Who we are
This Privacy Policy applies to TheoryPass.org.uk (the “Service”), which is operated by iByte Apps Ltd, a company based in the United Kingdom. iByte Apps Ltd is the data controller for personal data processed through the Service.
Contact
For privacy requests (access, deletion, questions), contact us via the Support / Contact page in the app or website.
What we collect
- Account data: email address and account ID.
- Usage data: app and website interactions and events (analytics).
- Device data: device/app identifiers and technical logs for stability and security.
- Support messages: content you send us (e.g. email, contact form).
- Cookies: essential, analytics, and marketing cookies on the website (see “Cookies”).
We do not collect phone numbers as part of account creation.
How we use your information
- To create and manage your account and provide core app/website functionality.
- To improve performance and reliability (analytics and crash reporting).
- To provide customer support and respond to enquiries.
- To send account-related emails (verification, password reset, service messages).
- To send marketing emails where permitted (you can opt out at any time).
Legal basis (UK GDPR)
- Contract: to provide the Service you request.
- Legitimate interests: to keep the Service secure, improve it, and prevent abuse.
- Consent: for marketing cookies and (where applicable) marketing communications.
- Legal obligation: where we must comply with law (e.g. tax/records where applicable).
Payments
Purchases may be processed by Apple App Store, Google Play, and Stripe. We do not store full card details. Payment processors handle sensitive payment information in accordance with their own policies.
Third-party services we use
- Google Analytics 4 (GA4): website/app analytics (where applicable).
- Firebase Analytics: app analytics.
- Crash reporting: to diagnose errors and improve stability.
- Amazon SES: to send account and support emails, and marketing emails.
- Stripe: payment processing (where used).
Cookies
Our website uses cookies. Some are essential for the site to work. We also use analytics cookies and marketing cookies to measure and improve our campaigns and user experience. Where required, we ask for your consent before setting non-essential cookies.
Push notifications
We may send push notifications for app functionality (for example, reminders or service-related alerts). We do not use push notifications for marketing.
Data sharing
We do not sell your personal data. We share data only with service providers who help us operate the Service (e.g. analytics, email delivery, payment processors) and only as necessary.
Account deletion
You can delete your account from the Settings area in the web app or from the Settings tab in the mobile app. When you request deletion, we take steps to remove or anonymise data where appropriate, subject to any legal obligations.
Data retention
We keep personal data only as long as needed to provide the Service, comply with legal obligations, resolve disputes, and enforce our agreements. If you delete your account, we will handle your data in line with the deletion process described above.
Security
We use reasonable technical and organisational measures to protect your information. However, no online service can be guaranteed 100% secure.
Children
The Service is intended for users aged 13+. If you believe a child has provided personal data without appropriate permission, please contact us.
Your rights
Depending on your location and applicable law (including UK GDPR), you may have rights to access, correct, delete, or restrict processing of your personal data, and to object to certain processing. You may also withdraw consent where we rely on consent.
Changes to this policy
We may update this policy from time to time. If changes are significant, we’ll post a notice in the app or on the website.