Privacy Policy

Last updated: 15 July 2026

This policy explains what we collect and why. Items shown in [brackets] are placeholders to be completed with Clevernest's registered details before launch, and the policy should be reviewed by a qualified data-protection adviser.

This Privacy Policy explains how [Company legal name] ("Clevernest", "we", "us") collects, uses and protects your personal information when you use the Clevernest website and application (the "Service"). We are the "controller" of your personal data under the UK GDPR and the Data Protection Act 2018.

1. Who we are and how to contact us

The Service is operated by [Company legal name], [registered address]. For any privacy question, or to exercise your rights, contact us at [privacy contact email].

2. The information we collect

Account information

When you create an account we collect your name and email address. If you sign in with Google, we receive your name, email address and profile photo from Google. Your password is handled by our authentication provider and is never visible to us. We also store simple preferences such as your locale and time zone.

Learning information

As you use the Service we record your learning activity so we can save your progress and show it back to you: which lessons and steps you have completed, experience points and stars earned, question-bank answers and accuracy, and the exam sittings and study plans you set.

Technical information

Like most online services, our hosting and infrastructure providers automatically process technical data such as your IP address, browser and device type, and basic log data, for security and to deliver the Service. We also store a small amount of data in your browser (see "Cookies and local storage" below).

3. How we use your information, and our legal bases

To provide the Service (create your account, sign you in, deliver courses and practice). Legal basis: performance of our contract with you.
To save and sync your progress across your devices. Legal basis: performance of our contract with you.
To send you service messages (for example, account confirmation and, if you enable them, study reminders). Legal basis: performance of our contract and our legitimate interests.
To send you marketing, only where you have opted in. Legal basis: your consent, which you can withdraw at any time.
To keep the Service secure and to improve it. Legal basis: our legitimate interests in running and improving a safe, reliable service.
To comply with the law where we are required to. Legal basis: legal obligation.

4. Cookies and local storage

We use browser storage that is strictly necessary to run the Service: a secure sign-in token that keeps you logged in, and a local copy of your progress so the app works quickly and offline. We do not currently use advertising or third-party tracking cookies. If that changes, we will ask for your consent first.

5. Who we share your information with

We do not sell your personal data. We share it only with the service providers that help us run Clevernest, who act on our instructions:

Supabase, which provides our database, authentication and secure storage of your account and learning data.
Netlify, which hosts and serves the website and application.
Google, only if you choose to sign in with Google, to authenticate you.

We may also disclose information if required by law, or to protect the rights, safety and security of Clevernest and our users.

6. International transfers

Some of our providers may process data outside the United Kingdom. Where they do, we rely on appropriate safeguards recognised under UK data protection law (such as the UK International Data Transfer Agreement or Addendum, or an adequacy decision) to protect your information. [Confirm the processing region and safeguards with each provider.]

7. How long we keep your information

We keep your account and learning data for as long as your account is active. If you ask us to delete your account, we will delete or anonymise your personal data within a reasonable period, except where we must keep certain information to meet legal obligations.

8. Your rights

Under UK data protection law you have the right to access your data, to have it corrected or erased, to restrict or object to certain processing, to data portability, and to withdraw consent at any time. To exercise any of these, contact us at [privacy contact email]. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk. [If registered with the ICO, add your registration number here.]

9. Children

The Service is intended for users aged [16] and over and is not directed at younger children. If you believe a child has provided us with personal data, please contact us and we will delete it.

10. Security

We take reasonable measures to protect your information, including encryption of data in transit (HTTPS) and access controls that restrict each account's data to that account. No online service can be guaranteed to be perfectly secure, but we work to protect your data and to respond promptly to any issue.

11. Changes to this policy

We may update this policy from time to time. When we make material changes we will update the date at the top and, where appropriate, let you know within the Service.

12. Contact

Questions about this policy or your data can be sent to [privacy contact email], or by post to [registered address].

Read our Terms of Use