Privacy Notice

What we collect and why

• Account data — email address, password (stored only as a secure hash), display name and optional profile picture. Used to create and secure your account and to sign you in. Legal basis: performance of our contract with you.
• Study data — your subjects, exam and deadline dates, availability, preferences, generated plan and session progress. Used to build and maintain your revision plan. Legal basis: performance of our contract with you.
• Technical and usage data — IP address, device and browser information, and error or usage logs. Used for security, fraud prevention, and to keep the service working and improve it. Legal basis: our legitimate interests in running a secure, reliable service.
• Support messages — anything you send us when you ask for help. Used to respond to you. Legal basis: legitimate interests and contract performance.
• Marketing emails — only if you opt in, and you can withdraw consent at any time. Legal basis: consent.

We may also process data where we have a legal obligation to do so, for example to keep business records.

Who we share data with

• Service providers / subprocessors — hosting, database, authentication and email providers who process data on our instructions.
• Stripe — our payment processor, for one-time purchases, payment management, tax calculation and receipts. Stripe collects your payment details directly; we never see or store your card number.
• Professional advisers — legal and accounting advisers where necessary.
• Authorities — where required by law or to protect our legal rights.

We do not sell your personal data.

International transfers

Some of our providers process data outside the UK and EEA. Where that happens we rely on appropriate safeguards such as UK/EU Standard Contractual Clauses or an adequacy decision.

How long we keep it

We keep your account and study data for as long as your account is open. If you delete your account, we delete or anonymise your personal data within 30 days, except where we must keep limited records (for example transaction records) to meet legal obligations. This includes a hashed (scrambled, non-reversible) copy of your email address, kept only as part of our transaction records for legal and tax purposes.

Your rights

Under UK and EU data protection law you have the right to access your data, correct it, have it erased, restrict or object to processing, request portability, and withdraw consent where processing is based on consent. Contact us at support@revizl.com and we will respond within one month. You also have the right to complain to a supervisory authority — in the UK, the Information Commissioner's Office (ico.org.uk).

Security

We use appropriate technical and organisational measures to protect your data, including encryption in transit, hashed passwords, access controls, and database row-level security so that each account can only reach its own data.

Cookies and local storage

Revizl uses only essential cookies and browser storage — to keep you signed in and to remember your session and preferences. We do not use advertising cookies. Our payment provider may set cookies necessary to run checkout securely. You can clear or block storage in your browser settings, but signing in will not work without it.

Children

Revizl is designed for students. If you are below the age of digital consent where you live, please ask a parent or guardian to set up and manage the account with you.