Privacy Policy

Scope and our approach

This Privacy Policy explains how UIAIdol (“we”, “us”, or “our”) handles personal information when you visit uiaidol.com, sign in to an account, use our design-research library and developer tools, or contact us.

UIAIdol is an early-stage design-intelligence service operated from Melbourne, Australia. We aim to collect only the information needed to operate the service and keep it secure.

Information we collect

Account and sign-in information

If you sign in with Google, Google provides basic identity information needed to authenticate you: a unique account identifier, your email address, and your name and profile image when available. We request only the openid, email, and profile scopes.

If you sign in with Apple, Apple provides a unique account identifier and may provide your name and email address when you first authorise UIAIdol. If you choose Hide My Email, Apple provides a private relay address instead of your personal email address. We request only the name and email scopes needed to create and maintain your account.

If you use an email sign-in link, we collect your email address. Our authentication provider also maintains account, session, and sign-in records. UIAIdol stores a profile record linked to your authenticated user ID, including an optional display name and the date the profile was created.

Technical and support information

Our hosting and authentication providers may process technical request data such as IP address, device or browser information, request time, referral URL, and security or error logs. If you email us, we receive the information you include in that message.

As of the effective date, UIAIdol does not use an advertising, behavioural-tracking, or third-party product-analytics SDK.

Billing and transactional email information

If you choose a paid plan, Stripe processes your payment details and provides UIAIdol with identifiers and billing information needed to maintain the subscription, such as customer and subscription IDs, plan, status, renewal date, and cancellation state. UIAIdol does not receive or store your full payment-card number.

We use Resend to deliver authentication and service emails, including sign-in links and a one-time welcome email. Delivery records may include your email address, message identifier, delivery status, and timestamps.

Developer access and asset-usage information

If you connect the API, CLI, or MCP, we process your authenticated account ID, paid-plan status, developer request times, requested product and asset identifiers, daily delivery count and reserved-byte total, and related security logs. We use this information to provide paid developer access, enforce the 100-delivery and 25 MiB UTC daily allowances, investigate automated bulk collection, and protect the research library.

Developer preview images are resized, watermark-free copies delivered only to authenticated Pro accounts. Signed delivery links contain a short-lived, pseudonymous subject derived from your account ID; it is not your email address, name, or raw account ID.

How we use Google and Apple user data

Google and Apple user data is used only to authenticate you, create and maintain your UIAIdol account, display basic account identity, protect the service, and respond to account-support requests.

UIAIdol does not receive your Google or Apple password and does not request or access Gmail, Google Drive, iCloud, Contacts, Calendar, or other unrelated provider data. We do not use social sign-in data for advertising, sell it, use it to train general-purpose AI models, or make credit, employment, insurance, or other eligibility decisions.

How we use information

• Authenticate you and maintain your signed-in session.
• Provide and improve account and research-library functionality.
• Process subscriptions and keep paid account status in sync.
• Send authentication, welcome, billing, and service messages.
• Detect abuse, secure the service, and troubleshoot errors.
• Respond to questions, privacy requests, and support messages.
• Meet legal obligations and enforce our Terms & Conditions.

When information is shared

We do not sell personal information. We disclose information only as needed to operate the service, comply with law, or protect rights and safety. Our current service providers include:

• Google, when you choose Google as your identity provider.
• Apple, when you choose Apple as your identity provider.
• Supabase, which provides authentication, session management, and the account database.
• Vercel, which hosts uiaidol.com and may process technical request and security logs.
• Cloudflare, which provides the developer API, MCP, rate limiting, and protected asset delivery infrastructure.
• Stripe, which processes subscription payments, manages billing, and helps prevent payment fraud.
• Resend, which delivers authentication and transactional service emails.

We may also disclose information if required by law, in connection with a business reorganisation, or when reasonably necessary to prevent fraud, security incidents, or harm. Any successor would remain subject to this policy or give notice of materially different terms.

Cookies and session storage

UIAIdol and Supabase use essential cookies or similar browser storage to complete sign-in, maintain your session, and protect the service. These are necessary for account functionality. We do not currently use advertising cookies.

You can block or delete cookies in your browser, but account sign-in and other authenticated features may stop working.

Retention and security

We retain account and profile information while your account remains active and for as long as reasonably needed to provide the service, resolve disputes, meet legal obligations, and address security or abuse. Subscription and transaction records may be retained for accounting, tax, fraud-prevention, and legal requirements. Provider logs and backups may remain for limited periods under the providers’ retention practices.

Developer asset-usage records and pseudonymous delivery-grant associations are retained for as long as reasonably needed to enforce allowances, investigate misuse, resolve disputes, and protect the Service.

We use access controls, encrypted connections, row-level database security, and managed infrastructure to protect information. No internet service is completely secure, so we cannot guarantee absolute security.

International processing

UIAIdol is operated from Australia, while Apple, Google, Supabase, Vercel, Cloudflare, and their infrastructure may process information in other countries. Those countries may have different privacy laws. We use reputable providers and take reasonable steps appropriate to the information and service.

Your choices and rights

You may ask to access, correct, or delete personal information held by UIAIdol by emailing hello@uiaidol.com. We may need to verify your identity and may retain limited information where law, security, or dispute-resolution needs require it.

You can sign out of UIAIdol at any time. You can also review or revoke UIAIdol’s Google access through your Google Account permissions or manage Sign in with Apple through your Apple Account settings. If you have a privacy concern, contact us first so we can investigate. Depending on where you live, you may also have the right to complain to a privacy regulator.

Children

UIAIdol is a professional design-research service and is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided information, contact us so we can review and remove it where appropriate.

Changes and contact

We may update this policy as the service changes. We will publish the revised policy here and change the effective date. If a change materially affects how we use existing personal information, we will provide additional notice when appropriate.

For privacy questions, account deletion, or complaints, email hello@uiaidol.com.