Privacy Policy

Last updated: 9 February 2026

1. Who We Are

SuperStudies Ltd (Company Number: 16694082) is the data controller responsible for your personal data. Registered office: 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom.

Email: [email protected]

2. Data We Collect

We collect the following categories of personal data:

  • Account data: name, email address, username, password (hashed), user type (student/parent/teacher)
  • Profile data: year group, school name, date of birth, learning preferences, study goals
  • Study data: subject selections, topic progress, exam results, flashcard interactions, study session times
  • Payment data: processed by Stripe – we do not store card numbers
  • Technical data: IP address, browser type, device information, cookies

3. How We Use Your Data

We use your data to:

  • Provide and personalise our educational platform
  • Power AI-driven study recommendations and tutoring
  • Track learning progress and generate performance reports
  • Process subscription payments
  • Enable parent/guardian oversight of student accounts
  • Send service notifications and study reminders
  • Improve our platform and develop new features

4. Lawful Basis for Processing

We rely on the following lawful bases under UK GDPR:

  • Contract: processing necessary to provide the Service
  • Legitimate interests: improving our platform, preventing fraud
  • Consent: marketing communications (you may opt out at any time)
  • Legal obligation: tax records, regulatory compliance

5. Children's Data

Our platform is designed for GCSE students (typically ages 14–16). Student accounts are created and managed by a parent or guardian. We take extra care to protect children's data and only collect what is necessary for educational purposes.

6. Data Sharing

We do not sell your personal data. We share data only with:

  • Stripe – payment processing
  • AI service providers – to deliver AI tutoring (data is anonymised where possible)
  • Hosting providers – to run our platform securely
  • Parents/guardians – progress data for linked student accounts

7. Data Retention

We retain your data for as long as your account is active. If you delete your account, we will remove your personal data within 30 days, except where we are required to retain it for legal or regulatory purposes.

8. Your Rights

Under UK GDPR you have the right to:

  • Access your personal data
  • Rectify inaccurate data
  • Erase your data ("right to be forgotten")
  • Restrict processing
  • Data portability
  • Object to processing
  • Withdraw consent at any time

To exercise your rights, contact us at [email protected].

9. Cookies

We use essential cookies to keep you logged in and maintain your session. We may also use analytics cookies to understand how our platform is used. You can manage cookie preferences in your browser settings.

10. Security

We implement appropriate technical and organisational measures to protect your data, including encryption in transit (TLS), hashed passwords, and access controls.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or through the platform.

12. Complaints

If you are unhappy with how we handle your data, you can complain to the Information Commissioner's Office (ICO) at ico.org.uk.

Back to Home