Privacy Policy

Placeholder. The production privacy policy lands before the public Phase 2 launch — it covers UK GDPR, the ICO Children's Code obligations for under-13 users, data minimisation, retention periods, subprocessors, and the right-to-erasure flow.

Test results

When you take a test we store the whole attempt: every question exactly as it was asked, the answer you gave, whether it was marked right, the marks awarded, how long you spent on each question and on the test, and whether you chose to test before the deck was ready. Attempts are append-only — once a test is submitted, neither you nor anyone else can change what it recorded.

Who can see it. You can, on /tests. An admin of any organisation you belong to — for a family account, the parent who set it up — can read exactly the same rows, and the page tells you their name. They can read; they cannot change or delete anything. The people who operate Flashcards can access accounts for support and safety. Nobody else can: database row-level security, not application code, is what enforces this.

How long. For the life of the account. Deleting your account deletes your attempts and their items with it, in the same cascade as your decks and reviews.

Automated marking. Answers are marked by a deterministic engine on the server. Where a language model is involved in marking, the item is labelled as model-marked in your results and counted on your progress page, so you can see how much of a score was a judgement call rather than an exact match. In practice that means one thing: when the engine cannot match a SHORT written answer to the answer key, that one question, its mark scheme and your answer are sent to Anthropic to be re-marked against the key. It can only ever award a mark the engine refused — it is never allowed to take one away — and the reason it gives is shown to you next to the question.

What a test changes. Unless you turn it off before you start, the marks feed back into your review schedule: a card you got wrong comes back sooner, a card you got right moves further out. Your results screen says how many cards were rescheduled, every time. Generated practice questions are not tied to a card, so they change nothing. A question a model marked wrong never demotes a card.

Coaching

When you write an answer to an exam-style written task — in a test, or from the task list — we store the answer, the question as it was asked, and, once you ask for coaching, the feedback you were given, your revised attempt, its check, any question you asked about the feedback, and the one line you may write about what you will work on next. Your current focus is worked out from your last three coached answers on a text and stored as a short summary with the lines it rests on.

What the model sees. Coaching is written by a language model (Anthropic). When you ask for it, your answer, the task and its reviewed mark scheme are sent to be coached; the earlier feedback on the same text is included so the coach can say when something recurs. Nothing is sent until you press the button, and the price is shown first.

Who can see it. You can, on your coaching pages. A linked parent sees exactly the same — the questions you were coached on, your answers, the feedback and your current focus — and your settings page shows you what they see. The person who runs GCSE Zone, and a subject specialist they nominate, read coached answers to check the AI’s feedback against the mark scheme and record whether they agree. They read; they never change your work, and their notes are about the feedback, not shown to you or your parent. Every such read is logged.

How long. For the life of the account. Deleting your account deletes every coached answer, the feedback and your focus with it. A saved answer you never asked coaching on can be discarded by you at any time.

Cookies & analytics

We use Google Analytics to understand how the app is used — which pages and decks are opened, which features get used, how long study sessions last. It is off by default: nothing is stored on your device and no analytics cookie is set unless you accept the banner. If you reject — or simply ignore it — it stays that way, and nothing else about the app changes.

When you accept, Google Analytics sets the _ga and _ga_* cookies (about 2 years) to tell one browser apart from another between visits, and usage is linked to your account id — a random identifier, never your name or email — so we can see how each family member's studying is going. Google processes this data on our behalf in the United States. No advertising use: we run no ads and no remarketing; advertising signals stay switched off even when you accept analytics.

Your answer is stored in this browser only, under flashcards:consent — the choice is per browser and per device. Clearing this site's data erases the answer, and we'll ask again next time. You can change your mind here, any time, with one tap:

Strictly-necessary cookies — the sign-in session (Clerk) and the short-lived invite-code cookie — are always on: the service cannot function without them, and they are never used for analytics.