep the content you create or send through URYVA, including:
- thoughts and prompts;
- Folios and their drafts;
- notes (text, voice and images) and voice recordings;
- Galaxies you build;
- comments, bookmarks, follows and shares;
- messages you send (text, images, audio and reactions);
- reports, appeals, and requests to manage a profile.
3.4 Your Mindscape
Your Mindscape is a picture of your interests and your way of thinking. AI builds it from:
- your bio and interests;
- your answers to Mindscape questions;
- the Folios you publish or bookmark;
- which Folios you open and how far you read.
It produces insights such as topics, values, perspective and a personality type.
This is a form of profiling. It is used only to personalize URYVA for you and to show the social features in section 7. It is never used to make decisions that have legal or similarly significant effects on you, and it is not medical, psychological, legal, financial or career advice.
You can confirm or reject insights, and reset your Mindscape at any time in Settings → Privacy Policy → Mindscape Controls.
3.5 How you use URYVA
- Folio views. When you are signed in, we record that you opened a Folio and how far you read it (glimpsed, left early or finished). This feeds your Mindscape and view counts.
- Sign-in sessions. For each sign-in with an e-mail code or password, we keep a shortened IP address (the last part removed) and a shortened description of your browser. They are deleted 30 days after the session was last used.
- Server logs. Our servers log requests: the page or action requested, the time, your IP address, browser information and your account ID. We use them for security and troubleshooting.
- Speed measurements. The app sends our own servers measurements of how fast it loads and responds: timings, the type of page (never its exact address), the type of network connection, and whether you use a browser or one of our apps. They carry no account ID and no cookies, and we do not store your IP address with them.
- AI records. We keep records of AI generation runs, which include the prompt, to fix problems. We also keep records of what each AI request cost.
3.6 Information about people who are not URYVA users
- Editorial profiles. We write profiles about people, organizations and places from public sources, sometimes before anyone connected to them has joined URYVA. If a profile is about you, you can ask to manage it or report it (section 13).
- Profile-management requests. When someone asks to manage a profile, we send a verification code to an address they tell us is official, and we keep a record of the request.
- Other people in your content. Content and messages you post may mention other people. Please respect their privacy (see the Terms of Use).
4. How we use your data, and our legal bases
If you are in the European Economic Area or the United Kingdom, each use rests on a legal basis:
| Why we use it | Legal basis |
|---|---|
| To create your account, sign you in and keep you signed in | Performance of our contract with you (the Terms of Use) |
| To provide the features you use: Folios, Galaxies, notes, comments, follows, messaging | Contract |
| To run AI features (section 5) | Your consent, which you give and withdraw with the AI setting. The AI processing that still runs when the setting is off (section 5.3) rests on the basis in this table for the feature it serves: translation, personalization, or the feature you are using. |
| To translate bios, Mindscape insights and titles for readers who use another language | Our legitimate interest in making URYVA readable across languages |
| To personalize URYVA: Mindscape, suggestions, "Minds like yours" | Contract and our legitimate interest in a personalized service |
| To send the e-mails you ask for (sign-in codes, account deletion, profile-management codes) | Contract |
| To measure how fast URYVA loads and responds | Our legitimate interest in a fast, reliable service |
| To keep URYVA safe: reviewing reports and appeals, preventing abuse, securing accounts, troubleshooting | Our legitimate interests; legal obligation where one applies |
| To comply with the law and respond to lawful requests | Legal obligation |
We do not use your data for advertising, we do not sell it, and we make no automated decisions that have legal or similarly significant effects on you.
5. AI processing
5.1 Which AI providers receive what
How URYVA uses AI explains the same in a shorter form.
| Provider | What it receives | What for |
|---|---|---|
| OpenAI (USA) | Your prompts, thoughts, drafts and conversations while you compose. Folio content. Mindscape inputs (bio, interests, answers, reading history, Folio topics). Your Mindscape insights, which help tailor what you generate. Text or voice you use to build a Galaxy (voice is transcribed). Text to be read aloud. | Shaping and writing Folios and their images, narration and transcription, Folio Flows, Galaxies and Mindscape |
| Anthropic (USA) | Profile bios, Mindscape insight texts, and Folio and Galaxy titles and labels to be translated for readers in another language. Some Folio story text. | Translation, and writing parts of Folios |
| xAI (USA) | The text of a Folio to be read aloud, only when the optional "Grok" narration voice is used. The current web app does not use it. | Voice narration |
To research a topic, URYVA also sends search queries that the AI writes about that topic to:
- Brave Search (or DuckDuckGo as a fallback);
- Wikipedia and Wikimedia Commons;
- the World Bank.
These queries do not include your name or your account details.
The name, e-mail address and photo we receive from Google, LinkedIn or Apple are not sent to AI providers.
5.2 Training and retention at the AI providers
We use these providers through their business APIs, so their API terms apply:
- OpenAI does not use API data to train its models unless the customer opts in. It keeps API data for up to 30 days for abuse monitoring.
- Anthropic does not use inputs or outputs from its API to train its models by default.
- xAI does not train on API inputs or outputs without explicit permission, and deletes them after 30 days.
5.3 Your AI setting
The first time you use an AI feature, URYVA asks for your permission. You can turn AI processing on or off at any time in Settings → Privacy Policy → AI & Data. When it is off, Generate, Compose, Folio Flows, and the Mindscape refresh and questions do not run.
Today, some AI processing still happens when the setting is off:
- your Mindscape may update automatically after you publish or bookmark a Folio or edit your profile;
- building a Galaxy from text or voice uses AI;
- your bio and Mindscape insights may be machine-translated when someone who reads another language views them.
5.4 About AI output
AI can be inaccurate. Treat its output as a starting point, not as fact. URYVA labels AI-generated and AI-assisted content. You decide what to keep, change and publish (see the Terms of Use).
6. Google user data
This section describes how URYVA accesses, uses, stores, shares, keeps and deletes the information we receive from Google when you choose Continue with Google ("Google user data"). We use Google APIs only for Sign in with Google.
6.1 What we access, and how
- Scopes: we request only the
emailandprofilescopes. We do not ask for any other Google data, or for ongoing access to your Google account. - Data: your Google account ID, your e-mail address and whether Google has verified it, your first and last name, and your profile photo.
- How: through Google's sign-in (OAuth), only when you choose Continue with Google. Google gives us an access token that we use once, during that sign-in, to read these fields. We do not store Google access or refresh tokens.
6.2 How we use it
- to create your URYVA account and sign you in;
- to link your Google sign-in to an existing URYVA account with the same verified e-mail address;
- to show your name and photo to other URYVA users wherever you appear: your profile, your Folios and comments, messages, search results and "Minds like yours" (section 7);
- to send you the account e-mails you request.
We use it for nothing else. We never use Google APIs or Google user data to generate or edit images: the only image we receive from Google is your profile photo, which we store and show as your profile picture.
6.3 Where we store it
In our account database on our servers at Hetzner Online in Falkenstein, Germany. Your photo is copied into our file storage (Hetzner Online Object Storage, Nuremberg, Germany) and served from media.uryva.com.
6.4 Who we share it with
No one, except the service providers that host and deliver URYVA for us, as far as they need it to run the service: Hetzner Online (servers, database and file storage) and our content delivery network (Subprocessors); and anyone the law requires us to share it with. We do not send it to AI providers.
Other URYVA users see your name and photo wherever you appear (section 7). Authorized members of our team can see your name and e-mail address only when needed to support you, review a report, keep URYVA secure, or comply with the law.
We never:
- sell it;
- use it for advertising;
- give it to data brokers or information resellers;
- use it to decide creditworthiness or for lending.
6.5 How long we keep it, and how to delete it
We keep it for as long as your account exists. Deleting your URYVA account deletes your Google account ID, e-mail address, name and photo from URYVA straight away (section 12; Delete your URYVA account).
You can also remove URYVA's access to your Google account at any time at https://myaccount.google.com/permissions. That stops future sign-ins with Google; it does not delete your URYVA account or the data we already have, so to remove that data, delete your account.
6.6 Limited Use
URYVA's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
6.7 No AI training
URYVA does not use information received from Google APIs to develop, improve or train generalized or non-personalized AI or machine-learning models, and we do not give it to AI providers to train theirs.
6.8 LinkedIn and Apple sign-in
LinkedIn sign-in data is handled the same way: we use it only to create and sign in to your account and to show your name and photo to other URYVA users wherever you appear.
Sign in with Apple. We use your Apple ID, e-mail address and name only to create and sign in to your account and to show your name to other URYVA users wherever you appear; Apple does not share a photo. If you choose "Hide My Email", we only know the relay address Apple gives us, and our e-mails reach you through Apple. Deleting your URYVA account deletes your Apple ID, e-mail address and name from URYVA. You can also stop using Sign in with Apple with URYVA at any time in your Apple Account settings.
7. Who can see what
Other people on URYVA can see:
- Your profile: name, photo and bio. A bio may be shown machine-translated to readers in other languages.
- Folios you publish as Public, which anyone with the link can open, and your comments on them.
- A short summary of your Mindscape, which signed-in users can see under your name on your Folios without asking you. It covers confirmed insights (never those about goals, beliefs or decisions), your recent topics and which Galaxies you write in.
- Your name, photo and a match score. We may show these to users whose Mindscape is similar to yours or very different ("Minds like yours").
Kept private (not shown to other users):
- your e-mail address and date of birth;
- your notes, bookmarks and drafts;
- Folios you publish as Private;
- Galaxies you create (private by default);
- the cultures you pick.
Your full Mindscape is also private: another user must ask, and you approve or deny.
Messages. Messages are visible to the people in the conversation. They are not end-to-end encrypted. Our team may review a message if someone reports it.
Private account. If you make your account private, new followers need your approval, and people who don't follow you have limited ability to message you.
Blocking. If you block someone, they cannot see your profile or message you, and you won't see theirs.
Files. Photos, voice recordings and images you upload or generate are stored at hard-to-guess web addresses. Anyone who has a file's address can open that file, even if the Folio, note or message it belongs to is private.
8. Who we share data with
Service providers who process data for us (the current list, with the data each one receives, is on Subprocessors):
| Provider | Role | Location |
|---|---|---|
| OpenAI | AI processing (section 5) | USA |
| Anthropic | AI processing (section 5) | USA |
| xAI | Optional voice narration | USA |
| Resend | Sending sign-in, account-deletion and profile-management e-mails | USA |
| Hetzner Online | Hosting our servers and database (Falkenstein, Germany), and storing photos, voice recordings, images and other files (Nuremberg, Germany) | Falkenstein and Nuremberg, Germany |
| Our content delivery network | Delivering the website and app | Germany |
Our service providers process personal data only on our instructions, under written agreements that require the same or equal protection as this policy.
Other parties:
- Sign-in providers. Google, LinkedIn and Apple learn that you used them to sign in to URYVA. Their own privacy policies apply.
- Research services. Topic search queries only (section 5.1).
- Services your browser contacts. The app loads some pictures straight from Unsplash (images.unsplash.com: music cover images) and Wikimedia (upload.wikimedia.org and thumb.wikimedia.org: pictures in Folios and profiles). When your browser loads them, these services receive your IP address and browser information.
- Other users, as described in section 7.
- Authorities or others, when the law requires it, or to protect the safety, rights or property of our users, the public or URYVA.
- A buyer or successor, if URYVA is involved in a merger, acquisition or sale of assets. Your data would stay protected by this policy.
We do not sell your personal data, and we do not share it for advertising.
9. International transfers
Our servers, database and files are in Germany. Some of our providers are in the United States: OpenAI, Anthropic, xAI, and Resend.
When personal data leaves the EEA or the UK, we rely on a safeguard that data protection law recognizes, such as the EU Standard Contractual Clauses (with the UK Addendum), or the EU-US Data Privacy Framework where a provider is certified.
10. Cookies and similar technologies
URYVA uses only cookies that are strictly necessary to sign you in and keep your account secure (Cookies and local storage lists every item):
| Cookie | Purpose | Lasts |
|---|---|---|
refresh_token | Keeps you signed in | 30 days |
access_token | Confirms who you are on each request | 15 minutes |
csrf_token | Protects your account against forged requests from other sites | 30 days |
| Sign-in session cookie | May be set while you sign in | Up to 1 hour |
We use no analytics, advertising or tracking cookies, and no third-party analytics tools. The website at https://uryva.com sets no cookies at all.
Your browser's local storage also holds some items:
- your language, font and theme choices (on https://uryva.com, only the language you pick, so we do not switch it for you again);
- "don't show again" choices;
- work in progress, such as a draft you are composing;
- places you recently visited in URYVA.
Items tied to your account are cleared when you sign out.
URYVA does not currently send push notifications. If we add them, your device will ask for your permission first.
11. How long we keep data
| Data | How long |
|---|---|
| Account and profile | Until you delete your account |
| Content you create | Until you delete it or your account (see section 12 for exceptions) |
| Unsaved composing sessions | 30 days after your last edit (discarded drafts: 1 day) |
| Saved drafts | Until you delete them |
| Sorush conversations | 1 year after the last message, or until you clear them |
| Mindscape | 2 years after its last update, or until you reset it |
| Sign-in sessions | 30 days after last use |
| Sign-in and deletion codes | A few minutes (codes expire after at most 30 minutes) |
| Server logs | A limited time, for security and troubleshooting |
| Records of AI generation runs (including prompts) | Until we delete them: there is no automatic deletion yet, and deleting your account does not remove them today (section 12). Ask us and we remove them |
| AI cost records | Kept without any link to you after you delete your account |
| Record that an account was deleted (a scrambled ID, date and reason) | Kept; there is no automatic deletion yet |
| Data at AI providers | See section 5.2 |
12. Deleting your account
You can delete your account in Settings → Account → Delete Account, or without signing in at https://app.uryva.com/delete-account, where we e-mail you a code to confirm. You can also ask us by e-mail. Delete your URYVA account explains every way. Deletion signs you out everywhere straight away.
What we delete:
- your account and profile, including sign-in details from Google, LinkedIn or Apple, and your photo;
- your Mindscape, Mindscape answers and preferences;
- your Sorush history;
- your voice recordings;
- your notes, comments, bookmarks, follows and share links;
- your Folio Flow progress;
- profile-management requests and reports that you made or that were made about your profile;
- the nodes, links, constellations and progress in your Galaxies.
What stays:
- Published Folios. They are archived, not deleted. They are removed from URYVA's feeds and search, but links that other people already have may keep working.
- Items not yet removed by the deletion process:
- messages you sent, which stay in the conversation for the other participants;
- your drafts (unsaved composing sessions still expire after 30 days);
- the entry (title and description) of each Galaxy you created;
- your notifications and notification settings;
- reports you filed about Folios or messages, and appeals;
- blocks, and Mindscape access permissions and requests;
- the records used to suggest you in "Minds like yours";
- records of AI generation runs;
- some uploaded files, such as images in notes and messages.
To have any of these removed, contact us at privacy@uryva.com.
- Records without your identity. AI cost records with the link to you removed, and a record that an account was deleted.
Removing individual items without deleting your account:
- Reset your Mindscape or clear your Sorush history in Settings → Privacy Policy → Mindscape Controls.
- Delete voice recordings in Settings → Privacy Policy → Voice Controls.
- Delete notes and comments.
- Deleting a message for everyone hides it from everyone in the conversation. The text currently stays in our database; to have it removed, contact us.
13. Your rights and choices
Depending on where you live, you may have the right to:
- Access and copy your data. Settings → Account → Download My Data gives you a JSON file with:
- your profile;
- the list of your Folios;
- your Sorush conversations;
- your Mindscape insights, preferences and answers.
For anything else, such as your Folio content, messages or notes, write to us.
- Correct your data. Edit your profile at any time.
- Delete your data (section 12).
- Withdraw consent to AI processing with the AI setting. This does not affect processing that already happened.
- Object to or restrict processing based on our legitimate interests, including profiling for personalization.
- Data portability.
- Complain to a data protection authority, for example the one where you live or work.
To use these rights, write to privacy@uryva.com (Requests about your data shows how). We may need to confirm that the account is yours. We reply within one month.
We do not sell personal information, and we do not share it for cross-context behavioral advertising.
To report an editorial profile about you, or to ask to manage it, use Report this profile or Ask to manage this profile on that profile (Managing a profile written by URYVA).
14. Children
URYVA is not for anyone under 18. We do not knowingly collect personal data from anyone under that age. If we learn that we have, we delete the account. If you believe someone under 18 is using URYVA, contact us at privacy@uryva.com.
15. Security
We protect your data with measures such as encrypted connections, passwords and sign-in codes stored only in hashed form, and short-lived sign-in tokens. No system is perfectly secure, so please keep access to your e-mail and sign-in accounts safe. Remember that uploaded files can be opened by anyone who has their address (section 7).
16. Changes to this policy
We will post any change on this page and update the "Last updated" date. If a change is significant, we will tell you in the app or by e-mail before it takes effect. If we change how we use data received from Google, we will update this policy first and ask for your consent where required.
17. Contact us
Edutainment Corp.
131 Continental Dr Ste 305, Newark, DE 19713-4324, United States
Privacy matters: privacy@uryva.com
Help with URYVA: support@uryva.com
Help and answers: Help & Support