Privacy policy

1. Who we are and how to contact us

Repeat Learning, a trading name of Mobile Tuition Ltd is the provider of Repeat Learning and the controller of the personal data described in this policy. Registered address: 618 Salisbury House, 29 Finsbury Circus, London, EC2M 5SQ, United Kingdom. Company number: 13480761.

For any privacy question, or to exercise your data rights, email us at support@repeatlearning.com.

We are registered with the UK Information Commissioner's Office (ICO), registration number ZB397153. If you are unhappy with how we handle your data you can complain to the ICO at ico.org.uk, but we'd ask you to contact us first so we can try to put things right.

2. Whose data we hold

We hold data about two kinds of people:

• Account holders — the parent, guardian or adult learner who creates and manages an account.
• Learners — the child or student who uses the Service to practise. Where a learner is under 18, an account is set up and overseen by a parent or guardian who is responsible for it.

3. What personal data we collect

• Account details — name, email address and a securely hashed password (we never store your password in readable form).
• Learner profile — the learner's name, year group, level, exam board and tier, so we can show the right syllabus.
• Learning activity — practice answers, marks and feedback, confidence ratings, mock and assessment results, and progress over time.
• AI tutor conversations — messages exchanged with the AI tutor, and any notes it keeps to tailor its help. These relate only to the learner's own work.
• Payment information — handled by our payment processor (Stripe). We receive confirmation of payment and subscription status; we do not store your card number.
• Technical data — device and browser information, and cookies needed to keep you signed in (see our Cookies policy).

4. How and why we use it

We use personal data to provide and run the Service, and our lawful bases under UK GDPR are:

• To provide the Service you signed up for — delivering practice, human marking, progress tracking, the AI tutor, mocks and assessments (lawful basis: performance of a contract).
• To take payment and manage your subscription (contract).
• To keep the Service safe and secure, prevent misuse and protect children (legitimate interests, and legal obligation where it applies).
• To send you service messages such as sign-in details, password resets and important account notices (contract).
• To improve the Service using aggregated, de-identified information (legitimate interests).

Where we ever rely on consent (for example, any optional communications or non-essential cookies), we will ask for it clearly and you can withdraw it at any time. We do not use children's data for marketing or for profiling beyond what is needed to deliver the learning experience.

5. Children's data

Protecting children is central to how the Service is built. In practice this means:

• A parent or guardian sets up and oversees accounts for learners under 18 and can see their child's progress.
• We collect the minimum data needed to teach — we don't ask children for information we don't need.
• The AI tutor only ever sees the learner's own work, and the notes it keeps can be viewed and deleted by the learner and their parent at any time.
• We do not sell children's data, show third-party advertising, or use children's data to build marketing profiles.

6. Who we share data with

We do not sell your personal data. We share it only with trusted service providers who process it on our behalf under contract, including:

• Stripe — to process payments and manage subscriptions.
• Our hosting provider — to run the Service and store its database securely.
• Our email provider — to send transactional emails such as sign-in details and password resets.
• Our AI provider — to power the AI tutor. Only the data needed to answer the learner is processed, and it is not used to train third-party models on your data.

Some of these providers may process data outside the UK. Where that happens, we rely on appropriate safeguards recognised under UK data protection law (such as UK International Data Transfer Agreements or Standard Contractual Clauses).

7. How long we keep it

We keep personal data for as long as your account is active and for a reasonable period afterwards to meet legal, accounting and dispute-resolution needs, after which it is deleted or anonymised. You can ask us to delete your account and data at any time (see your rights below).

8. How we keep it safe

Data is encrypted in transit, passwords are stored only as secure hashes, and access to personal data is restricted to those who need it. Anyone who marks work is bound by confidentiality. No system is perfectly secure, but we take reasonable technical and organisational measures to protect your data and will notify you and the ICO of a serious breach where the law requires.

9. Your rights

Under UK data protection law you have the right to access your data, correct it, have it erased, restrict or object to its use, and receive a copy in a portable form. To exercise any of these, email support@repeatlearning.com. We will respond within one month. You also have the right to complain to the ICO.

10. Changes to this policy

We may update this policy from time to time. If we make a significant change we will let account holders know. Please check back for the latest version.