Privacy Policy

1. Who we are

Applaa ("we", "us", "our") is an educational technology service that provides learning tools, AI tutoring, and app-building features for students aged 13 and over. Our website is applaa.com and our desktop app is the Applaa Builder.

For GDPR purposes, Applaa is the data controller. Contact us at: team@applaa.com

2. Age requirement

Our services are intended for users aged 13 and over. We do not knowingly collect personal data from children under 13 without verifiable parental consent. If you are under 13, a parent or guardian must create and manage the account on your behalf. If we become aware that a child under 13 has provided personal data without parental consent, we will delete it promptly.

3. Our data minimisation approach

• Nickname: a display name you choose — does not need to be your real name
• Email address: for sign-in and essential account emails only
• Password: stored as a secure hash — we never see it in plain text
• Learning preferences: year group, target exam type (optional, helps personalise content)
• Learning activity: exam practice sessions, answers, progress — to track your improvement
• Subscription status: billing tier and trial dates (card payments handled entirely by Stripe — we never see card details)
• Anonymised usage data: pages visited, features used — to improve the product
• Support communications: if you email us, we keep those records

We do not collect: real name, address, phone number, date of birth, government ID, location data, biometric data, or any sensitive personal categories under GDPR Article 9.

4. Legal basis for processing (GDPR)

• Contract performance: to provide the learning service you signed up for
• Legitimate interest: platform security, fraud prevention, service improvement
• Consent: marketing emails (you can opt out at any time)
• Legal obligation: to comply with UK and EU law

5. How we use your data

• Providing and personalising the learning academy and AI tutoring
• Tracking your progress across exams and subjects
• Sending account-related emails (verification, password reset)
• Sending product updates if you opted in
• Improving our products and services

6. AI features — how they work and what is shared

Applaa uses multiple AI providers to power Appy Buddy and exam marking features. Depending on the feature, your message may be processed by one or more of the following:

Each provider has their own data retention and usage policies. We select providers who offer API-level access where your data is not used to train their models (commercial API terms). However, you should review each provider's policy for full details.

AI conversations are not permanently stored by Applaa beyond your current session. We do not share your AI chat content with third parties beyond the AI providers listed above.

7. Other third-party processors

• Supabase — database and authentication (EU hosted)
• Stripe — payment processing
• Vercel — website hosting
• Google — optional sign-in via Google OAuth

8. Data retention

We keep your account data for as long as your account is active. Learning progress data is kept to enable long-term tracking. If you delete your account, we delete all personal data within 30 days, except where we are legally required to retain it (e.g. transaction records for tax purposes, up to 7 years).

9. Your rights (GDPR)

• Access: request a copy of your personal data
• Rectification: correct inaccurate data
• Erasure: delete your account and all personal data — available in Settings > Delete account, or email us
• Portability: receive your data in a machine-readable format — email us to request a data export
• Objection: object to processing based on legitimate interest
• Restriction: request we limit processing
• Withdraw consent: unsubscribe from marketing at any time via Settings or the unsubscribe link in emails

To exercise your rights, email team@applaa.com. We will respond within 30 days. You also have the right to complain to the ICO: ico.org.uk.

10. Cookies

We use essential cookies for authentication and session management. We use anonymised analytics cookies to understand how the service is used. We do not use advertising or third-party tracking cookies. You can manage cookies via your browser settings.

11. Changes to this policy

We will notify registered users by email of material changes to this policy. Continued use of the service after changes constitutes acceptance.

12. Contact

For all privacy enquiries: team@applaa.com