Privacy Policy - myrevisionary

1. Who We Are

myrevisionary ltd (Company No. 1695473) is the data controller responsible for your personal data. We are registered with the Information Commissioner's Office (ICO) under registration number ZB995810.

Contact:
General support: support@myrevisionary.com
Privacy enquiries: privacy@myrevisionary.com
Address: myrevisionary ltd, United Kingdom

2. Information We Collect

2.1 Information You Provide

Account information: Name, email address, password (encrypted)
Profile information: Student name, year group, selected GCSE subjects
Learning style data: Responses to our VARK assessment questionnaire
Parent/guardian information: Name, email address (for progress reports)

2.2 Information Generated Through Use

Learning progress: Topics studied, understanding levels, session history
Chat interactions: Conversations with our AI revision coach
Usage data: Login times, session duration, features used

2.3 Technical Information

IP address and approximate location (country level)
Browser type and version
Device type and operating system
Cookies and similar technologies (see our Cookie Policy)

3. How We Use Your Information

We use your information to:

Provide our service: Deliver personalised revision support based on your learning style
Track progress: Monitor understanding and adapt our AI coach to your needs
Send progress reports: Weekly updates to parents/guardians (where registered)
Improve our service: Analyse usage patterns to enhance the learning experience
Communicate with you: Service updates, support responses, and important notices
Ensure security: Protect against fraud, abuse, and unauthorised access

4. Legal Basis for Processing

Under UK GDPR, we process your data based on:

Contract: To provide the revision service you've signed up for
Legitimate interests: To improve our service and ensure security
Consent: For optional communications and parent progress reports
Legal obligation: Where required by law

5. Children's Privacy

Our service is designed for GCSE students (typically aged 14-16). We take children's privacy seriously:

We collect only the minimum data necessary for the service
We do not sell or share children's data with third parties for marketing
Parents/guardians can request access to or deletion of their child's data
We provide age-appropriate privacy information
AI interactions are designed to be safe and educational

For users under 13, we require parental consent before creating an account.

6. Data Sharing

We share your data only with:

Parents/guardians: Progress reports (where registered and consented)
Service providers: Hosting (UK-based servers), email delivery, AI processing
Legal requirements: If required by law or to protect rights and safety

We do NOT sell your personal data. We do NOT share data with advertisers.

7. Data Storage and Security

Location: All data is stored on UK-based servers
Encryption: Data is encrypted in transit (TLS) and at rest
Access controls: Strict access controls and authentication
Regular audits: Security practices are regularly reviewed
Insurance: Professional indemnity insurance with Hiscox (£1,000,000 cover)

8. Data Retention

We retain your data for:

Active accounts: For the duration of your account
After account deletion: Up to 30 days for backup purposes
Legal requirements: Longer if required by law
Anonymised data: May be retained indefinitely for service improvement

9. Your Rights

Under UK GDPR, you have the right to:

Access: Request a copy of your personal data
Rectification: Correct inaccurate data
Erasure: Request deletion of your data ("right to be forgotten")
Restriction: Limit how we process your data
Portability: Receive your data in a portable format
Object: Object to certain processing activities
Withdraw consent: Where processing is based on consent

To exercise these rights, contact privacy@myrevisionary.com. We will respond within 30 days.

10. Complaints

If you're unhappy with how we handle your data, you can:

Contact us at privacy@myrevisionary.com
Lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk

11. Changes to This Policy

We may update this policy from time to time. We will notify you of significant changes via email or through the platform. The "Last updated" date at the top indicates when changes were made.