Privacy Policy

Last updated: June 2026

1. Who we are

XP Revise ("we", "us", "our") operates the website at xprevise.co.uk - a gamified revision platform for A Level and BTEC students in the United Kingdom.

For the purposes of UK GDPR and the Data Protection Act 2018, XP Revise is the data controller for personal data collected through this website.

2. Data we collect

Account data (when you sign in with Google)

When you sign in using Google OAuth, we receive and store:

• Your name (as registered with Google)
• Your email address
• Your Google profile photo URL
• A unique identifier assigned by Google

We do not receive or store your Google password.

Usage and progress data

As you use XP Revise, we store:

• XP points earned and current level
• Daily streak count
• Hearts/lives remaining
• Topics completed and quiz scores
• Badges earned
• Date and time of last login
• Date your account was created

Contact form data

If you contact us via our contact form, we collect your name, email address, the subject you selected, and your message. This data is used solely to respond to your enquiry.

Technical data

We may collect standard server log data including your IP address, browser type, and pages visited. This is used for security and performance monitoring only and is not linked to your account data.

3. How we use your data

We use your personal data to:

• Authenticate you and maintain your account
• Track and display your revision progress, XP, streaks, and badges
• Display leaderboards showing your username and score relative to other users
• Respond to contact form enquiries
• Improve the platform based on usage patterns (anonymised where possible)
• Send essential system emails (e.g. account notifications) from noreply@xprevise.co.uk

We do not use your data for advertising, and we do not sell your data to any third party.

4. Legal basis for processing

Under UK GDPR, we process your data under the following lawful bases:

• Contract - processing your account data is necessary to provide the XP Revise service you have signed up for
• Legitimate interests - storing progress and usage data to deliver a personalised revision experience
• Legal obligation - retaining certain records where required by law

5. Third parties

Google (authentication)

Sign-in is handled by Google OAuth. When you use "Sign in with Google", you are subject to Google's Privacy Policy. We receive only the profile data described in Section 2 above.

Supabase (database and authentication)

Your account and progress data is stored securely in a Supabase database hosted in the European Union (Ireland). Supabase processes data in accordance with UK GDPR and is bound by appropriate data processing agreements. See Supabase's Privacy Policy.

No advertising or analytics third parties

We do not use Google Analytics, Meta Pixel, or any advertising-related third-party services.

6. Data retention

We retain your account and progress data for as long as your account is active. If you request deletion of your account, we will delete your personal data within 30 days, except where we are required to retain it by law.

Contact form enquiries are retained for up to 12 months and then securely deleted.

7. Your rights

Under UK GDPR, you have the right to:

• Access - request a copy of the personal data we hold about you
• Rectification - request correction of inaccurate data
• Erasure - request deletion of your personal data ("right to be forgotten")
• Portability - receive your data in a structured, machine-readable format
• Restriction - request that we restrict processing of your data in certain circumstances
• Object - object to processing based on legitimate interests

To exercise any of these rights, please email hello@xprevise.co.uk. We will respond within 30 days.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) if you believe your data has been mishandled.

8. Cookies

XP Revise uses only essential cookies required for the platform to function, including authentication session cookies set by Supabase. We do not use advertising or tracking cookies.

You can control cookies through your browser settings. Disabling essential cookies will prevent you from signing in and using the platform.

9. Children and under-18 users

XP Revise is designed for students aged 16 and over (AS/A Level and BTEC Level 3 students). We do not knowingly collect data from children under the age of 13 without parental consent.

If you are between 13 and 15 years old, you should obtain parental or guardian consent before creating an account. If you are a parent or guardian and believe your child under 13 has created an account, please contact us at hello@xprevise.co.uk and we will promptly delete the account.

10. Changes to this policy

We may update this Privacy Policy from time to time. The date at the top of this page will always reflect the most recent update. Significant changes will be notified to registered users by email.

11. Contact us