Privacy Policy

Information we handle

• Account data: email address, a service user ID, sign-in provider, and authentication records when you choose to create an account.
• Study data: subjects, exam boards, papers, topics, exam dates, availability, plans, study sessions, notes, progress, preferences, achievements, and related app activity you save.
• Profile and leaderboard data: an optional username, country, avatar choice, and goat score. Information shown on the leaderboard is visible to other signed-in users.
• Diagnostics: crash reports, app and operating-system version, device class, error context, and a pseudonymous user ID where needed to diagnose a problem. Session replay is disabled and diagnostics are configured not to include your email or display name.
• Support information: information you choose to include when you contact us.

Guest-mode study data is stored on your device and is not uploaded by us unless you create an account and choose to migrate it. Date-of-birth month and year are used to perform the age check but are not saved; the app stores only the result.

How and why we use it

• To provide accounts, synchronisation, study schedules, progress, and features you request.
• To maintain security, prevent abuse, investigate failures, and keep the service reliable.
• To respond to support, privacy, and account-deletion requests.
• To comply with legal obligations and establish or defend legal claims where necessary.

Where UK or EEA data-protection law applies, we rely on performance of our agreement with you to provide the service, our legitimate interests in security and reliability, legal obligations, and consent where the app specifically asks for it. You can withdraw a device permission in system settings at any time.

Device features and sharing

Calendar and notification access is optional. If enabled, exam and study details may appear in notifications or in a calendar that your device provider may sync to its cloud service. PDFs, images, videos, emails, and other exports are sent only to the destination you choose through your device's share controls. RevisionGoat does not sell personal information and does not use advertising identifiers.

Service providers

• Supabase: authentication, database, and synchronisation. Supabase privacy notice.
• Sentry: crash and reliability diagnostics. Session replay is disabled. Sentry privacy notice.
• Expo/EAS: application builds and delivery of signed app updates. Expo privacy notice.
• Google and Apple: optional sign-in and the app-store/device services you choose to use.
• DiceBear: generation of preset avatars from an opaque avatar seed; the request also carries ordinary network information. DiceBear privacy notice.

Providers may process information outside the United Kingdom. Where required, we rely on recognised transfer mechanisms and the provider's contractual safeguards.

Storage, security, and retention

Data is encrypted in transit. Mobile authentication sessions are kept in the platform's encrypted credential storage, and sensitive app storage is excluded from ordinary Android cloud backup and device transfer. Access to cloud data is restricted through account authentication and database access rules. No service can be guaranteed completely secure.

Account and study data is kept while your account is active and then deleted or anonymised when it is no longer needed to provide the service. Diagnostic and security records are retained only for the configured provider period and as long as reasonably needed to investigate a problem. After deletion from active systems, residual encrypted copies may remain temporarily in restricted disaster-recovery backups or logs until they rotate out; they are not used for ordinary service delivery. We may keep limited records where law, fraud prevention, or dispute resolution requires it.

Deleting your account

1. Open RevisionGoat and sign in.
2. Open the account menu and choose Delete Account.
3. Type delete my account and confirm.

This starts deletion of your account and associated active cloud data and clears local user data on that device. If you cannot use the app, visit the public account-deletion page to request deletion.

Your rights

Depending on where you live, you may have rights to access, correct, erase, or receive a copy of your information; restrict or object to processing; and withdraw consent. Email us to exercise a right. We may need to verify that the account belongs to you. In the UK, you may also complain to the Information Commissioner's Office.

Children

RevisionGoat is likely to be used by students under 18, so we aim to use privacy-protective defaults and collect only what is needed. The service is not available to children under 13, and the app blocks account use when a person tells us they are under 13. A parent or guardian who believes a child's information has been provided improperly should contact us so that we can investigate and delete it.

Changes

We may update this policy when the service or legal requirements change. We will publish the new effective date here and provide additional notice in the app where a change materially affects how personal information is used.