Privacy Policy

1. Who we are

RA10 (ra10.co.uk) is the controller of your personal data for the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. You can contact us about anything in this policy at contact@ra10studios.co.uk.

If you use RA10 through your school, your school may also be a controller for the information it gives us about you (for example, your class group) and for what it sees in the school portal.

2. What we collect

Information you give us

• Account details: email address, password (stored securely as a hash by our authentication provider — we can't see it), display name and username.
• Profile: profile picture and leaderboard badge, if you choose to add them.
• Learning activity: revision sessions, quiz and practice results, XP, streaks, tasks and exam dates you save.
• AI submissions: the answers, assignments or messages you send to AI marking, AI Examiner, AI Assigner or AI Helper, and the feedback returned.
• AI chat history: the text of your AI Helper, AI Assigner and AI Examiner conversations, the subject, unit and topic tags on them, and any chat groups you create. Only text is kept: no images or uploaded files (for an uploaded assignment we keep a short text excerpt, not the file).
• Community content: source text and settings you use to build community revision apps.
• Messages: what you send through the contact form (topic, name, email, username and message).
• School membership: if your school invites you, your school, role, assigned subjects and group.
• Payments: if you buy a plan, your plan, payment status and customer reference. Card and bank details are handled by Stripe or GoCardless, not us.

Information created when you use RA10

• Terms acceptance record: which version of the Terms and Privacy Policy you accepted, when, confirmation that you're 13 or over, and your browser's user-agent string, so we can show you agreed.
• Credit activity: how many credits you have and how you used them.
• Technical data: our hosting and database providers keep short-term server logs (such as IP address and request time) for security and troubleshooting.
• Device storage: settings saved in your browser — see our Cookie & Storage Policy.

3. How and why we use it

We do not sell your personal data, use it for advertising, or make decisions with legal or similarly significant effects about you using automated processing alone. AI marks are estimates for your own practice.

4. Children and young people

Many RA10 users are under 18, so we follow the ICO's Age Appropriate Design Code (the Children's Code). In practice this means:

• You must be 13 or older to create an account.
• Privacy-friendly defaults: no advertising, no tracking cookies, no selling or profiling for marketing.
• Your public leaderboard identity is your chosen username — we recommend not using your real name.
• We explain things in plain language. If anything here is unclear, ask a parent, guardian or teacher, or contact us.

5. Who we share it with

We use trusted service providers (processors) who only use your data on our instructions:

We may also share information if the law requires it, to protect someone's safety, or with your school where you joined through a school. If RA10 is ever sold or merged, your data would transfer under the same protections and we'd tell you first.

6. International transfers

Some of our providers are based in, or process data in, countries outside the UK, including the United States and, for some AI processing, China. Where this happens we rely on UK adequacy regulations or appropriate safeguards such as the UK International Data Transfer Agreement or Addendum to the EU Standard Contractual Clauses. Contact us for more detail.

7. How long we keep it

• Account, profile and learning data: while your account is open. When you ask us to delete your account, we delete it within 30 days (backups roll off within a further 30 days).
• AI submissions: AI providers may keep what we send them briefly under their own abuse-monitoring policies.
• Photos of written work: when you use "Photo of my working", the photo is sent once to our AI provider to read your handwriting and is not stored by RA10. Only the text you choose to keep is saved.
• AI chat history: deleted automatically 30 days after the last message in a chat, unless you save that chat. Saved chats are kept until you unsave or delete them, or delete your account. You can delete any chat at any time.
• Terms acceptance records: for as long as your account exists and up to 6 years after, in case we need to show what was agreed.
• Payment records: 6 years, to meet UK tax law.
• Messages: up to 2 years after we last hear from you.

8. Your rights

Under UK data protection law you have the right to:

• access a copy of your personal data;
• have inaccurate data corrected (you can edit your name, username and picture yourself on your account page);
• have your data deleted;
• restrict or object to how we use it, including anything based on legitimate interests;
• receive your data in a portable format;
• withdraw any consent you've given, at any time.

To use any of these rights, email contact@ra10studios.co.uk from the address on your account. We'll reply within one month. It's free.

9. Security

Data is encrypted in transit (HTTPS). Access to account data is protected by row-level security so each person can only reach their own records, sensitive changes go through server-side checks, and passwords are never stored in readable form. No system is perfectly secure, so please use a strong, unique password. If a breach affects you, we'll tell you and the ICO where the law requires.

10. Changes to this policy

If we make a meaningful change, we'll update the version and date at the top and ask you to review it the next time you sign in. You'll only be asked once per version.

11. Contact & complaints

Email contact@ra10studios.co.uk with any question or concern. If you're unhappy with how we've handled your data, you can complain to the Information Commissioner's Office at ico.org.uk/make-a-complaint or on 0303 123 1113 — but please let us try to help first.