Privacy notice

• Account data — your email address and login credentials (or your Google sign-in identity). Used to create and secure your account. Legal basis: performance of our contract with you.
• Study data — your progress, answers, notes, bookmarks, quiz attempts, labs, portfolio entries and study sessions. Used to run the service, back up your progress across devices and show your results. Legal basis: contract.
• AI prompts and answers — the text you submit to the AI Tutor or for AI marking, plus a summary of your progress, is sent to our AI provider to generate a response. Legal basis: contract.
• Technical data — IP address, device and browser information, and error logs. Used for security, fraud prevention and fixing faults. Legal basis: legitimate interests in keeping the service working and safe.
• Support messages — anything you email us. Used to answer you. Legal basis: legitimate interests.

We do not sell your data, and we do not use your study content for advertising.

• Hosting, database and authentication providers who store and serve the app on our behalf.
• Our AI provider, to generate tutoring and marking responses.
• Paddle.com, our Merchant of Record, for the sale of the product, payments, invoicing and tax compliance. Paddle collects your payment details directly; we never see your card number.
• Professional advisers (legal, accounting) where needed.
• Authorities, where we are required to by law.

Our providers may process data in the United States and other countries. Where data leaves the UK or EEA, transfers are protected by standard contractual clauses or an adequacy decision.

We keep your account and study data for as long as your account exists. If you ask us to delete your account, we delete or anonymise your data, except where we must keep records (for example purchase and tax records) for the period the law requires. You can export your own copy at any time from the Study record page.

Depending on where you live, you may ask us to give you a copy of your data, correct it, delete it, restrict or object to how we use it, or provide it in a portable format. Where we rely on consent, you can withdraw it at any time. Email boleydavid7@outlook.com and we will reply within one month. If you are in the UK or EEA you also have the right to complain to your local data protection authority.

We use appropriate technical and organisational measures, including encryption in transit, access controls and per-user database rules so that your study data is only readable by your own account. No system is perfectly secure, so please use a strong, unique password.

IT PATH uses only essential cookies and browser storage: they keep you signed in and hold an offline copy of your study progress so the app works without a connection. We do not use advertising or tracking cookies. Clearing your browser storage signs you out and removes the local copy; anything already backed up to your account is restored when you sign back in.

IT PATH is not directed at children under 13, and we do not knowingly collect their data. If you believe a child has created an account, email us and we will remove it.

If we update this notice we will change the date at the top of this page and, for significant changes, tell you in the app.