Privacy Policy
Last updated: 16 October 2026
What we collect when you use Prezi Prep, why, who we share it with, and the choices you have. Written for the parents who read it as much as for the learners who don't.
Summary of key points
Who we are. Prezi Prep, an exam-practice service for pupils in Uzbekistan, operated from the Republic of Uzbekistan.
What we collect. What your Telegram account tells us (id, name, username, photo), the phone number you share in the bot, your language, and everything that comes from practising: tests taken, answers given, results, rewards and streaks. No payment card details — those go to a payment provider, never to us.
Children. The learners are children. Accounts are created by a parent or guardian, who consents on the child's behalf. We collect only what the Services need, we show no advertising, and we never sell data.
Who sees it. Our hosting, database and analytics providers, Telegram (for sign-in and messages), and a parent account linked to the learner. Other students see a first name, an initial and a score on the rankings board. Nobody else, unless the law requires it.
Where it lives. On servers outside Uzbekistan — in Singapore and the United States — with providers bound by contract to protect it.
Your rights. See, correct or delete your data, or withdraw consent, by writing to us through @PreziPrepBot. Details in section 11.
1. What information do we collect?
Information you give us
- Telegram account details. When you sign in, Telegram sends us your Telegram user id, first name, last name, username and profile photo (if set).
- Phone number. During registration the bot asks you to share your phone number. It identifies the account and lets us contact you about the Services. We only accept the number of the Telegram account that is registering — a contact card for someone else is refused.
- Preferences. The language you pick and, if you tell us, the learner's school year.
- Parent–child links. A parent account may be linked to a learner's account so that the parent can follow progress.
- Messages to us. Anything you write to us through the bot or the contact page.
Information created by using the Services
- Practice data. Which tests were started and finished and when, the answers chosen, scores, percentages, points, coins, the practice streak, and vocabulary progress.
- Plan and payments. Which plan the account is on and when it expires, and a record of each payment: the plan, the amount, any voucher used, its status and time, and Click (CLICK LLC)'s transaction reference. Card details are entered on Click's own payment page and never reach our systems.
- Technical data. Our hosting provider records standard request logs — IP address, browser type, the pages requested and the time — for a short period, for security and troubleshooting. Our analytics count page views without cookies and without identifying you.
We do not collect precise location, your contacts, photos other than the Telegram profile photo, or any special categories of personal data (health, religion, ethnicity and the like).
2. How do we use your information?
- to create and run the account, and to let you back in;
- to provide the Services: serve tests, grade answers, keep history, calculate points, coins and streaks;
- to let a linked parent see a learner's progress;
- to show the rankings board — a first name, a last-name initial and a score — to other signed-in students;
- to activate paid plans and confirm what has been paid for;
- to send service messages through the bot — registration, important changes, replies to your questions. We do not send marketing messages without consent, and never to a child;
- to keep the Services safe: detect abuse, multiple accounts and automated play, and secure our systems;
- to understand how the Services are used, in aggregate, and improve them;
- to comply with legal obligations.
3. What legal bases do we rely on?
Under the Law of the Republic of Uzbekistan "On Personal Data" and, where it applies, other data protection law, we process personal data because:
- you (or the parent or guardian) have consented — given when the account is registered, and withdrawable at any time (section 11);
- it is necessary to perform our agreement with you — the Terms of Service — that is, to provide the Services you asked for;
- we have a legitimate interest in keeping the Services secure, preventing abuse and improving them, where that interest is not outweighed by your rights;
- the law requires it — for example, keeping records of payments.
4. When and with whom do we share your information?
We share personal data only with the parties below, only for the purposes above, and never sell it.
| Recipient | What they do | Where |
|---|---|---|
| Vercel, Inc. | Hosts and serves the application; keeps short-lived request logs. | United States / global edge network |
| Neon, Inc. | Stores the database — accounts, practice data, plans. | Singapore (AWS ap-southeast-1) |
| Telegram Messenger Inc. | Signs you in and delivers bot messages. Telegram processes your data under its own privacy policy. | global |
| Vercel Web Analytics | Counts page views in aggregate, without cookies or identifiers. | United States |
| Click (CLICK LLC) | Processes card payments for paid plans. We receive confirmation of payment, not your card details. | Uzbekistan |
| A linked parent account | Sees the learner's progress and results. | — |
| Other signed-in students | See a first name, a last-name initial and a score on the rankings board — no photo, no phone number. | — |
We may also disclose data if the law requires it, to protect the rights and safety of users or the public, or as part of a merger or transfer of the Services — in which case we will tell you.
5. Do we use cookies and similar technologies?
Yes, a few: a session cookie that keeps you signed in, a cookie that remembers your language, a short-lived cookie used during sign-in, and browser storage for your theme and for a test you are in the middle of. Our analytics are cookieless. Everything is listed, with lifetimes, in the Cookie Policy.
We do not use advertising or cross-site tracking cookies, and we do not respond to "Do Not Track" signals because we do not track.
6. How do we handle sign-in through Telegram?
Telegram is the only way to sign in. When you use the Telegram login button or open the Mini App, Telegram sends us a signed set of profile details (id, name, username, photo). We verify the signature and use those details to find or create your account. We never receive your Telegram password or your messages, and we cannot post on your behalf.
Telegram's handling of your data — including when you share your phone number with our bot — is governed by Telegram's Privacy Policy.
7. Is your information transferred internationally?
Our servers are not in Uzbekistan. The database is hosted by Neon, Inc. in Singapore (AWS ap-southeast-1), and the application by Vercel, Inc. in the United States / global edge network. Telegram operates globally.
We protect data in transit with TLS, at rest with our providers' encryption, and by contract: each provider is bound by data-processing terms that restrict what it may do with the data. By registering, you (or the parent or guardian) consent to this transfer.
8. How long do we keep your information?
- Account and practice data — for as long as the account exists. When an account is deleted, personal data is removed from our active systems within 30 days; backups held by our database provider expire on their own schedule shortly after.
- Sessions — the sign-in cookie lasts 30 days from its last renewal and can be revoked earlier.
- Messages to support — for as long as needed to handle your request, and then for a reasonable period as a record.
- Request logs — a short period, as set by our hosting provider.
- Payment records — for the period required by accounting and tax law.
We may keep aggregated statistics that no longer identify anyone.
9. How do we keep your information safe?
We use technical and organisational measures appropriate to the data we hold: sign-in only through Telegram (we store no passwords), signed and HTTP-only session cookies, TLS on every connection, encryption at rest, server-side grading so that answer keys never reach a device, and access to production data limited to the people who need it. The Security page describes these in more detail.
No system is perfectly secure, so we cannot guarantee that data will never be accessed unlawfully — but if it is, we will tell you and the authorities as the law requires.
10. Do we collect information from children?
Yes — knowingly, and by design. The Services exist for children preparing for entrance examinations, so most learners are under 18. Because of that:
- an account for a learner under 18 is created by a parent or legal guardian, who consents to this policy on the child's behalf and can withdraw that consent at any time;
- we collect only what the Services need, and nothing for advertising — there are no advertisements in the Services;
- there are no profiles, no chat between users, and no way for strangers to contact a learner through the Services; the only thing other students see is a first name, an initial and a score on the rankings board;
- a parent can ask at any time to see, correct or delete a learner's data (section 11).
If you believe we hold data about a child without a parent's or guardian's consent, contact us through @PreziPrepBot and we will delete it.
11. What are your privacy rights?
You — or, for a learner under 18, the parent or guardian — can:
- access the personal data we hold about the account and receive a copy;
- correct data that is inaccurate or incomplete;
- delete the account and its data;
- withdraw consent at any time, with effect for the future — which in practice means closing the account, because the Services cannot run without the data;
- object to processing based on our legitimate interests;
- complain to the authorised state body for personal data protection in the Republic of Uzbekistan if you believe we have broken the law. We would ask you to contact us first, so that we can put things right.
To exercise a right, write to us through @PreziPrepBot or the contact page. We may ask you to confirm that you control the Telegram account in question. We answer within the time the law allows, and normally within 10 working days.
12. Do we make updates to this policy?
Yes, when the Services or the law change. The date at the top shows the latest version. Material changes will be announced in the app or through the bot; where the law requires fresh consent, we will ask for it.
13. How can you contact us about this policy?
Through the Telegram bot @PreziPrepBot, or the contact page.
Operator: Prezi Prep, the Republic of Uzbekistan.
14. How can you review, update or delete your data?
Your profile in the app shows the account's name, phone number and plan; practice history is on the Tests tab. To change the name, phone number or language, or to delete the account and all its data, write to us through @PreziPrepBot; we will confirm the change or deletion. Deletion is permanent: results, points and coins cannot be restored.