Privacy Policy

1. Introduction

TheRevisionHub (“we”, “us”, “our”) is committed to protecting the privacy of our users, particularly students and young people. This Privacy Policy explains how we collect, use, store, and protect your personal data when you use our AI-powered education platform.

2. Data Controller

TheRevisionHub is the data controller for personal data processed through the Platform. For schools using our School or Enterprise plans, we act as a data processor on behalf of the school (the data controller) and will enter into a Data Processing Agreement upon request.

3. Data We Collect

We collect the following categories of personal data:

• Account Information: Name, email address, password (hashed), role, school name
• Profile Data: Year group, education level, subjects, exam boards, learning preferences
• Learning Data: Course progress, quiz scores, assignment submissions, AI tutor conversations
• Usage Data: Login times, feature usage, device information, IP address
• Payment Data: Processed securely by Stripe; we do not store card details

4. How We Use Your Data

• Providing and personalising the learning experience
• Powering AI tutoring and content recommendations
• Generating analytics and progress reports for students, teachers, and administrators
• Processing payments and managing subscriptions
• Communicating service updates and support
• Improving the Platform through aggregated, anonymised analytics

5. Legal Basis for Processing

We process personal data on the following legal bases under UK GDPR: (a) performance of a contract — to provide the Platform services; (b) legitimate interests — to improve the Platform and ensure security; (c) consent — for optional communications and marketing; (d) legal obligation — to comply with applicable laws.

6. AI & Student Data

Our AI features process student learning data to provide personalised tutoring and feedback. We do not use student data to train general-purpose AI models. AI conversations are stored to maintain context and improve the student's learning experience. Schools can request deletion of all AI conversation data at any time.

7. Data Sharing

We do not sell personal data. We share data only with:

• Service Providers: Hosting (SOC 2 certified), payment processing (Stripe), AI services (OpenAI — with data processing agreements in place)
• Schools: Teachers and administrators can view student progress data within their school
• Legal Requirements: When required by law or to protect our rights

8. Data Retention

We retain personal data for as long as your account is active or as needed to provide services. When an account is deleted, we remove personal data within 30 days, except where retention is required by law. Anonymised, aggregated data may be retained indefinitely for analytics purposes.

9. Data Security

We implement industry-standard security measures including: encryption in transit (TLS 1.3) and at rest (AES-256), role-based access controls, regular security audits, and SOC 2 certified infrastructure. All passwords are hashed using bcrypt.

10. Your Rights

Under UK GDPR, you have the right to:

• Access your personal data
• Rectify inaccurate data
• Request erasure of your data
• Restrict or object to processing
• Data portability
• Withdraw consent at any time
• Lodge a complaint with the ICO (Information Commissioner's Office)

11. Children's Privacy

TheRevisionHub is designed for use by students, including those under 18. For students under 13, we require parental or school consent before account creation. We comply with the Children's Code (Age Appropriate Design Code) and take additional safeguards to protect young users' data.

12. Cookies

We use essential cookies for authentication and session management. We do not use third-party advertising cookies. Analytics cookies are only used with your consent. For more details, see our Cookie Policy.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or through the Platform. The “Last updated” date at the top indicates when the policy was last revised.

14. Contact Us

For privacy-related enquiries or to exercise your rights, contact our Data Protection Officer at [email protected].