Privacy policy

This policy explains what personal data UniMaths collects, why, and your rights. UniMaths is run by the UniMaths team, the data controller under UK data protection law (UK GDPR and the Data Protection Act 2018). Contact: [email protected].

What we collect

• Account details: your email address and a password. We store only a salted hash of the password, never the password itself.
• Study data: the questions you answer, your ratings, review schedule, streaks, favourites, saved places and custom modules.
• Reports you send: the text of any problem report, the page it was sent from, and your email if you give it.
• Payment details (when paid plans launch): handled by our payment provider (Stripe). We never see or store your card number; we keep a customer reference and your plan status.
• Technical data: our hosting provider keeps standard server logs (IP address, browser, pages requested, time) for security and to fix faults.

Why we use it (lawful basis)

• To provide the service you signed up for: your account, saving your progress and scheduling reviews (contract).
• To fix mistakes and bugs you report, keep the service secure and prevent abuse (legitimate interests).
• To take payments and keep records required by law (contract and legal obligation).

We do not sell your data, show third-party adverts, or use your data to train AI models.

Cookies

We use one essential cookie to keep you signed in. It is strictly necessary for the service, so no consent banner is required. We do not use advertising or tracking cookies.

Who else processes your data

• Our hosting provider, which stores the database and runs the website.
• Our payment provider (Stripe), once paid plans launch.
• Our email delivery provider (Resend), which sends account emails such as password-reset links to your address.
• Our email inbox provider, if you email us.

Some providers may process data outside the UK; where they do, they use safeguards approved under UK law (such as the UK International Data Transfer Addendum).

How long we keep it

We keep your account and study data while your account is open. If you delete your account, we delete your personal data within 30 days, except records we must keep by law (for example payment records, kept for 6 years).

Your rights

You can ask to access, correct, delete or export your data, or object to how we use it, by emailing [email protected]. We will respond within one month. If you are unhappy with our response you can complain to the Information Commissioner's Office (ico.org.uk).

Children

UniMaths is intended for university students and is not directed at children under 13.

Changes

If we change this policy we will update the date above and, for significant changes, tell you by email or in the app.