Last updated 18 August 2026
Privacy notice
What we store
Your name, email address and profile picture as Google gives them to us; the programme and study year you pick; and the answers, scores and progress you generate as you use the platform.
Who can see your answers
Only you. Attempts and progress are locked to your account at the database level — no other student can read them, and we do not show individual results to the university or to anyone else.
Why we use your email domain
If you sign in with a university address, we record that your account is verified. We use the domain only to confirm you are a student — nothing is sent to the university and we do not read your mail.
Who processes it
Supabase hosts the database and handles authentication. Google handles sign-in if you use it. If we add payments, a payment provider will process card details — we never see or store card numbers ourselves.
Your rights
Under the GDPR you can ask for a copy of your data, ask us to correct it, or ask us to delete your account and everything attached to it. You can reset your own progress at any time from your account settings. For anything else, use the contact address published in the site footer and we will action it within 30 days.
How long we keep it
For as long as your account exists. Delete your account and your answers and progress go with it.
This is a plain-language draft written to make the product usable, not a reviewed legal document. Have a lawyer check it before you take payments or open sign-ups beyond a test group.



