Privacy Policy

Revise Right is a product of Revise Right Education Ltd, a company registered in England and Wales. Revise Right Education Ltd is the controller of the personal information described in this Privacy Policy unless we tell you otherwise for a specific service or integration.

If you have questions about this Privacy Policy or how we handle personal information, contact us at info@reviseright.io.

Our company number is 16228333 and our registered office is 3rd Floor, 86-90 Paul Street, London, EC2A 4NE. If you require more information, you may contact info@reviseright.io. If a data protection officer or dedicated privacy contact is appointed for Revise Right, their details will be published here or made available on request.

Personal Information: When you create an account, we collect information such as your name and email address. Sign-in details are processed by our authentication provider. We may also collect additional information you choose to provide, such as your exam board preferences, subjects of interest, and study goals. Where relevant to eligibility, safeguarding, or account setup, we may also collect age-related information you provide, such as confirmation that you meet our minimum age requirements.

Usage Data: We automatically collect information about how you interact with our platform, including pages visited, features used, study progress, quiz results, and time spent on the platform.

Technical Information: Our hosting, security, and analytics providers may process basic request information such as browser type, operating system, and IP address where needed to deliver, secure, or measure the service. We do not use IP addresses or device fingerprints to decide whether you are eligible for a product trial.

Product-Trial Eligibility Record: To prevent the same verified email from claiming repeated product trials, our server stores a keyed one-way hash of that email with limited trial status and timing information. This claim record does not store the raw email address, IP address, or a device fingerprint.

Payment Information: When you subscribe, payment processing is handled by Stripe. We do not store your full credit card details on our servers.

• Service Delivery: To provide, maintain, and improve our educational services, including personalised study plans, progress tracking, and personalised tutoring features.
• Communication: To send important updates about your account, verification links, security alerts, service changes, billing or subscription matters, access to resources you request, and occasional marketing communications where applicable law allows.
• Analytics: To understand how our platform is used, identify areas for improvement, and develop new features.
• Legal Compliance: To comply with legal obligations, resolve disputes, and enforce our terms of service.

Depending on the activity, we process personal information on one or more of the following lawful bases under UK data protection law:

• Contract: To create and manage your account, provide subscriptions, deliver study tools, and respond to your requests
• Legitimate Interests: To secure, improve, and operate the platform, prevent misuse, analyse performance, and enforce our terms where our interests are not overridden by your rights
• Consent: Where we rely on consent, such as for requested email updates or non-essential cookies, you may withdraw that consent at any time
• Legal Obligation: Where we must retain, use, or disclose information to comply with law, regulation, or lawful requests

We use your email address to provide and administer your account. This includes sending verification links, security messages, account notices, billing and subscription messages, customer support replies, and emails about free or paid resources you have requested. These service communications are part of operating Revise Right.

We may keep account holders in our customer communication systems with account status, subscription tier, billing option, signup date, and similar lifecycle information so that we can send the right service messages and manage customer records.

If a student requests weekly revision updates for a parent, guardian, or trusted adult, we first send that recipient a confirmation request. We do not send the student's revision activity until the recipient approves. Confirmed summaries may include days active, questions answered, subjects studied, and progress information. Recipients can unsubscribe at any time.

We may also send occasional marketing emails, such as newsletters, offers, product updates, revision tips, or launch updates, where applicable law allows, including where we can rely on the UK soft opt-in rules for existing customers.

Every marketing email will include an unsubscribe option. Opting out of marketing will not stop essential account, security, billing, or service emails while your account remains active.

Service Providers: We may share your information with trusted third-party service providers who assist us in operating our platform.

• Infrastructure and authentication: Google Firebase and related Google Cloud services for hosting, authentication, storage, and core application infrastructure
• Payments: Stripe for checkout, subscription management, billing, and payment processing
• Optional analytics and diagnostics: Google Analytics, DataFast, PostHog and Sentry, where configured and enabled by your current analytics choice. Browser session recording is disabled
• Email delivery: Resend for service messages and permitted updates
• AI services: providers such as Google, OpenAI, and Anthropic where relevant to the feature you use

These providers are contractually obligated to protect your data and only process it on our instructions where required by law.

Where Sentry is configured and you enable optional analytics, it collects performance and error diagnostics to help us investigate problems. Session recording is disabled. Diagnostic records may still include technical information, page URLs and error details. You can withdraw optional analytics through Cookie Settings on our Cookie Policy page.

We may also share limited information with professional advisers, auditors, insurers, or prospective buyers where reasonably necessary for business operations, legal claims, or corporate transactions.

Legal Requirements: We may disclose your information if required by law, court order, or government regulation.

Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity.

No Sale of Personal Data: We do not sell your personal information to third parties for marketing purposes.

We use measures to protect your personal information, including encryption, secure infrastructure, access controls, and security checks. However, no method of transmission over the internet is 100% secure.

You are responsible for maintaining the confidentiality of your account credentials. Please use a strong password and notify us immediately if you suspect unauthorised access.

When you use AI-powered features, we and our service providers may process your prompts, files, outputs, and related technical data to generate responses, maintain service quality, detect misuse, troubleshoot issues, and protect users.

Where reasonably necessary, we may log, filter, flag, or review AI interactions to enforce our safety rules, investigate suspected abuse, and comply with applicable law.

We do not use personal data in your prompts to train third-party foundation models without your consent. We may, however, retain and review limited records of AI interactions for product improvement, abuse prevention, quality assurance, and incident investigation.

Tutor chat history is stored on your account so you can revisit and continue your work. You can clear a thread or delete a conversation from chat settings whenever you want to remove it. AI usage events are stored with pseudonymised identifiers rather than raw account IDs where practical.

Live web results are optional and off by default. If you enable them, the tutor may use a web-enabled route to answer current-facts questions with up-to-date information.

Some personal information is required so that we can create your account, authenticate you, process payments, deliver the service, and respond to support requests.

If you do not provide required information, you may be unable to create an account, access paid features, receive support, or use certain personalised tools. Other information is optional and you may choose not to provide it.

• Access & Correction: You can access and update your personal information through your account settings. You may also request a copy of the data we hold about you.
• Data Deletion: You can delete your account at any time. We remove personal information from our active account systems, subject to limited records we must or reasonably need to retain for legal, security, fraud, or misuse prevention purposes, including the hashed product-trial eligibility record described in this policy.
• Marketing Opt-Out: You can opt out of marketing emails by clicking unsubscribe in a marketing email or by contacting us.
• Cookie Control: You can control cookies through your browser settings or our cookie consent banner.

Revise Right is designed for students aged 13 and above. If you are under 13, you may not create an account or use our service.

We ask you to confirm eligibility at signup. This is a declaration, not independent age verification or verified parental consent. If you are 13 to 17, our terms require permission from a parent or guardian, or authorisation from your school. Optional browser analytics are off until a current opt-in, and browser session recording is disabled for all visitors, including where age is unknown.

If we become aware that a user is under 13, we may suspend access and take steps to delete or restrict the account where appropriate.

Where we cannot determine a user's age with confidence, we may request additional age information or limit access to certain features until the issue is resolved.

We retain personal information for as long as your account is active or as needed to provide the service. Retention periods may vary by data type:

• Account records: generally for the life of the account and for a reasonable period afterwards to manage disputes, fraud prevention, and legal claims
• Tutor conversations and study content: generally until you clear them, delete your account, or they are no longer required to provide the service
• Billing and transaction records: for as long as required by tax, accounting, and financial reporting obligations
• Support and complaint records: for as long as reasonably necessary to resolve the issue and maintain an audit trail
• Product-trial eligibility record: the keyed one-way hash and limited claim metadata are retained for as long as reasonably needed to prevent repeated free-trial claims. The claim ledger does not retain the raw email address, IP address, or a device fingerprint.
• AI prompts, outputs, and safety logs: for a limited period appropriate to service delivery, quality assurance, abuse prevention, and incident investigation. Our current defaults are 180 days for safety logs and 365 days for red-flag records.
• Analytics data: according to the settings of the relevant analytics tools and your consent choices. Our current default retention for tutor usage events is 90 days.

We may retain certain information for longer where required by law or where reasonably necessary to establish, exercise, or defend legal claims.

We may use automated systems to personalise study recommendations, identify likely areas of difficulty, detect misuse, and support platform safety and moderation.

We do not make solely automated decisions that produce legal or similarly significant effects about you without the safeguards required by applicable law. Significant account actions may involve human review.

Your information may be processed and stored in countries outside your country of residence, including where some of our service providers operate.

Where personal information is transferred internationally, we use safeguards intended to protect it in accordance with applicable data protection law, such as adequacy decisions, contractual safeguards, or comparable approved mechanisms.

If you have concerns about how we handle your personal information, please contact us first at info@reviseright.io.

You also have the right to lodge a complaint with the Information Commissioner's Office in the UK if you believe your data protection rights have been infringed.

We may update this privacy policy from time to time. We will notify you of significant changes where required by applicable law, including by email or through a prominent notice on our platform. This policy explains our use of information. If a change requires your consent, we will ask for it separately before relying on it. Continued use does not by itself provide that consent.