Privacy Notice

• Account data (email address, password hash, or Google sign-in identifier) — to create and secure your account and let you sign in. Legal basis: performance of our contract with you.
• Usage data (questions attempted, answers selected, scores, session history, question flags you submit) — to provide the Service, show your progress and analytics, and improve the question bank. Legal basis: contract performance and our legitimate interest in improving the Service.
• Subscription and trial records (plan, status, billing period dates, payment reference numbers, trial start and expiry, marketing consent) — to give you access to what you have paid for. Legal basis: contract performance.
• Technical data (IP address, device and browser information, error logs) — for security, fraud prevention and diagnosing faults. Legal basis: legitimate interests.
• Support correspondence — to answer your questions. Legal basis: legitimate interests.
• Marketing preferences — if you opt in (for example when starting a free trial) we send you product and revision-related emails. Legal basis: consent, which you can withdraw at any time.

Payment card details are never collected or stored by us — they are handled entirely by our payment provider.

• Service providers / subprocessors — our hosting, database, authentication and email providers, who process data on our instructions only.
• Paddle.com, our reseller and Merchant of Record, for the sale of subscriptions, subscription management, payments, tax compliance and invoicing.
• Professional advisers such as our accountants and lawyers, where necessary.
• Authorities, where we are required to disclose data by law.

We do not sell your personal data.

Some of our providers process data outside the UK and EEA. Where that happens we rely on UK/EU adequacy decisions or Standard Contractual Clauses together with appropriate additional safeguards.

We keep account, progress and subscription data for as long as your account is open. If you delete your account we remove your personal data promptly, except records we must keep for legal, tax or accounting purposes (typically six years), which are retained by our payment provider or in anonymised form.

Under UK and EU data protection law you have the right to access your data, to have it corrected or erased, to restrict or object to processing, to data portability, and to withdraw consent to marketing at any time. You can exercise most of these directly from your account page, or email us and we will respond within one month. You also have the right to complain to the UK Information Commissioner's Office (ico.org.uk) or your local supervisory authority.

We use appropriate technical and organisational measures to protect your data, including encryption in transit, hashed credentials, row-level database access controls and restricted administrative access.

We use only essential cookies and local storage needed to keep you signed in and to operate the checkout. We do not use advertising cookies. You can clear or block cookies in your browser, but the Service will not work correctly without the essential ones.