Skip to main content
Study Smart AI← Back to dashboard

Privacy Policy

Last updated: 20 April 2026

This policy explains how Study Smart AI (“we”, “us”, “our”) collects and uses your personal data when you use study.smartaisolution.co.uk (the “Service”). It is written to meet the UK GDPR and the UK Data Protection Act 2018.

1. Who we are

The Service is operated by Smart AI Solutions, which acts as the data controller for your personal data. Full business identification is provided in section 12 below.

For any question about this policy, or to exercise any of your rights, contact us at support@smartaisolution.co.uk. We respond within one month.

2. What data we collect

We collect the following categories of data:

  • Account data — your email address, name, and profile photo as provided by Google OAuth when you sign in. We never see or store your Google password.
  • Study data — the subjects you select, questions you attempt, answers you submit, flags you set, essay responses you write, and per-question timing. This data is tied to your user account so we can show progress, weak topics, and personalised recommendations.
  • Subscription + payment data — subscription tier, start/end dates, and the Stripe customer/subscription identifiers linked to your account. Full card details are handled by Stripe and never touch our servers.
  • Usage data — quota counters (questions validated per day, essay feedback requests per day), and the IP address and user agent of the browser at account creation (used only for referral fraud detection).
  • Cookies — a session cookie issued by our authentication system to keep you signed in, and a short-lived referral cookie (study_ref) if you arrive via a referral link. No third-party advertising or tracking cookies are used.

3. Why we use your data (legal bases)

  • Performance of a contract — to provide the Service you signed up for: showing questions, validating answers, saving your progress, and billing if you subscribe.
  • Legitimate interests — to detect and prevent abuse of the referral program, to diagnose bugs via server logs, and to improve the product by aggregating anonymous usage patterns.
  • Legal obligation — to keep tax and payment records for UK HMRC as required by law (typically six years).
  • Consent — where you explicitly opt in, for example by submitting an essay to our AI feedback engine. You can withdraw consent at any time by stopping use of that feature.

4. How we store and secure your data

Your data is stored in managed database and application-hosting services operated by established UK / US technology providers. Connections are encrypted in transit (TLS). Access is restricted to the people and systems strictly needed to run the Service.

Your answers and essays are sent to large language model providers (including Google and OpenAI) for the sole purpose of generating the feedback or explanation you explicitly requested. No training on your data is authorised; we rely on providers’ zero-retention / no-training terms where available.

5. Who we share data with

The following categories of recipients receive personal data in order for us to deliver the Service:

  • Payment processor — Stripe, Inc. processes subscriptions and payments. Stripe is a separate data controller for the payment data it collects. See stripe.com/privacy.
  • Identity provider — Google, when you sign in with Google OAuth.
  • AI model providers — including Google and OpenAI, only when you invoke an AI feature. Only the relevant question text and your submitted answer are sent; we do not send your name or email address.
  • Infrastructure providers — managed database hosting, serverless application hosting, and a rate-limiting cache, all acting as data processors under contract.

We do not sell your personal data and we do not share it for advertising purposes.

6. International transfers

Some of the technology providers we rely on are located outside the United Kingdom, including in the United States. Where personal data leaves the UK, we rely on the UK’s International Data Transfer Addendum and the EU Standard Contractual Clauses as appropriate.

7. How long we keep your data

  • Account data: while your account is active, plus up to 30 days after deletion.
  • Study progress: while your account is active; deleted with your account on request.
  • Payment records: six years from the end of the tax year, as required by HMRC.
  • Server logs: up to 30 days.

8. Your rights under UK GDPR

You have the right to:

  • access the personal data we hold about you;
  • request correction of inaccurate data;
  • request deletion of your account and associated data;
  • restrict or object to certain processing;
  • receive a copy of your data in a portable format;
  • withdraw consent where consent is the legal basis;
  • lodge a complaint with the UK Information Commissioner’s Office (ICO), Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF, United Kingdom — ico.org.uk/make-a-complaint.

To exercise any of these rights, email support@smartaisolution.co.uk. We aim to acknowledge your request within five working days and respond substantively within one month.

8a. Cookies and similar technologies

We use only the cookies strictly necessary to operate the Service:

  • Authentication session cookie — set when you sign in, so the Service knows it is you on subsequent page loads. Expires when you sign out or after a period of inactivity.
  • Referral cookie (study_ref) — short-lived, set if you arrive via a referral link, so we can credit the correct referrer when you sign up.

We do not use advertising, analytics, profiling, or third-party tracking cookies. Because all cookies we set are strictly necessary to provide a service you have requested, no consent banner is required under the UK Privacy and Electronic Communications Regulations (PECR). You can clear cookies at any time in your browser settings.

9. Children

The Service is intended for students preparing for UK GCSE and A-Level examinations. If you are under 13, please do not create an account. If you are between 13 and 18, please use the Service with a parent or guardian’s knowledge. We do not knowingly collect data from children under 13.

10. Changes to this policy

We may update this policy when the Service changes or when the law changes. The “Last updated” date at the top of this page reflects the most recent revision. Material changes will be notified in-app or by email.

11. Contact and complaints

Questions, data-subject requests, or complaints about how we handle your personal data: support@smartaisolution.co.uk. If you are not satisfied with our response, you can escalate to the UK Information Commissioner’s Office (see section 8). Full business identification is shown in section 12 below.

12. Business information

Smart AI Solutions is the trading name of Y. P. Law, a sole trader established in the United Kingdom. Service address: 35 Kingfisher Way, Cheswick Green, B90 4LW, United Kingdom. Contact: support@smartaisolution.co.uk. Prices are in GBP.