Privacy Policy
Last updated: February 2026
Who we are
PrepWise is an educational revision platform for GCSE students in the UK. We are committed to protecting your privacy and handling your data responsibly in accordance with UK GDPR and the Data Protection Act 2018.
For privacy enquiries, contact us at info@prepwise.uk.
What data we collect
We collect minimal personal data necessary to provide our service:
- Google Authentication: Your name and email address when you sign in with Google
- Study Progress: Topics completed, quiz scores, revision history, and learning preferences
- Waitlist Submissions: Email address provided when requesting alpha access
- Server Logs: IP address, browser type, and access times for security and debugging
Why we collect it
We process your data under the following lawful bases:
- Legitimate Interest: To provide you with personalised revision plans, track your progress, and deliver our educational service
- Consent: To contact you about alpha access when you submit your email to our waitlist
- Security: To protect our platform from abuse and ensure service availability
Third parties
We use trusted third-party services to operate PrepWise:
- Firebase/Google Cloud: Authentication and database hosting (EU servers)
- Vercel: Web hosting and content delivery (EU/UK edge locations)
- Zoho Mail: Email communications (EU data residency)
These services process data on our behalf under data processing agreements. We do not sell or share your data with third parties for marketing purposes.
Under-16 users
PrepWise is designed for GCSE students aged 14-16. Under UK GDPR, the age of consent for online services is 13. We collect minimal data and do not use profiling or targeted advertising. Parents and guardians have the right to request access, correction, or deletion of their child's data by contacting us at info@prepwise.uk.
Data retention
- Waitlist emails: Retained until processed, then deleted when alpha access is granted or declined
- Account data: Retained until you request account deletion
- Server logs: Automatically deleted after 90 days
Your rights
Under UK GDPR, you have the right to:
- Access: Request a copy of your personal data
- Rectification: Correct inaccurate or incomplete data
- Erasure: Request deletion of your account and data
- Portability: Receive your data in a machine-readable format
- Complain: Lodge a complaint with the Information Commissioner's Office (ICO)
To exercise any of these rights, email us at info@prepwise.uk. We will respond within 30 days.
Contact
For privacy enquiries or to exercise your data rights, contact us at info@prepwise.uk.