LNAT Prep
Privacy
Effective 23 October 2026.
Yolleg Ltd · company 10455920 · 71–75 Shelton Street, London, England WC2H 9JQ, United Kingdom · [email protected]
Data and purposes
We process account email, one-use sign-in links, essential session identifiers, saved answers and deadlines, flags, bookmarks, reading progress, recall self-ratings and revisit dates, optional goals, consent and billing/support references. This supports the requested service, security and legal accounting obligations. Use the supplied fictional examples. Do not enter real client, personal, employer or confidential records, credentials or confidential information.
Storage and protection
Account email/key fields and study payloads are encrypted at rest. HTTPS protects transfer. This is not end-to-end encryption: authorised support can decrypt records. Essential HttpOnly SameSite session cookies last up to seven days. One-use matching-email sign-in links expire after 15 minutes. Billing/declaration/email outbox records and necessary security logs may contain contact/contract information outside the encrypted study payload. No advertising trackers, analytics SDK, third-party fonts, microphone/camera capture or cloud AI marking.
Providers and retention
Stripe handles hosted payments; we do not store full card details. SendGrid handles sign-in and transactional emails. The established Labs host stores records/security logs; backup geography and exact backup deletion schedule are unconfirmed. Providers may process internationally under contractual safeguards. Practice persists until removed/erased/account deletion. Billing/contract records may remain up to six years for legal accounting/disputes. Expired sign-in challenges and corresponding email outbox entries are cleaned up.
Choices and requests
Export records, remove completed attempts, erase practice, revoke device sessions, cancel billing or request account deletion/access/correction/restriction/objection/portability at [email protected]. Erasure does not cancel billing and cancellation does not erase learning. No data sales. You may complain to the UK ICO or your local supervisory authority. Protect your email and sign-in links. External official-resource links use their own privacy policies.