Legal

Privacy Policy

Last updated: April 2026 · Revisionary Ltd

Plain English summary: We collect only what we need to run the service. We never sell your data. Students' data is treated with extra care. You can request deletion at any time.

1. Who we are

Revisionary Ltd ("Revisionary", "we", "us") operates the Revisionary platform at revisionary.co.uk — an AI-powered revision tool for UK GCSE and A-Level students.

We are the data controller for the personal data we collect. For data protection queries, contact us at: privacy@revisionary.co.uk

2. What data we collect

Account information: When you sign up, we collect your name, email address, and password (stored as a secure hash — we never see your actual password).

Usage data: We record your study activity — flashcard ratings, quiz scores, Pomodoro sessions, exam papers generated, and XP earned. This powers your progress tracking and leaderboard.

Payment data: If you subscribe, payments are handled by Stripe. We store your subscription status and tier but never your card details — those stay with Stripe.

Device and technical data: Standard web server logs including IP address, browser type, and pages visited. Used for security and debugging only.

AI interactions: Questions submitted to our AI tutor are processed to generate responses. We do not use your questions to train AI models.

3. How we use your data

We use your data only to:

  • Provide and personalise the Revisionary service
  • Track your progress and award XP and badges
  • Process subscription payments
  • Send account-related emails (e.g. password resets, receipts)
  • Improve the platform through aggregated, anonymised analytics
  • Comply with legal obligations

We will never sell your personal data or use it for advertising purposes.

4. Children's data

Revisionary is designed for students, many of whom may be under 18. We take children's privacy seriously and comply with the UK General Data Protection Regulation (UK GDPR) and the Children's Code (Age Appropriate Design Code).

Under-13s: We require parental or guardian consent before children under 13 create an account. Where schools use Revisionary, they act as the responsible party for obtaining appropriate consents.

School use: When Revisionary is deployed through a school, the school acts as a data controller alongside us. We will provide a Data Processing Agreement (DPA) on request — email privacy@revisionary.co.uk.

We do not serve behavioural advertising to any users, and especially not to children.

5. Legal basis for processing

Under UK GDPR, we process your data on the following bases:

  • Contract: Processing necessary to provide the service you signed up for
  • Legitimate interests: Platform security, fraud prevention, and service improvement
  • Legal obligation: Where we must comply with law
  • Consent: For any optional marketing communications

6. Who we share data with

We use a small number of trusted third-party services to operate Revisionary:

  • Supabase — database and authentication (data stored in EU region)
  • Anthropic / OpenAI — AI question and feedback generation
  • Stripe — payment processing
  • Vercel — website hosting (EU region)

All third-party processors are contractually bound to protect your data and may only use it to provide their services to us. We do not share your data with any other third parties except where required by law.

7. Data retention

We keep your account data for as long as your account is active. If you delete your account, we will delete your personal data within 30 days, except where we are required to retain it for legal or tax reasons (e.g. payment records, which we keep for 7 years).

Aggregated, anonymised analytics data (with no personal identifiers) may be retained indefinitely.

8. Your rights

Under UK GDPR, you have the right to:

  • Access the personal data we hold about you
  • Correct inaccurate data
  • Delete your account and data
  • Portability — receive your data in a machine-readable format
  • Object to certain types of processing
  • Restrict processing in certain circumstances

To exercise any of these rights, email privacy@revisionary.co.uk. We will respond within 30 days. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO).

9. Cookies

We use only essential cookies required to keep you logged in and keep the service secure. We do not use advertising cookies or third-party tracking cookies.

A session cookie is set when you log in and expires when you log out or close your browser. No cookie consent banner is required as we only use strictly necessary cookies.

10. Security

We take security seriously. Your password is hashed and never stored in plain text. All data is transmitted over HTTPS. We regularly review our security practices.

If you believe you have found a security vulnerability, please disclose it responsibly by emailing security@revisionary.co.uk.

11. Changes to this policy

We may update this policy from time to time. If we make significant changes, we will notify you by email or a notice in the app. The "last updated" date at the top of this page reflects the most recent version.

12. Contact us

For any privacy-related questions or to make a data request:

📧 privacy@revisionary.co.uk

Revisionary Ltd, England & Wales

© 2026 Revisionary Ltd. All rights reserved.