Privacy Policy

Last updated: 2 September 2026

Information We Collect

Account information: your name, email address, and test preferences you provide during registration.

Learning data: your progress, test scores, study patterns, and completion rates, used to personalise your experience.

Purchase information: whether you've unlocked Premium, and which store or payment method you used. We never see or store your card details ourselves.

Device information: device type, browser information, and IP address, used for security and basic usage analytics.

How We Use Your Data

• Provide and improve our educational services
• Track your learning progress and personalise recommendations
• Send important updates about your account and learning
• Analyse usage patterns to enhance the app experience
• Ensure platform security and prevent fraud

Data Protection

We implement industry-standard security measures to protect your personal information:

• Encrypted data transmission using SSL/TLS
• Secure cloud storage with row-level access controls, so your data is only ever visible to you
• Authentication handled by a dedicated identity provider, not custom code

Your Rights

Under UK data protection law, you have the right to:

• Access your personal data
• Correct inaccurate information
• Request deletion of your data
• Object to data processing
• Export your data in a portable format
• Withdraw consent at any time

Data Retention

We retain your personal data for as long as your account is active or as needed to provide services. You may request account deletion at any time, after which your data will be permanently removed within 30 days.

Third-Party Services

We do not sell your personal information to third parties. We use Supabase to host our database and handle sign-in. Premium purchases are processed by Stripe on the web, or through Google Play or the Apple App Store on mobile (validated on our behalf by RevenueCat). None of these services give us direct access to your card details -- they handle payment securely themselves.

This privacy policy is compliant with UK GDPR and the Data Protection Act 2018.