Privacy Policy
Last updated: 5 April 2026
Data controller
PassLifeInUK (“we”, “us”, “our”) is the data controller for the personal data processed through passlifeinuk.co.uk.
For any data protection queries, contact us at privacy@passlifeinuk.co.uk.
What data we collect
- Account data — If you sign in with Google, we receive your name, email address, and profile photo from Google.
- Study progress — Lesson completions, review scores, mock test results, and onboarding preferences.
- Payment data — Processed securely by Stripe. We do not store card numbers on our servers.
- Usage analytics — Anonymous page-view data collected by Vercel Analytics. No cookies are used for analytics.
Lawful basis for processing
We process your personal data on the following lawful bases under UK GDPR:
- Contract performance (Article 6(1)(b)) — Account data and study progress are processed to deliver the service you signed up for.
- Contract performance (Article 6(1)(b)) — Payment data is processed by Stripe to fulfil your Premium purchase.
- Legitimate interests (Article 6(1)(f)) — Anonymous usage analytics help us improve the platform. Our interest is balanced against your privacy as no personal data is collected for this purpose.
- Consent (Article 6(1)(a)) — Where you explicitly opt in to optional communications. You may withdraw consent at any time by contacting us.
How we use your data
- To provide and personalise your study experience.
- To sync your progress across devices when you are signed in.
- To process Premium purchases and manage your subscription status.
- To improve the platform based on aggregated, anonymous usage patterns.
Data retention
We retain your personal data only as long as necessary for the purposes described above:
- Account and study data — Retained while your account is active. Deleted within 30 days of account deletion.
- Payment records — Retained for 7 years to comply with UK tax and accounting obligations.
- Analytics data — Anonymous and aggregated; not linked to your identity.
Data storage, security, and international transfers
Your data is stored on servers hosted by Vercel (United States) and secured with HTTPS. Study progress for guest users is stored locally on your device. We implement reasonable security measures to protect your personal information.
Some of our third-party processors are based outside the UK. Where personal data is transferred internationally, it is protected by appropriate safeguards:
- Vercel (US) — Data Processing Addendum with Standard Contractual Clauses (SCCs).
- Google (US) — UK adequacy regulations and SCCs under Google's data processing terms.
- Stripe (US) — SCCs and certification under applicable data protection frameworks.
Third-party services
- Google Sign-In — For authentication. Subject to Google's privacy policy.
- Stripe — For payment processing. Subject to Stripe's privacy policy.
- Vercel Analytics — For anonymous usage analytics. No personal data is shared.
Automated decision-making
Our “smart review” feature uses an algorithm to select review cards based on your past answers. This personalisation helps you focus on weaker areas. It does not produce legal or similarly significant effects. You can reset your review progress at any time from your dashboard.
Your rights
Under UK GDPR, you have the right to:
- Access — Request a copy of the personal data we hold about you.
- Rectification — Ask us to correct inaccurate personal data.
- Erasure — Ask us to delete your personal data (you can also delete your account from the dashboard).
- Restriction — Ask us to restrict processing in certain circumstances.
- Data portability — Receive your data in a structured, machine-readable format.
- Object — Object to processing based on legitimate interests.
- Withdraw consent — Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.
To exercise any of these rights, email privacy@passlifeinuk.co.uk. We will respond within one month.
Right to complain
If you are unhappy with how we handle your data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO): ico.org.uk/make-a-complaint, or call 0303 123 1113.
Cookies
We use only essential cookies required for authentication and session management. We do not use tracking cookies or advertising cookies. For more information, see the cookie notice displayed on your first visit.
Changes to this policy
We may update this policy from time to time. Changes will be posted on this page with an updated revision date. Where changes are significant, we will notify signed-in users by email.
Contact
If you have questions about this privacy policy or your data, email us at privacy@passlifeinuk.co.uk.