Effective date: 20 June 2026 · Last updated: 20 June 2026 · Version: 1.0
This Privacy Policy describes how SATASHKENT ("we", "us", "our", or the "Operator")
collects, uses, stores, shares, and protects your personal information when you use the
SATASHKENT mobile application for Android and iOS, the web services at
satashkent.uz, and any related backend services (collectively, the "Service").
By creating an account or using the Service, you confirm that you have read and understood
this Policy. If you do not agree with any part of it, please stop using the Service.
Privacy at a glance
Do we sell your personal data?
No
Do we use your data for advertising or ad profiling?
No
Do we share data with third-party advertisers?
No
Do we collect your location?
No
Do we access your contacts, SMS, calls, or microphone?
No
Do we process card or bank data inside the app?
No
Is data transmitted over encrypted channels (HTTPS / TLS)?
Yes
Are authentication tokens on your device encrypted (AES)?
SATASHKENT is a test-preparation and college-admissions program based in Tashkent,
Republic of Uzbekistan, operating under the motto "You Will Never Walk Alone". Our
mission is to help students reach competitive scores on the SAT (with a target of
1450+ and an aspirational 1600) and gain admission to selective universities worldwide.
Through our POWDER admissions program — run in partnership with
UNLOCK Admissions — and our network of coaches, we serve students in
over 32 countries, in person in Tashkent and remotely online.
Our students have been admitted to universities such as Cornell, Dartmouth, the University of
Chicago, Westminster, CAU and Connecticut College, among others. The SATASHKENT mobile
application is the companion learning, assessment, and mentor-booking platform for our
students; the related learning platform is hosted at
1600.satashkent.uz.
In the meaning of the EU GDPR, the UK GDPR, and the Law of the Republic of Uzbekistan
"On Personal Data", SATASHKENT acts as the data controller responsible for the
personal information processed through the Service. We are committed to handling student
data — much of which belongs to teenagers preparing for university — with care, transparency,
and the minimum collection necessary to deliver our program.
For anything that involves your personal data — access requests, corrections, deletions, or
questions about this Policy — please use the dedicated email above so we can verify and
track the request properly.
2. Information we collect
We follow the principle of data minimization: we collect only the information needed
to deliver and improve the Service. The tables below describe each category.
2.1 Information you provide directly
Category
Examples
Why we collect it
Account credentials
Phone number in Uzbekistan format (+998 XX XXX XX XX), email address, and password (stored only as a salted cryptographic hash on our servers). Phone, email and password are all required at sign-up.
To create your account, sign you in, send password-reset and security messages, and reach you about your enrolment.
Profile information
Full name, profile photo, target / goal university (and its name and image), planned exam date, target SAT score, region, and — if you choose to provide it — your Telegram username so our team can contact you for support
To personalize your experience, display your goal on the dashboard, contact you through your preferred channel, and surface relevant content.
Enrolment and account state
Your tariff / plan, group memberships (the SATASHKENT classes or cohorts you belong to), account verification status, and similar internal flags about your enrolment
To grant access to the courses and groups you are enrolled in, run student–administrator workflows, and prevent abuse.
Educational activity
Assessment attempts, answers, time spent on questions, scores, text highlights you make on questions, comments and reactions on questions, in-app reports you submit about problematic questions or platform issues (including any image attachments you choose to add), Question Rush results, mentor bookings, and your personal notes for sessions
To run assessments, score your work, show progress over time, address issues you report, and enable mentor sessions.
Financial display data
Your current educational balance, next payment due date, and referral discount status. No card numbers, CVVs, or bank credentials are collected by the app.
To show your account status, due dates, and earned referral discounts inside the app.
Referral data
Names of people who registered using your referral code and the status of each referral (pending, approved, completed, rejected)
To run the referral program and apply discounts to your tuition.
Support communications
Messages, screenshots, and attachments you send to [email protected]
To respond to your questions and improve our support.
2.2 Information collected automatically
Category
Examples
Why we collect it
Device and technical data
Device model, operating system version, language, time zone, app version, anonymous device identifier
To deliver a stable experience, diagnose crashes, and tailor content to your device.
Server logs
IP address, request timestamps, HTTP status codes, error traces
To operate and secure the backend, prevent abuse, and debug issues.
Authentication tokens
Short-lived access tokens and refresh tokens issued by our server
To keep you signed in securely between sessions.
App state and preferences
Theme (light / dark), language choice, last-opened tab, notification opt-ins
To remember your preferences between launches.
2.3 Information from device permissions
Camera — used only when you actively (1) take a new profile photo, or (2) open the in-app QR scanner to check in at a SATASHKENT branch booking. We never access the camera in the background, and we do not record video or audio.
Photos / Photo library — used only when you actively choose an existing image as your profile photo. We do not scan or upload other images.
Notifications — used to deliver local reminders for assessments, mentor bookings, and other in-app events you have opted into. Reminders are scheduled and fired entirely on your device; we do not send your booking details to a push-notification server. See Section 6.
Exact alarms / Boot completed — used so assessment time-up alerts fire at the correct moment and your booking reminders survive a device restart.
Vibration / haptic feedback — short taps on UI controls (e.g., tapping a card on the dashboard, answering a Question Rush prompt, or confirming an action). No vibration is used by the timer notification itself.
Internet / Network — required to communicate with our backend over HTTPS.
We do NOT collect or access: your location, contacts, SMS messages, phone-call logs,
microphone audio, calendar entries, or files outside of the single image you explicitly pick
for your profile.
2.4 Information from third parties & embedded services
We do not buy personal information about you from data brokers, advertising networks, or
social-media platforms, and we do not use third-party analytics or advertising SDKs in the app.
The only third-party touch-point inside the app is the optional graphing calculator described below.
Desmos graphing calculator — when you open the on-screen calculator during a math
assessment, the app loads the calculator page from
desmos.com/calculator
inside an embedded browser. To deliver the page, Desmos sees your device's public IP address.
We do not pass your name, account ID, phone number, or your assessment answers to Desmos.
Use of the calculator is governed by Desmos's own
privacy policy.
3. How we use your information
We use the information described above to:
Create your account, authenticate you, and keep your session secure;
Deliver core features: assessments, question bank, Question Rush, mentor bookings, profile, dashboard, and notifications;
Calculate scores and progress and display your historical activity, including the time you spend on the platform and your accuracy trends;
Show your standing on group leaderboards (for example, your rank within your SATASHKENT class or cohort), so you can track your progress alongside classmates — see Section 8 for who can see what;
Show your educational balance, due dates, and referral discount status;
Operate the referral program and prevent abuse of it;
Schedule local notifications for events you create (e.g., a mentor booking) so we can remind you on time;
Read QR codes you point your camera at, to check you in at offline SATASHKENT branch bookings;
Address platform-issue or question-issue reports you submit, including reviewing any image attachments you choose to upload with the report;
Diagnose crashes, fix bugs, and improve the stability and performance of the Service;
Detect, prevent, and respond to fraud, abuse, and security incidents;
Comply with applicable law and respond to lawful requests from public authorities.
4. Legal basis for processing
Where applicable law requires a legal basis, we rely on:
Performance of a contract — to provide the Service you signed up for.
Legitimate interests — to operate, secure, and improve the Service, prevent abuse, and protect our users.
Consent — for optional permissions such as Camera, Photos, and Notifications. You can withdraw consent at any time in your device settings.
Legal obligations — when we must comply with laws of the Republic of Uzbekistan or another applicable jurisdiction.
5. No advertising, profiling, or automated decisions
We do not use your personal information for advertising or to build a profile for
advertising. We do not sell or rent your data. We do not engage in
automated decision-making, including profiling, that produces legal or similarly
significant effects on you. Scoring of your assessments is an automatic calculation, but
it does not have legal effects and is reviewable by you and your mentor at any time.
6. Notifications & reminders
Notifications fall into two categories. You can disable any of them at the operating-system
level at any time.
Local scheduled reminders (booking and assessment timer) — when you book a mentor
session or start a timed assessment, a reminder is scheduled entirely on your device
using the platform's notification scheduler (Android AlarmManager / iOS UserNotifications).
The booking details and the trigger time live on your device only; no push token, no
booking content, and no personal data is sent to any external push-notification server.
If you cancel a booking, the reminder is cancelled locally.
In-app transactional messages — short messages about your account that are necessary
to use the Service (for example, balance updates). You cannot opt out of these while you
have an account, but you can disable notifications at the system level.
Educational and promotional messages — occasional information about new features,
events, or special offers. You can disable these at any time in
Settings → Notifications.
We do not send marketing email or SMS to your registered phone number without your
separate consent.
Some reminders use the platform's exact alarm capability so they fire at the exact
moment you scheduled (for instance, a 10-minute pre-booking reminder, or an assessment
time-up alert). This is used only for reminders you created yourself; nothing runs in the
background between events.
7. Cookies and similar technologies
The SATASHKENT mobile app does not use browser cookies. On your device we use:
Encrypted local store (Hive + AES) — to store your authentication tokens and your preferences.
Local cache — recently used assessment data so the app works smoothly with patchy connectivity.
If you access our website at satashkent.uz, that website may use strictly
necessary cookies for sign-in and security; we do not use advertising or cross-site tracking cookies.
8. How we share your information
We do not sell or rent your personal information. We share data only in the limited cases below.
Mentors. When you book a session with a mentor, that mentor sees your name, profile
photo, the time slot, and any notes you wrote for the session. They do not see your
password, full balance history, or your private assessment answers unless you choose to share them.
Other students in your SATASHKENT group or cohort. Inside the app's group
leaderboards (for example, "Group rank" or "You vs group" on the dashboard), your fellow
students can see your name, profile photo, and aggregate performance numbers — such as
your rank, score, and accuracy — for the period being shown. They do not see your
individual answers, your tuition balance, or your private mentor-session notes.
The educational institution / branch you belong to. Administrators of the
institution that issued your account can see your enrolment status, assessment results
aggregated over time, and your tuition balance. This is necessary for them to operate the
program you joined.
Service providers (sub-processors). We use trusted infrastructure providers — for
example, server hosting, database, object storage, email delivery, and error monitoring —
that process data on our behalf under written agreements. They may only use the data to
provide services to us.
Legal compliance. We may disclose information if required by law, court order, or a
valid request from a competent authority of the Republic of Uzbekistan or another applicable jurisdiction.
Protecting rights and safety. We may disclose information when we believe in good
faith that doing so is necessary to protect the rights, property, or safety of users,
the Operator, or the public.
Business transfers. If the Service is involved in a merger, acquisition, or asset
transfer, your data may be transferred as part of that transaction. We will notify you in
the app before such a transfer becomes effective.
9. Payments, tuition and referrals
The SATASHKENT mobile app does not process payments inside the app. We do not collect
card numbers, CVVs, bank credentials, or wallet IDs through the app, and we do not integrate
any in-app purchase or third-party payment SDK.
The balance and next payment date shown in the app reflect the tuition or service balance recorded by your educational institution. Top-ups and tuition payments are handled outside the app, through your institution's processes.
The referral program rewards you with a discount applied to your tuition. We track which referrals you have made and the status of each (pending, approved, completed, rejected) so we can apply discounts correctly.
For questions about a specific payment or refund, please contact your educational institution directly. We can help with technical issues that affect what you see in the app.
10. Data storage and security
Account data is stored on servers located in the Republic of Uzbekistan and / or in data centres operated by our trusted infrastructure providers.
All traffic between the app and our backend uses HTTPS / TLS 1.2 or higher.
Passwords are stored only as salted cryptographic hashes — never in plain text.
Authentication tokens stored on your device are kept in an AES-encrypted Hive store and in platform secure storage (Android Keystore / iOS Keychain).
Access to production systems is restricted to authorised personnel on a need-to-know basis, with multi-factor authentication.
We log administrative access and monitor for unusual activity.
We carry out security reviews of new features before they ship.
No method of transmission or storage is 100% secure. While we use industry-standard
practices, we cannot guarantee absolute security. If we detect a personal-data breach that
is likely to result in a high risk to your rights, we will notify you in the app or by email
within 72 hours of becoming aware of it.
11. Data retention
We keep personal information only as long as necessary:
Data category
Retention period
Account profile (name, phone, email, photo, goal)
While your account is active.
Assessment attempts, scores, comments, Question Rush history
While your account is active.
Mentor bookings and session notes
While your account is active; cancelled bookings: up to 12 months.
Financial / tuition records (balance changes, referral discount payouts)
Up to 5 years after the transaction, for accounting and tax law compliance.
Server logs (IP, request times)
Up to 12 months.
Security and abuse-prevention logs
Up to 12 months.
Support correspondence
Up to 24 months after the issue is resolved.
Local scheduled reminders on your device
Until the reminder fires, you cancel the booking, or you uninstall the app.
Soft-deleted accounts awaiting permanent deletion
30 days from the moment the soft-delete state begins, after which permanent deletion runs.
Backups containing your data
Overwritten on a regular cycle, typically within 30 days of permanent deletion.
Anonymised / aggregated analytics
Indefinite — cannot be linked back to you.
When you delete your account (see Section 15), we follow this schedule to remove or anonymise your data.
12. International data transfers
We primarily store and process data in the Republic of Uzbekistan. If we use service
providers based abroad — for example, an error-monitoring or email-delivery vendor — we
ensure that any transfer of your personal data is protected by appropriate safeguards (such
as contractual clauses where required) and is consistent with applicable law, including the
EU GDPR where it applies.
13. Your rights
Depending on the laws that apply to you, you have the following rights:
Access — request a copy of the personal data we hold about you.
Correction — ask us to fix inaccurate or incomplete information. You can also edit most of your profile data directly in the app.
Deletion ("right to be forgotten") — request that we delete your account and associated personal data (see Section 15).
Restriction — ask us to limit how we use your data in certain cases.
Objection — object to processing based on legitimate interests.
Withdraw consent — disable Camera, Photos, or Notification permissions in your device settings at any time. Withdrawal does not affect processing already carried out lawfully.
Portability — request a machine-readable export of the personal data you provided to us.
Lodge a complaint — with the competent data-protection authority in your country of residence.
Not be subject to automated decisions — as described in Section 5, we do not make such decisions about you.
13a. Your controls in the app
Beyond the legal rights above, the app gives you direct, in-product controls over what
appears on your public profile. Open Settings → Privacy → Profile visibility
to find independent on/off switches for each of the following:
Show my name — your full name on your public profile.
Show my phone — your phone number on your public profile.
Show my email — your email address on your public profile.
Show my avatar — your profile photo on your public profile.
Show my groups — the SATASHKENT classes or cohorts you belong to.
Each switch is independent. Turning a switch off does not delete the underlying data
from your account — it only hides that field from other users on your public profile.
Administrators of your educational institution can still see the data they need to run the
program, as described in Section 8.
You can also control device-level privacy by enabling or disabling the Camera, Photos, and
Notification permissions in your operating system settings.
14. How to exercise your rights
To exercise any of the rights above, email
[email protected] from the address
or phone number registered on your account. Please include:
Your registered phone number on the account;
Your full name;
A short description of the request (e.g., "I would like a copy of my data");
Any details that will help us locate your account.
We will respond within 30 days. For complex requests we may extend this period by up
to a further 60 days and will tell you why. For security, we may ask you to verify your
identity before we act. Exercising your rights is free of charge unless your request is
manifestly unfounded or excessive.
15. Account deletion
You can request deletion of your account in two ways:
From inside the app: open the Profile tab, scroll to Delete account, re-enter your password, and confirm.
By email: send a request to [email protected] if you cannot sign in.
Deletion is performed in two phases so that an accidental request can be undone:
30-day recovery window (soft delete). Once we verify your identity, your account is
placed in a locked state. You are signed out, your profile becomes hidden from everyone,
upcoming bookings are cancelled, and your phone number is reserved for you. During these
30 days you can email us to cancel the request and your account is fully restored to its
previous state — usually within 2 business days.
Permanent deletion (after day 30). If you do not cancel within the recovery window,
your personal data is permanently removed from our active systems, and your data is
overwritten in our backups during the next backup-rotation cycle (typically within a
further 30 days). A small set of records may be retained for legal, accounting, or
security reasons — see Section 11 and our delete-account page for details.
Full instructions, the day-by-day timeline, what is removed, what may be retained, and how
to cancel a pending deletion are on our dedicated page:
Because the Service is built around SAT preparation and college admissions, most of our
students are minors — typically aged 15 to 18 — and a portion of users in other
countries may be even younger. We take particular care with the personal data of minors.
The Service is intended for users aged 13 and above. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe a child under 13 has provided us with personal data, please contact [email protected] and we will delete the account promptly.
For users between 13 and the age of majority in their country, we strongly recommend reviewing this Policy together with a parent or guardian before creating an account, and using the Service under their supervision.
Where required by local law (for example, certain U.S., EU, and UK rules for under-16s), we will obtain verifiable parental consent before processing the personal data of a minor.
We do not use the personal data of minors for marketing, advertising, or profiling. As stated in Section 5, we do none of these for any user.
Parents and guardians can email [email protected] at any time to ask what data we hold about a child in their care, to correct it, or to request its deletion.
17. Region-specific notices
17.1 European Economic Area (EEA), United Kingdom and Switzerland
If you are located in the EEA, UK or Switzerland, the EU GDPR, UK GDPR, or the
Swiss FADP applies to our processing. The Operator acts as the controller. The legal bases
for processing are described in Section 4. You have the rights listed in Sections 13–14, and
the right to lodge a complaint with your local supervisory authority. We may rely on standard
contractual clauses for transfers to countries outside the EEA / UK.
17.2 California, USA
If you are a California resident, the California Consumer Privacy Act (CCPA) as
amended by the CPRA applies. You have rights to know, delete, correct, opt out of "sale" and
"sharing" (we do neither), and to limit the use of sensitive personal information. We do not
sell or share personal information as defined under the CCPA.
To exercise any right, contact
[email protected].
17.3 Republic of Uzbekistan
We process personal data in accordance with the Law of the Republic of Uzbekistan
"On Personal Data" (No. ZRU-547) and related regulations. Personal data of citizens of the
Republic of Uzbekistan is stored on databases located within the territory of the Republic
of Uzbekistan, where required by law.
18. Third-party links
The Service may contain links to external content — for example, university pages, public
educational resources, or partner websites. We are not responsible for the privacy practices
of those third parties. Please review their policies before providing personal data.
19. Changes to this policy
We may update this Policy from time to time. When we make material changes we will:
Update the "Last updated" date and version number at the top of this page;
Notify you in the app or by another reasonable means before the changes take effect;
Where required by law, request your renewed consent.
Your continued use of the Service after the changes take effect means you accept the updated Policy.
20. Contact us
If you have any questions, requests, or complaints about this Policy or your data, please contact us: