Privacy Notice

1. Who we are

RevisionEasy is operated by Noah James as a sole trader, trading as RevisionEasy ("we", "us"). We are the data controller for personal data processed through revisioneasy.co.uk and the RevisionEasy app. Contact: noahjames7567@gmail.com.

2. What we collect and why

• Account data (name, username, email, login credentials, avatar choices) — to create and run your account. Legal basis: performance of contract.
• Profile and study data (subjects, exam boards, exam dates, study sessions, XP, notes generated, answers submitted) — to provide the Service and personalise your revision. Legal basis: performance of contract.
• Social data (friendships, duel participation and scores) — to power friends, leaderboards and duels. Legal basis: performance of contract.
• Support messages — to help you when you contact us. Legal basis: legitimate interests.
• Usage and device data (IP address, device type, browser, pages visited, error logs) — for security, fraud prevention, analytics and service improvement. Legal basis: legitimate interests.
• Subscription metadata (your subscription status, plan, period dates) — to gate access to paid features. Legal basis: performance of contract.

Payment details (card numbers etc.) are collected directly by Paddle and never reach us.

3. Who we share data with

• Hosting and backend infrastructure providers who host our database, file storage and edge functions on our behalf.
• AI model providers who process your prompts to generate notes, flashcards and marking. Prompts may include the topic and answer text you submit.
• Paddle, our Merchant of Record, who handles payments, subscription management, tax compliance, invoicing and refunds.
• Professional advisers (legal, accounting) where needed.
• Authorities where required by law.

We never sell your personal data.

4. International transfers

Some of our service providers (including AI model providers and Paddle) are based outside the UK/EEA. Where data is transferred internationally, we rely on appropriate safeguards such as the UK International Data Transfer Agreement, EU Standard Contractual Clauses, or adequacy decisions.

5. How long we keep data

We keep account and study data for as long as your account is active. If you delete your account or are inactive for an extended period, we delete or anonymise your personal data within a reasonable time, except where we must keep records for legal, tax or fraud-prevention reasons (typically up to 6 years for billing records).

6. Your rights

Under UK GDPR you have the right to access, rectify, erase, restrict or object to processing of your personal data, the right to data portability, and the right to withdraw consent where processing is based on consent. You can also complain to the UK Information Commissioner's Office (ico.org.uk). To exercise any right, email noahjames7567@gmail.com — we'll respond within one month.

7. Security

We use appropriate technical and organisational measures to protect your data, including encryption in transit, role-based access controls, and database row-level security.

8. Cookies

We use essential cookies and local storage to keep you signed in and to remember preferences. We do not currently use advertising cookies. You can clear cookies through your browser settings; doing so will sign you out.

9. Children

RevisionEasy is intended for A-Level students. If you are under 16, please use the Service only with the consent of a parent or guardian.

10. Changes

We may update this notice from time to time. We will post any changes here and update the "Last updated" date.