privacy

langrevise is run by Fraser Mudhai, a sole trader trading as langrevise. For data protection law, that means Fraser Mudhai is the data controller: the person responsible for deciding what happens to your information, and the person you can complain to about it.

Contact us at privacy@langrevise.com.

• We collect your email address, your name, your school year, and a record of your revision.
• We do not ask for your date of birth, your school, your home address, or your phone number. If you buy a plan, Stripe asks for the country and postcode your card is checked against, and holds them.
• Everything is stored in the United Kingdom.
• We do not sell your data, we do not share it with advertisers, and there are no adverts on the site.
• The optional AI check sends your sentence and your answer to Anthropic. It does not send your name, your email, or your account.
• We use Google Analytics to count visits, but only if you agree when we ask. Nothing is loaded until you do.
• We record when you were last on the site, roughly how long you have spent on it, and a list of what you did. Only we see it. The list of what you did is deleted after 90 days.
• You can delete your account, and everything on it, yourself from your account page.
• If you think we have got something wrong, you can complain to us and to the Information Commissioner's Office.

In short: Your account details, the choices you made when you signed up, and a record of how your revision is going.

Your account. Your email address and your name. If you sign in with Google we also receive your Google profile picture. If you sign up with a password instead, that password is handled by Supabase and stored as a hash. We never see it and cannot recover it for you.

What you told us when you signed up. Your school year, chosen from year 9, year 10, year 11, or other, the language you are revising, and the animal emoji you picked as your avatar. We record when you created the account and when you finished setting it up.

What we deliberately do not collect. We do not ask for your date of birth, the name of your school, your home address, or your phone number. We have no use for them.

The one exception is if you buy a plan: your card needs a country and a postcode to be checked against, so Stripe asks for those at checkout. It is the least we can ask for and still take a payment safely, and Stripe holds it rather than us. We do not ask for a full home address, and we used to — that was there to support a VAT position we turned out not to need, and it was removed in August 2026.

We do not track which pages you look at. We do not record the pages you open, what you click, how far you scroll, or how you move around the site. We considered it and decided against it: watching people browse tells us far more about them than we need to know to build a revision site.

Your revision. For each word, whether you have learnt it, how far up the review ladder it has got, when it is next due, and how many times you have got it right and wrong. We also keep a per-day count of how many vocabulary, tense, and translation questions you answered, which is what draws the streak and the heatmap.

Your confirmations. The date you confirmed you are 13 or over, and the date you agreed to the terms and this policy. They are the same moment, and we keep them so we can show what was agreed and when.

Your plan. Which plan you are on, when it renews or ends, and, on the free plan, how much of the weekly hour you have used and when the week started. If you have paid, we also store the customer and subscription reference numbers Stripe gives your account — see Payments below.

How you use the site. The last time you were on langrevise, and roughly how long you have spent on it in total. We also record when you finish a piece of revision, and that is a fixed list rather than a general watch on what you are doing: finishing a learn session, answering a review, practising a tense or a translation, running an AI check, skipping a word, resetting a topic, and starting or ending a subscription. Each one is stored against your account with the time it happened. Nothing else you do is recorded.

This is so we can see which parts of the site are actually being used and which are not worth keeping. It is only ever looked at by us. It is not shared with anyone, it is not used to advertise to you, and nothing about it is visible to other students. If you would rather we did not keep it, email privacy@langrevise.com and we will stop and delete what we have — see section 9.

Invites. Your own invite code, if you have opened the invite page, and who invited you, if you arrived through someone's link.

Messages you send us. If you use the support form we keep what you wrote, whether you flagged it as a bug, and when you sent it. For bug reports we also receive the page you were on, your browser and device type, and a screenshot if you attach one. Please do not put anything in a screenshot you would rather we did not see.

The AI check. We record the time of each check you run and which exercise it was, so we can apply the daily limit. Not your answer and not the mark. What is sent to Anthropic is described in section 6.

Automatic information. Like any website, our servers log the IP address a request came from, the browser and device, and what was requested. This is used to keep the site running and to spot abuse. An IP address indicates roughly what country or city someone is in. It is not precise location and there is no device setting that changes it.

Payments. Payments are handled by Stripe. If you buy a plan, Stripe collects your card details and the billing details your card needs to be checked — normally just your country and postcode — and holds them. We never see your card number and never store it. What reaches us is the fact that you paid: which plan, whether it is still active, and when it renews or ends. We also store the two reference numbers Stripe gives your account, so we can find your payments and send you to the right billing portal.

Sensitive information. We do not collect any special category data, such as anything about health, ethnicity, religion, or sexual orientation. Please do not send us any.

In short: Mostly to run the service you signed up for. We never use your revision data for advertising, because we do not advertise.

UK GDPR requires us to have a lawful basis for each thing we do with your information. Ours are:

• Running your account and your revision. Your account details and your progress, so you can log in and so spaced repetition can work out what to show you next. Basis: performance of a contract.
• Service emails. Confirming your email address, resetting your password, and telling you about important changes. Basis: performance of a contract.
• Payments. Taking payment and keeping the records a business has to keep. Basis: performance of a contract, and legal obligation for the tax records.
• Answering your messages. What you send us through the support form. Basis: performance of a contract, and our legitimate interest in running a service people can get help with.
• The AI check. Sending your answer for marking, only when you press the button. Basis: performance of a contract, since you asked for it.
• Keeping the site working. Server logs, the weekly free limit, the AI daily limit, and stopping abuse. Basis: legitimate interests.
• Understanding how it is used. Two separate things. Google Analytics counts visits and needs cookies, so it does not run at all unless you agree. Our own record of what you did on the site uses no cookies and is kept on our server with your account. Basis: your consent for the Google Analytics cookies, and our legitimate interest in knowing which parts of langrevise are worth building for the rest. You can object to the second one and we will stop.

We do not sell your information. We do not share it with advertisers. There are no adverts on langrevise. We do not use your data to make automated decisions that have a legal or similarly significant effect on you: the AI check produces a practice mark, not a real one, and it decides nothing about you.

In short: langrevise is built for GCSE students, so nearly everyone using it is a child in data protection terms. That shapes how it is designed.

You have to be 13 or over to use langrevise. We ask you to confirm this when you create your account — on the sign-up form if you use an email address, or in the last step of the setup wizard if you sign in with Google — at the same time as you agree to the terms. We record the date you confirmed. We do not collect dates of birth, so this is self-declared. If we find out an account belongs to someone under 13, we will close it and delete the data on it.

The Information Commissioner's Office expects services likely to be used by children to be designed with them in mind. The choices we have made for that reason are:

• no advertising of any kind, and no ad tracking
• no selling or sharing of personal information
• no profiles, no public content, and nothing a student writes is visible to any other user
• no name, email, or account identifier sent to the AI provider
• the minimum sign-up questions we can manage, which is why there is no date of birth, school, or address
• no marketing emails; the only emails we send are about your account
• no tracking of which pages you open, what you click, or how you move around the site
• the list of revision you complete is kept for 90 days and then deleted, is never used to build a profile of you or to decide anything about you automatically, and is never shared
• deletion you can do yourself, without emailing anyone

If you are a parent or guardian and you want to see what we hold about your child, have it corrected, or have it deleted, email privacy@langrevise.com. We may need to check that the account is your child's before we act.

Analytics cookies are not set until you say yes. When you first arrive you are asked, the two answers are equally easy to give, and if you ignore the question nothing is set. You can change your mind whenever you like using the cookie choices link at the bottom of this page.

In short: A small number of companies that run parts of the service for us. They act on our instructions and cannot use your data for their own purposes.

• Supabase stores the database and runs sign-in. It holds everything in section 1.
• Vercel hosts the site and keeps standard server logs.
• Anthropic receives only what section 6 describes, and only when you press the AI check button.
• Resend sends account and support emails, so it receives your email address and the contents of those emails.
• Google handles sign-in if you choose to use it, and provides Google Analytics.
• Stripe handles payments, and receives your email address, your card details and the billing country and postcode your card is checked against, when you buy a plan.

Besides those, we would only pass on your information if the law required it, or to establish or defend a legal claim. If langrevise were ever sold or transferred, your information would go with it under the same protections, and we would tell you.

In short: In the United Kingdom.

The database and sign-in run on Supabase in London, and the site is hosted on Vercel's London region. Your account and your revision record stay in the UK.

Two things do leave the UK. The AI check sends the text described in section 6 to Anthropic in the United States. Google Analytics data is processed by Google, which also operates outside the UK. Both are covered by the transfer safeguards those providers offer, including the UK Addendum to the EU Standard Contractual Clauses and, where it applies, the UK extension to the EU-US Data Privacy Framework.

In short: It sees your answer. It does not know who you are.

The translation exercises have an optional button that marks your answer with AI. Nothing is sent unless you press it, and you can mark your own work against the examiner's descriptors instead.

When you do press it, we send Anthropic four things:

• which direction you are translating in
• the sentence or paragraph you were given
• the correct translation we already had written
• the answer you typed

That is all. Your name, your email address, and your account identifier are not sent, so the marking is not linked to you at Anthropic's end. Anthropic returns a practice mark and a short comment, which we show you — out of two for a single sentence, out of ten for a paragraph. We keep a note of the time you ran the check, and which of the two exercises it was, so we can apply the daily limit and see whether the feature earns what it costs to run. We do not keep the sentence, your answer, or the mark.

Because your answer is sent, do not type personal information into a translation box. It is a Spanish exercise, so there should be no reason to.

If you would rather nothing went to Anthropic at all, simply do not press the button. Everything else on langrevise works without it.

In short: Two that the site needs to work, and Google Analytics, which only happens if you agree to it.

We ask before we count you. Google Analytics is not loaded at all until you agree. Not loaded with tracking switched off, not loaded and waiting: the script is not fetched and no analytics cookie is written. If you say no, or if you just ignore the banner, that stays true.

• Sign-in cookies, set by Supabase, which keep you logged in as you move between pages. The site cannot work without these.
• An invite cookie, set only if you arrive through someone's invite link. It remembers the code for 30 days so the right person gets credited when you sign up. It cannot be read by scripts in the page.
• Google Analytics cookies, set only if you agree, which count visits and show us which pages are used. They tell us about traffic in aggregate, not about you personally.

We remember your answer to the cookie question in your browser's local storage rather than in a cookie, so that saying no really does leave you with no cookies but the two above.

Changing your mind.Use the cookie choices link at the bottom of this page. If you turn analytics off after having it on, we switch Google's tag off and delete the analytics cookies it set.

We do not use advertising cookies, tracking pixels, or session recording, and we do not let anyone build an advertising profile from your use of the site.

You can also opt out of Google Analytics on every site you visit using Google's browser add-on, or block cookies in your browser settings. Blocking the sign-in cookies will stop you being able to log in. Google explains its own practices in the Google privacy policy.

In short: While you have an account. After that, it goes.

Your account and your revision record are kept for as long as your account exists. There is no automatic expiry, because the whole point of a review schedule is that it remembers what you did months ago.

One part of section 1 is an exception. The list of individual things you did — finished a learn session, answered a review, ran an AI check, and so on, each with the time it happened — is deleted automatically after 90 days. We keep it to see which parts of langrevise are being used, and that question does not need a year of history to answer.

To be clear about what that does not cover, because the difference matters: when you were last on the site and roughly how long you have spent on it are single running figures rather than a list, and they are kept for as long as your account exists. So is your revision — your words, your review schedule, and your per-day question counts — because the review ladder is built on them.

When you delete your account, your profile, your progress, your daily counts, your support messages, your AI check history, and that activity record are deleted with it. Some things last a little longer: server logs age out on their own, backups are overwritten on a rolling basis, and if you have bought a plan we have to keep the basic billing records for six years, because tax law requires it. Those records are the fact of a payment, not your card.

In short: You can see it, correct it, delete it, and complain about it.

Under UK GDPR you have the right to:

• ask for a copy of the personal information we hold about you
• have anything inaccurate corrected
• have your information deleted, which carries particular weight for young people
• ask us to restrict what we do with it, or object to processing we do on the basis of legitimate interests
• receive your information in a portable form
• withdraw consent where we relied on it, which does not undo what was lawful before you withdrew it
• complain to the Information Commissioner's Office

Some of these you can do yourself: change your name, your avatar, and your school year on your account page, and delete your whole account from the same place. For anything else, email privacy@langrevise.com. It is free, and we will reply within one month.

Your progress is readable only by your own account. Passwords are handled by Supabase and stored as hashes we cannot read. Everything travels over an encrypted connection. Anything that costs money to run, like the AI check, is rate limited per account.

Nobody can promise perfect security, and we will not pretend to. If there is ever a breach that puts you at risk, we will tell the Information Commissioner's Office and, where the law requires it, we will tell you.

If you are unhappy with how we have handled your information, email privacy@langrevise.com. We will acknowledge it, look into it, and tell you the outcome.

You can also complain to the Information Commissioner's Office, the UK regulator, and you do not have to come to us first:

• Website: ico.org.uk/make-a-complaint
• Helpline: 0303 123 1113
• Post: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

We will update this page when what we do changes. The date at the top shows when it last changed. If we start collecting something new, or add a company to the list in section 4, we will say so in the site rather than quietly changing the wording here.

Fraser Mudhai, trading as langrevise, is the data controller.
Privacy: privacy@langrevise.com
Anything else: support@langrevise.com