🔒

Privacy Policy

Last updated: May 2026 · www.studycoachai.co.uk

This policy explains what personal data we collect, why we collect it, and your rights under UK GDPR and the Data Protection Act 2018.

1. Data controller

Study Coach AI is the data controller for personal data collected through Study Coach AI at www.studycoachai.co.uk.

2. What data we collect

Account data: name, email address, role (student/teacher/parent), education level, subjects, exam board and exam date — provided when you register or complete onboarding.

Usage data: AI generations, exam attempts, scores, flashcard sessions, revision plans and study streaks — to power your progress tracking.

Payment data: subscription status and Stripe customer ID. We never store card numbers — payments are handled entirely by Stripe.

Technical data: browser type, device type, IP address and cookies — collected automatically for security and performance.

Content you submit: exam answers, uploaded images (camera marking), and notes — used solely to provide the service to you.

3. How we use your data

To provide and personalise the revision service
To process subscription payments via Stripe
To track your study progress and generate recommendations
To send service emails (account confirmation, password reset, study reminders)
To improve the platform through aggregated, anonymised analytics
To comply with legal obligations

4. Legal basis for processing

Contract: processing necessary to provide the service you signed up for
Legitimate interests: improving the service, preventing fraud, security
Consent: optional study reminder emails (you can unsubscribe at any time)
Legal obligation: financial records, responding to lawful requests

5. Who we share data with

We share data only with trusted service providers who process it on our behalf:

Supabase (database and authentication) — data stored in the EU
Anthropic (AI processing) — exam answers and prompts sent for AI generation; Anthropic's privacy policy applies
Stripe (payment processing) — billing data only
Netlify (frontend hosting) — no personal data stored
Railway (backend hosting) — no personal data stored

We do not sell, rent or trade personal data with third parties for marketing purposes.

6. Data retention

Account data: retained while your account is active and for 2 years after deletion
Exam results and usage data: retained for the life of your account
Payment records: retained for 7 years as required by HMRC
Uploaded images (camera marking): deleted after marking is complete

7. Your rights

Under UK GDPR you have the right to:

Access — request a copy of the personal data we hold about you
Rectification — correct inaccurate or incomplete data
Erasure — request deletion of your data ("right to be forgotten")
Restriction — ask us to limit how we use your data
Portability — receive your data in a machine-readable format
Objection — object to processing based on legitimate interests
Withdraw consent — for any processing based on consent

To exercise any of these rights, email legal@studycoachai.co.uk. We will respond within 30 days.

If you are unhappy with how we handle your data, you can complain to the Information Commissioner's Office (ICO) at ico.org.uk.

8. Cookies

Please see our separate Cookie Policy for full details of cookies used.

9. Children's data

We do not knowingly collect data from children under 13 without parental consent. Users aged 13–15 should have parental or guardian consent before registering. If you believe a child has registered without consent, contact us and we will delete the account promptly.

10. International transfers

Some data may be processed outside the UK (e.g. Anthropic is US-based). Where this occurs, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses or adequacy decisions.

11. Changes

We may update this policy. Material changes will be communicated by email or in-app notice. The current version is always available at www.studycoachai.co.uk/privacy.