Privacy Policy
1. Information We Collect
- Account Information: name, email address, login details, and subscription plan information.
- Usage Data: information about how you use the Service, including pages viewed, study materials created, and interactions with features.
- Payment Information: payment details processed securely by our third-party payment providers (we do not store full card details).
- Device & Technical Data: IP address, browser type, operating system, and cookies.
2. How We Use Your Information
- To provide, operate and maintain the Service.
- To process payments and manage subscriptions.
- To personalise your experience (e.g. saving study materials and progress).
- To send service updates, notifications and relevant communications (you may opt out of non-essential marketing).
- To improve the Service and develop new features.
- To comply with legal obligations and enforce our Terms.
3. Legal Basis for Processing (UK & GDPR)
We process your personal data under the following bases:
- Contractual necessity — to provide you with the Service you requested.
- Consent — for optional uses such as marketing emails (you may withdraw consent at any time).
- Legitimate interests — to improve the Service and protect against misuse.
- Legal obligation — where processing is required by law or regulation.
4. Sharing Your Information
We do not sell your personal data. We may share your information with:
- Trusted third-party service providers (e.g. hosting, analytics, payment processing) who act under contractual obligations.
- Authorities or regulators where required by law.
- Other parties in connection with a business transfer (e.g. merger or acquisition).
5. Cookies & Tracking
We use cookies and similar technologies to operate the Service, improve performance, and analyse usage. You can manage cookie preferences through your browser settings. For details, see our Cookie Policy.
6. Data Storage & Retention
We store your personal data securely within the UK or EEA. Where transfers outside the UK/EEA occur, we ensure adequate safeguards (such as Standard Contractual Clauses).
We retain data only as long as necessary for the purposes set out in this policy, or to comply with legal obligations. When no longer required, data is securely deleted or anonymised.
7. Security
We use appropriate technical and organisational measures to protect your data, including encryption and access controls. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.
8. Your Rights
Under UK GDPR, you have the right to:
- Access and receive a copy of your personal data.
- Correct or update inaccurate or incomplete data.
- Request deletion of your data (subject to legal exceptions).
- Restrict or object to processing in certain circumstances.
- Data portability — request transfer of your data to another service.
- Withdraw consent at any time where processing is based on consent.
You also have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO).
9. Children’s Privacy
The Service is not directed at children under 16. If we learn that we have collected personal data from a child without appropriate consent, we will delete it.
10. Changes to This Policy
We may update this Privacy Policy from time to time. If changes are material, we will notify you (e.g. by email or a notice on our website). Continued use of the Service after changes take effect means you accept the revised policy.