Privacy Policy
Last updated: 19 October 2026
Short version: we collect as little as we can. On the website your revision progress stays in your own browser. In the app it stays on your phone, unless you create an account so it follows you to other phones. We only store what we need to run your subscription, your account and the leaderboards, we never sell data, and there are no advertising cookies or tracking. We count visits without cookies, as anonymous daily totals.
Who we are
Full Marks (fullmarkss.com) is a revision website and iPhone app operated from Slovakia. We are the controller of the personal data described here. Contact us at hello@fullmarkss.com for anything about your data.
What we collect and why
| Data | Why | Legal basis |
|---|---|---|
| Subscription details: your email address, Stripe customer ID, plan and subscription status | To give you full access, keep it working on your devices and let you manage or cancel your plan | Performing our contract with you |
| Payment and billing details: name, billing address, card or wallet details | Collected and processed by Stripe to take payment and work out tax. We never see or store your card number. | Contract; legal obligations (tax and accounting) |
| Sign-in links and codes: the email you type into “Restore access” or into the app’s sign-in | To email you a link or a 6-digit code that signs you in | Contract |
| App account: your email address and, if you use Sign in with Apple, your Apple user ID (Apple may give us a private relay email instead of your real one) | To sign you in to the Full Marks app and keep your account | Performing our contract with you |
| Saved progress (app): your XP, streak, answer counts, best scores, questions to fix and chosen subject, level and board | So your progress is safe and follows you to any phone you sign in on. Only if you create an account. | Performing our contract with you |
| Study plan (website): your level, subjects, exam boards, exam date and daily goal, the notes you write, and the results of the mock papers you sit | So your plan, notes and predicted grades follow you to every device you sign in on. Only if you sign in. | Performing our contract with you |
| Teacher accounts: your name, school, email address and anything you tell us about your classes | To check that you are a teacher before we open a teacher account, and to show your name and school to students who join your classes | Performing our contract with you |
| Classes and grades: for students in a class, the name you give, your email address, the classes you asked to join or are in, and the grades, percentages and notes your teacher adds | So your teacher can manage the class and you can see your grades. Your teacher decides which grades to enter. | Performing our contract with you and your teacher |
| Practice shared with your teacher: XP, streak, how many questions you answered and got right, your best score in each topic, recent quizzes and the days you practised | So your teacher can follow your progress. Only sent while you are in a class that your teacher approved. | Consent (you choose to join a class and can leave at any time) |
| AI tutor: the question you are asking about, your answer, your messages and any photo of your working you add, plus a count of messages used each day | To answer your questions. The conversation itself is kept on your device, not on our servers. | Performing our contract with you |
| Leaderboard entries: the racer name you choose, a random device ID, your scores and the subject and level you played | To show the weekly and all-time leaderboards. Only if you choose to join. | Consent (you can stop at any time) |
| Mistake reports: the question, your reason and any note, with a random device ID | To fix questions that are wrong or unclear | Legitimate interest in accurate content |
| Visit counts: daily totals only: how many visits and pages, where visits came from (for example Google, TikTok or a link with a tag), the first page of a visit, the kind of device (phone, tablet or computer), the browser’s language, which subjects were opened, and how often features such as practice sets, games and explainers are used. No cookie, ID or IP address is stored, so one visit can’t be linked to another or to you | To see how people find Full Marks and which parts help them | Legitimate interest in improving the service |
| Account start date: the date your account first signed in, kept with your email address | So each new account is counted once in the daily totals | Legitimate interest in improving the service |
| Invites: your invite code, who invited you (if anyone), how many friends joined with your link, and your free weeks | To give you and your friends the free weeks the invite offers, once per new account | Performing our contract with you |
| Technical data: IP address and browser details in server logs | To keep the service secure and stop abuse (for example rate limits) | Legitimate interest in security |
Stored only on your device: on the website, your XP, streak, progress, scores, settings, chosen subject and board, and your sign-in token are saved in your browser’s local storage. They are not sent to us (except leaderboard scores you choose to submit). Clearing your browser data removes them. The app keeps the same things on your phone; they are only sent to us if you sign in, as “saved progress” above. If you share your name through Sign in with Apple, it is kept only on your phone.
Please don’t use your real full name as your racer name. Rude or identifying names are rejected or removed.
Who we share data with
We use a small number of service providers who process data on our behalf, under contracts that protect it:
- Stripe: payments, subscriptions, tax and invoices (Stripe privacy policy).
- Render: hosts our server and the subscription database.
- Upstash: stores leaderboards, mistake reports, visit counts, invites, app accounts’ saved progress, teacher accounts, classes, grades and practice shared with teachers (servers in Frankfurt, Germany).
- Anthropic: powers the AI tutor. It receives the question, your messages and any photo you add, only to write the answer, and under its commercial terms it doesn’t use them to train its models (Anthropic privacy policy).
- Apple: Sign in with Apple, if you choose it, and distribution of the app through the App Store.
- GitHub Pages: hosts the website itself.
- Google Fonts: serves the fonts, so your browser sends your IP address to Google when the page loads.
- Our email provider, only to send sign-in links and codes you ask for, and teacher account requests and approvals.
Some of these providers may process data outside the UK and the European Economic Area, for example in the United States. Where they do, the transfer is covered by safeguards such as the European Commission’s standard contractual clauses and the UK addendum.
We do not sell personal data, and we do not use it for advertising.
Cookies
We do not use advertising or tracking cookies, and we count visits without any cookie. The site uses your browser’s local storage only to make it work (progress, settings and staying signed in). Stripe sets its own cookies on its checkout pages to process payments and prevent fraud.
How long we keep data
- Subscription records: while your subscription is active, then for as long as tax and accounting law requires.
- App accounts, saved progress and study plans: until you delete your account. You can do that any time in the app (Me → Delete account) or by emailing us. Deleting your account doesn’t cancel a subscription; cancel that where you subscribed.
- Classes and grades: until your teacher removes you or deletes the class, you leave the class, or you delete your account. Grades a teacher entered stay in the teacher’s records if you leave, until the teacher deletes them.
- Practice shared with teachers: only the latest copy is kept, and it is deleted when you leave your last class or delete your account.
- AI tutor: we keep only the daily message count, for two days.
- Leaderboards: weekly boards expire after about two months; all-time entries stay until you ask us to remove them.
- Mistake reports: until the question has been reviewed, and at most the last 5,000 reports.
- Visit counts: daily totals for about 13 months. Your account start date and invites: until you delete your account.
- Server logs: kept only briefly by our hosting provider.
Children
Full Marks is for GCSE and A-level students, so many users are under 18. Anyone under 18 should ask a parent or guardian to buy a plan, and the parent or guardian is the customer. We don’t ask students for their age. Students who join a class give their name and choose their school so their teacher can recognise them. We collect no personal data from students who don’t subscribe, create an account, join a class or join a leaderboard.
Your rights
Under the GDPR and UK GDPR you can ask to access, correct or delete your data, to restrict or object to how we use it, to receive it in a portable format, and to withdraw consent at any time. Email hello@fullmarkss.com and we will reply within one month.
If you are unhappy with how we handle your data, you can complain to the Slovak data protection authority (Úrad na ochranu osobných údajov SR) or, in the UK, to the Information Commissioner’s Office.
Changes
If we change this policy we will update the date at the top. If a change matters for subscribers, we will tell you before it applies.