Privacy

Data and purposes

We process account email, one-use sign-in links, essential session identifiers, saved answers and deadlines, flags, bookmarks, reading progress, recall self-ratings and revisit dates, optional goals, consent and billing/support references. This supports the requested service, security and legal accounting obligations. Use synthetic examples and no third-party personal or confidential workplace data.

Storage and protection

Account email/key fields and study payloads are encrypted at rest. HTTPS protects transfer. This is not end-to-end encryption: authorised support can decrypt records. Essential HttpOnly SameSite session cookies last up to seven days. One-use matching-email sign-in links expire after 15 minutes. Billing/declaration/email outbox records and necessary security logs may contain contact/contract information outside the encrypted study payload. No third-party fonts, microphone/camera capture or cloud AI marking. Optional ad measurement is described below.

Providers and retention

Stripe handles hosted payments; we do not store full card details. SendGrid handles sign-in and transactional emails. The established Labs host stores records/security logs; backup geography and exact backup deletion schedule are unconfirmed. Providers may process internationally under contractual safeguards. Practice persists until removed/erased/account deletion. Billing/contract records may remain up to six years for legal accounting/disputes. Expired sign-in challenges and corresponding email outbox entries are cleaned up.

Choices and requests

Export records, remove completed attempts, erase practice, revoke device sessions, cancel billing or request account deletion/access/correction/restriction/objection/portability at [email protected]. Erasure does not cancel billing and cancellation does not erase learning. No data sales. You may complain to the UK ICO or your local supervisory authority. Protect your email and sign-in links. External official-resource links use their own privacy policies.

Optional advertising measurement

Updated 23 October 2026. With your permission, Yolleg Ltd uses a first-party cookie and storage to remember the Google advert that brought you here and measure consented visits, sign-ins, checkout starts, free trials and verified payments. We share the advert click identifier (GCLID, GBRAID or WBRAID), event time, an opaque transaction identifier and actual transaction value/currency with Google Ads. We do not send your email, contact details, practice answers, health information or workspace contents for advertising measurement. Ad personalisation is not enabled by this integration.

The measurement cookie is Secure, HttpOnly and SameSite and lasts up to 90 days. Click identifiers are encrypted on our protected server and expire within 90 days; deduplicated event records are retained for up to 180 days. Your browser saves your permission choice for up to 90 days, or a refusal for up to 180 days. Google processes shared data under its own privacy terms and may process it internationally. The basis for this optional processing is your consent.

Choose Allow measurement or No thanks. Refusal does not limit the app, sign-in or purchases. Change or withdraw your choice through the Ad measurement control in the footer. Withdrawal stops new collection and pending sharing; data already processed by Google may remain in its reports. Global Privacy Control is respected. Contact [email protected] about access or deletion. Change ad measurement choice · Google Privacy Policy.