Privacy Notice
Last updated: 2026-09-14
What we collect and why
- Name, email address and password (stored as a one-way hash) — to create and secure your account and greet you by name. Lawful basis: performance of our contract with you.
- Your questions, answers, tags, attempts and test sessions — this is the product; it is what the app stores and analyses for you. Lawful basis: performance of contract.
- Your timezone, read from your browser — so daily streaks use your local day. Lawful basis: performance of contract.
- Billing status — we store your Stripe customer and subscription identifiers and status. Card details are held by Stripe, never by us. Lawful basis: performance of contract and legal obligation (accounting).
Who else processes your data
- Anthropic (Claude API) — receives the screenshots you upload for extraction, and the text of questions you got wrong in Test sessions (Premium) to generate insights. Used only to provide those features.
- Stripe — payments and subscription management.
- Google Workspace — sends password-reset emails from our own domain mailbox; receives your email address only.
- Our hosting and database providers, who store the data on our behalf.
Cookies
We use one strictly necessary cookie to keep you signed in. We use no advertising or analytics cookies, so no cookie banner is required. Your appearance preferences are stored in your own browser only.
Marketing
We do not send marketing emails. If that ever changes it will be opt-in only.
Retention and deletion
We keep your data while your account exists. Deleting your account from Settings permanently erases your account and every question, tag, attempt, session and insight — it is a real deletion, not a deactivation. Stripe retains invoice records as required by law.
Your rights
You can access and download all of your data from Settings at any time, correct your details, or delete your account. You also have the right to object, to restrict processing, and to complain to your data-protection authority (in the UK, the ICO).
Contact
Data controller: the operator of this site. Contact: see the app's contact details.