Privacy Policy

Last updated: 15 July 2026

This Privacy Policy explains how Clevernest ("Clevernest", "we", "us") collects, uses and protects your personal information when you use the Clevernest website and application (the "Service"). Clevernest is operated by a private individual, who is the "controller" of your personal data under the UK GDPR and the Data Protection Act 2018. Being an individual rather than a company does not reduce those duties, and this policy applies in full.

1. Who we are and how to contact us

Clevernest is a non-commercial passion project built and run by one person in their own time, and given away free. It has no company behind it, no investors and no advertising. The operator has chosen not to publish their name or a postal address, and asks that this preference for privacy is respected.

That choice does not remove your rights or leave you without a route to us. Every privacy question, and every request to exercise your rights, is answered at clevernestapp@gmail.com. This is the contact point for all data protection matters, and it is monitored.

Where you have a legal right to know the controller's identity, or where a supervisory authority such as the Information Commissioner's Office requires it, the operator will provide their name and address on request through that email address. Anonymity here is a preference towards the public, not a barrier to you or to a regulator.

2. The information we collect

Waitlist information

Before Clevernest opens, the only thing we collect is an email address, and only if you choose to give it through the "register your interest" form. Netlify Forms receives and stores it on our behalf. We use it once, to tell you the day Clevernest opens, and for nothing else: no newsletter, no marketing, and we do not share or sell it. Ask us at clevernestapp@gmail.com at any time and we will delete it. Legal basis: your consent, which you give by submitting the form and can withdraw whenever you like.

Account information

When you create an account we collect your name and email address. If you sign in with Google, we receive your name, email address and profile photo from Google. Your password is handled by our authentication provider and is never visible to us. We also store simple preferences such as your locale and time zone.

Learning information

As you use the Service we record your learning activity so we can save your progress and show it back to you: which lessons and steps you have completed, experience points and stars earned, question-bank answers and accuracy, and the exam sittings and study plans you set.

Technical and usage information

Like most online services, our hosting and infrastructure providers automatically process technical data such as your IP address, browser and device type, and basic log data, for security and to deliver the Service. We also store a small amount of data in your browser (see "Cookies and local storage" below).

If you allow analytics, our analytics providers record which pages you visit and what you click on, together with the technical data above. If you do not, they are never loaded and none of it is collected. See section 4.

3. How we use your information, and our legal bases

• To provide the Service (create your account, sign you in, deliver courses and practice). Legal basis: performance of our contract with you.
• To save and sync your progress across your devices. Legal basis: performance of our contract with you.
• To send you service messages (for example, account confirmation and, if you enable them, study reminders). Legal basis: performance of our contract and our legitimate interests.
• To send you marketing, only where you have opted in. Legal basis: your consent, which you can withdraw at any time.
• To keep the Service secure and to improve it. Legal basis: our legitimate interests in running and improving a safe, reliable service.
• To understand how the Service is used, through the analytics described in section 4: which pages people visit, what they click, and where they give up. Legal basis: your consent, which we ask for before any of it loads and which you can withdraw at any time from the Cookie settings link in the footer. We do not use this to build advertising profiles, and it is never sold.
• To comply with the law where we are required to. Legal basis: legal obligation.

4. Cookies and local storage

Some browser storage is strictly necessary to run the Service: a secure sign-in token that keeps you logged in, and a local copy of your progress so the app works quickly and offline. Without these the Service cannot work.

We also use analytics, which is not strictly necessary and which sets cookies. Because it is not necessary, we ask first: none of it loads until you choose. If you say no, nothing below is downloaded, nothing is stored and nothing is sent, and the site works exactly the same. You can change your mind whenever you like using the Cookie settings link, which is in the footer of every page. There are two:

• PostHog stores a random identifier in your browser so we can tell whether the same person came back, rather than counting them twice. It records which pages you visit and what you click on, along with technical data such as your approximate location, browser and device. Its European servers are used, so this stays in the EU.
• Google Tag Manager loads our other measurement tags, including Google Analytics, which tells us how many people visit, which pages they read and which searches brought them here. Google Analytics sets its own cookies and Google processes that data outside the UK, including in the United States.

We use all of this to see which parts of Clevernest are useful and which are confusing, and nothing else. We do not use advertising cookies, we do not run ad networks, and we do not sell or share this data with advertisers. We do not currently record your screen or replay your sessions. If we ever turn that on, we will say so here first.

5. Who we share your information with

We do not sell your personal data. We share it only with the service providers that help us run Clevernest, who act on our instructions:

• Supabase, which provides our database, authentication and secure storage of your account and learning data.
• Netlify, which hosts and serves the website and application, and which receives and stores waitlist sign-ups before launch.
• Google, only if you choose to sign in with Google, to authenticate you.
• PostHog, which provides our analytics. We use its European servers, so this data is processed in the EU.
• Google Tag Manager and Google Analytics, which tell us how many people visit, which pages they read and which searches brought them here. Google processes this outside the UK, including in the United States.

We may also disclose information if required by law, or to protect the rights, safety and security of Clevernest and our users.

6. International transfers

Our providers may process data outside the United Kingdom. Supabase, Netlify and Google all operate internationally, and Clevernest is served from a global content network, so your data may be handled in the United States or elsewhere. Where that happens we rely on the safeguards those providers offer under UK data protection law, such as the UK International Data Transfer Agreement or Addendum, or an adequacy decision covering the receiving country. If you would like to know where your own data is held, ask us at clevernestapp@gmail.com and we will tell you.

7. How long we keep your information

We keep your account and learning data for as long as your account is active. Waitlist email addresses are deleted once we have sent the launch email, or sooner if you ask.

If you ask us to delete your account, we will delete or anonymise your personal data within a reasonable period, except where we must keep certain information to meet legal obligations. Deletion is currently handled by hand: email clevernestapp@gmail.com and we will do it and confirm when it is done. A self-service delete button is being built, and until it works this policy will not pretend otherwise.

8. Your rights

Under UK data protection law you have the right to access your data, to have it corrected or erased, to restrict or object to certain processing, to data portability, and to withdraw consent at any time. These rights apply to Clevernest exactly as they would to a large company, and using them is free. To exercise any of them, contact us at clevernestapp@gmail.com. We aim to respond within one month, which is the period the law allows.

If you are not satisfied with our response, you have the right to complain to the Information Commissioner's Office, the UK's data protection regulator, at ico.org.uk. You can do that without contacting us first.

9. Children

The Service is intended for users aged 16 and over and is not directed at younger children. ACCA study material is aimed at adults in professional training. If you believe a child has provided us with personal data, contact us at clevernestapp@gmail.com and we will delete it.

10. Security

We take reasonable measures to protect your information, including encryption of data in transit (HTTPS) and access controls that restrict each account's data to that account. No online service can be guaranteed to be perfectly secure, but we work to protect your data and to respond promptly to any issue.

11. Changes to this policy

We may update this policy from time to time. When we make material changes we will update the date at the top and, where appropriate, let you know within the Service.

12. Contact

Questions about this policy, about your data, or about who is behind Clevernest, can be sent to clevernestapp@gmail.com. There is no postal address to write to, because Clevernest is one person rather than a business with premises. Email is the way to reach us, and it is read.

Read our Terms of Use