Privacy Policy

This Privacy Policy explains how GCSEMate ("we", "us") collects, uses, and shares your information when you use our website and services.

1. Data Controller

The data controller is GCSEMate. Contact: admin@gcsemate.com.

2. Information We Collect

• Account Information: display name, email address, subscription tier, role, allowed subjects.
• Usage Data: actions within the app (e.g., starred files, calendar events), pages viewed, timestamps.
• Device/Technical Data: IP address, browser type, and device information automatically provided by your browser.
• Cookies and Similar Technologies: used to maintain sessions and preferences.

3. Sources of Information

Information is provided directly by you or generated when you use the service (e.g., saving preferences). We may also receive limited technical data from service providers.

4. How We Use Information

• Provide and operate the service (authentication, rendering content, saving preferences).
• Maintain security, prevent abuse, and troubleshoot issues.
• Communicate with you about updates or important service notices.
• Comply with legal obligations.

5. Legal Bases

Under UK/EU GDPR, our processing bases include performance of a contract, legitimate interests (e.g., service improvement, security), and consent where applicable.

6. Sharing and Processors

We use third‑party processors to provide the service, including Firebase (authentication and database) and Google services (e.g., Drive and YouTube embeds). These providers process data on our behalf per their terms.

7. Data Retention

We retain personal data for as long as necessary to provide the service and comply with legal obligations. You may request deletion at any time via Account settings or by contacting us.

8. Security

We take reasonable measures to protect your information; however, no method of transmission or storage is 100% secure.

9. International Transfers

Your data may be processed outside your country. Where required, we implement appropriate safeguards.

10. Your Rights

• Access, correction, deletion, and portability of your data.
• Restriction or objection to processing in certain circumstances.
• Withdraw consent where processing is based on consent.
• Lodge a complaint with the UK ICO or your local authority.

11. Children's Privacy

GCSEMate is designed for students. If you are under 13, use only with parent/guardian consent as required by local laws.

12. Cookies

We use cookies essential to the operation of the service. Your browser may allow you to block cookies, but the service may not work properly if you do.

13. Changes

We may update this policy to reflect legal or operational changes. We will post updates in the app and update the date below.

14. Contact

Questions about privacy? Contact: admin@gcsemate.com.