Privacy Policy

1. Introduction

INTELLISTUDY LTD ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you use our LearnWise platform and services.

We are the data controller for the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Information We Collect

2.1 Information You Provide

• Account Information: Name, email address, phone number, password
• Profile Information: Date of birth, school name, year group, subjects, exam boards
• Payment Information: Billing address, payment card details (processed securely by Stripe)
• User Content: Notes, flashcards, study materials you create
• Communications: Messages, support requests, feedback

2.2 Information We Collect Automatically

• Usage Data: Questions answered, time spent, topics studied, performance data
• Device Information: IP address, browser type, operating system, device identifiers
• Cookies and Tracking: See our Cookie Policy for details
• Log Data: Access times, pages viewed, referring URLs

2.3 Information from Third Parties

• Social Login Providers: Name, email, profile picture (if you sign in with Google or Apple)
• Schools: Student information provided by educational institutions

3. How We Use Your Information

We use your information to:

• Provide, maintain, and improve the Service
• Create and manage your account
• Process payments and subscriptions
• Personalise your learning experience using AI
• Generate performance analytics and predicted grades
• Send important service notifications
• Respond to your enquiries and support requests
• Send marketing communications (with your consent)
• Detect and prevent fraud and abuse
• Comply with legal obligations
• Improve our AI models and educational content

4. Legal Basis for Processing

We process your personal data on the following legal bases:

• Contract: To perform our contract with you (providing the Service)
• Consent: For marketing communications and non-essential cookies
• Legitimate Interests: To improve our services, prevent fraud, and ensure security
• Legal Obligation: To comply with applicable laws

5. Data Sharing

We may share your information with:

• Service Providers: Companies that help us operate the Service (hosting, payment processing, email delivery)
• Schools/Teachers: If you're part of a school subscription, your teachers and school administrators may see your progress
• Parents: If parental access is enabled, parents may view their child's progress
• Legal Authorities: When required by law or to protect our rights
• Business Transfers: In connection with a merger, acquisition, or sale of assets

We do not sell your personal data to third parties for advertising purposes.

6. Data Retention

We retain your personal data for as long as:

• Your account is active
• Needed to provide you with the Service
• Required by law (e.g., financial records for 7 years)
• Necessary for legitimate business purposes

After account deletion, we may retain anonymised data for analytics and research purposes.

7. Data Security

We implement appropriate security measures including:

• Encryption of data in transit (TLS) and at rest
• Secure password hashing
• Regular security audits
• Access controls and authentication
• Employee training on data protection

8. International Data Transfers

Your data may be transferred to and processed in countries outside the UK. When this happens, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the UK Information Commissioner's Office.

9. Your Rights

Under UK GDPR, you have the right to:

• Access: Request a copy of your personal data
• Rectification: Request correction of inaccurate data
• Erasure: Request deletion of your data ("right to be forgotten")
• Restriction: Request limitation of processing
• Portability: Receive your data in a machine-readable format
• Object: Object to processing based on legitimate interests
• Withdraw Consent: Withdraw consent at any time where processing is based on consent

To exercise these rights, contact us at [email protected]. We will respond within one month.

10. Children's Privacy

Our Service is designed for students aged 13 and above. We do not knowingly collect personal information from children under 13 without parental consent.

For users under 18, we recommend parental involvement in account creation and monitoring of the Service use.

11. Cookies

We use cookies and similar technologies. Please see our Cookie Policy for detailed information about the cookies we use and how to manage your preferences.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by email or by posting a notice on our website. Your continued use of the Service after changes constitutes acceptance of the updated policy.

13. Contact Us

For any questions about this Privacy Policy or to exercise your data protection rights, please contact us:

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk if you believe your data protection rights have been violated.