Last updated: 29 July 2026
This policy explains what personal data Revision (operated by [Company Name] Limited, "we", "us") collects when you use revision.inventait.com, why, and what rights you have over it. For the more formal statement of our legal basis and your data-subject rights under UK GDPR, see our GDPR & Data Rights page.
| What | Why |
|---|---|
| Your email address | To create your account and send you sign-in links (we use no passwords) |
| Subscription and billing status | To know what you're subscribed to. Card details are collected and stored by Stripe, our payment processor — never by us directly |
| Study activity (questions answered, scores, mastery progress) | To track your progress and show it back to you, and so it follows you between devices |
| Basic technical data (IP address, browser type, timestamps in server logs) | Security, fraud prevention, and diagnosing faults |
We use a single essential cookie to keep you signed in — nothing else. We don't use advertising cookies, tracking pixels, or third-party analytics cookies. Because this cookie is strictly necessary for the Service to work (you couldn't stay logged in without it), no cookie consent banner is required for it under UK/EU law, and we don't show one.
If that ever changes — for example if we add analytics in future — we'll update this section and add a proper consent mechanism before doing so.
We don't sell your data. We share the minimum necessary with these processors, who each act under a data processing agreement:
We may also disclose data if required by law, or to protect our rights, users, or the public.
We keep your account and study data for as long as your account exists, so your progress is there whenever you come back. If you ask us to delete your account (see GDPR & Data Rights), we delete your personal data within a reasonable period, except where we're required to keep billing records for tax/accounting purposes (typically up to 6 years in the UK).
Sign-in uses one-time links rather than passwords, so there's no password database that could be leaked. Payment details never touch our servers — Stripe handles them under its own strict security standards. The site is served over HTTPS.
The Service is intended for people aged 16 and over. We don't knowingly collect data from children under 13. If you believe a child has given us personal data, contact us and we'll delete it.
You have a number of rights over your personal data — including access, correction, deletion, and objecting to certain uses. These are set out in full, with how to exercise them, on our GDPR & Data Rights page.
We may update this policy as the Service changes. We'll post the new version here with an updated date, and tell you directly if a change is material.
Questions or concerns about your privacy: [privacy@inventait.com].