This policy explains what personal data Revision Breakdown collects, why we collect it, and what we do with it. It applies to the Revision Breakdown website and app at revisionbreakdown.co.uk.
Revision Breakdown is operated by Stuart Yates, trading as Revision Breakdown. We are the data controller for the purposes of UK GDPR. Contact: revisionbreakdown@gmail.com
1. What data we collect
When a parent buys access: name, email address, and payment details. Payment is handled by Stripe — we never see or store your full card number.
When a student uses the app: a student account is created using only a unique access code (RB-XXXX-XXXX). No student email address is collected or stored.
Usage data: which subjects, topics, and question types are used; session scores; and timestamps. This is used to show progress within the app.
Technical data: IP addresses, browser type, and device type may be logged by our hosting provider (Vercel) and authentication provider (Supabase) for security and performance purposes.
2. Why we collect it
| Data | Purpose | Legal basis |
|---|---|---|
| Parent email and name | Delivering the student code; account management | Contract |
| Payment data | Processing the payment via Stripe | Contract |
| Usage and progress data | Showing the student their progress | Contract |
| Technical/log data | Security and service reliability | Legitimate interests |
3. Cookies
We use essential cookies only. Authentication cookies are set by Supabase to keep you logged in. We do not use advertising cookies, tracking cookies, or third-party analytics cookies.
4. Who we share data with
Stripe — payment processing (stripe.com/gb/privacy)
Supabase — database and authentication, servers in the EU (supabase.com/privacy)
Vercel — hosting (vercel.com/legal/privacy-policy)
Resend — email delivery (resend.com/legal/privacy-policy)
We do not sell your data. We do not share it with advertisers.
5. How long we keep data
Parent and student account data: kept until 31 August 2026, then deleted within 90 days unless you request earlier deletion.
Payment records: kept for 7 years as required by HMRC.
6. Your rights
Under UK GDPR you have the right to access, correct, or delete the data we hold about you. Email revisionbreakdown@gmail.com with the subject line Data Request and we will respond within 30 days.
You can also complain to the Information Commissioner's Office at ico.org.uk.
7. Changes to this policy
We may update this policy from time to time. If we make a significant change we will email you.