Skip to content

Privacy Policy

Last updated: 18 April 2026

1. Who we are

Retainly is operated by Retainly Learning Ltd, a company registered in England and Wales.Our website is retainlylearning.com and our mobile application is available on iOS.

When we refer to “Retainly,” “we,” “us,” or “our” in this policy, we mean Retainly Learning Ltd.

2. What data we collect

We collect only the data necessary to provide and improve the Retainly service. This includes:

  • Account information: Your email address, used for authentication and account recovery.
  • Study progress: Flashcard responses, quiz results, spaced repetition schedules, streak data, and XP/level information. This data is stored locally on your device and synced to our servers to enable cross-device access.
  • Device information: Device type, operating system version, and app version. We use this to diagnose technical issues and ensure compatibility.
  • Usage analytics: Anonymous, aggregated data about how features are used (e.g. which subjects are most popular). We do not track individual browsing behaviour on our website.

We do not collect your name, date of birth, school, location, or any information beyond what is listed above.

3. How we use your data

We process your personal data on the following legal bases under UK GDPR Article 6: providing the Service and managing your account (contract performance, Art. 6(1)(b)); sending essential service communications (contract performance); improving the Service through anonymised analytics (legitimate interests, Art. 6(1)(f) — we have assessed that our use of anonymised analytics does not override your rights and you may contact us to object); and enforcing our Terms of Service (legitimate interests).

We use the data we collect to:

  • Provide the Retainly service, including personalised spaced repetition scheduling, AI-generated flashcards, and quiz questions.
  • Authenticate your account and manage your subscription status.
  • Send you essential service communications (e.g. password resets, subscription confirmations). We will never send unsolicited marketing emails.
  • Improve the service by analysing aggregated, anonymised usage patterns.
  • Enforce our Terms of Service and prevent abuse.

We do not sell, rent, or share your personal data with third parties for marketing purposes. We may share data with the following processors solely to operate the service:

  • Supabase — database hosting and authentication (EU-hosted).
  • Anthropic — AI model provider for flashcard and quiz generation. Prompts sent to Anthropic contain only subject, topic, and board information — no user identifiers or personal data of any kind are included. Anthropic is based in the United States; data is transferred under the UK-US Data Bridge adequacy decision. A Data Processing Agreement is in place with Anthropic.
  • Apple — subscription billing via the App Store. We do not receive or store your payment details.
  • Vercel — website hosting and privacy-friendly analytics (no cookies, no personal data).

4. Data retention

We retain your personal data for as long as your account is active. Study progress data is stored locally on your device and synced to our servers.

If you delete your account, we will permanently erase all personal data associated with it within 30 days. Anonymised, aggregated analytics data may be retained indefinitely as it cannot be linked back to you. This data is aggregated and non-reversibly anonymised and therefore falls outside the scope of UK GDPR.

You can request account deletion at any time from within the app (Settings → Account → Delete Account) or by emailing us at the address below.

5. Your rights

Under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, you have the following rights:

  • Right of access: You can request a copy of all personal data we hold about you.
  • Right to rectification: You can ask us to correct any inaccurate data.
  • Right to erasure: You can request that we delete your account and all associated data.
  • Right to data portability: You can request your data in a structured, machine-readable format (JSON export is available in-app).
  • Right to object: You can object to processing of your data where we rely on legitimate interests.
  • Right to lodge a complaint: You may contact the Information Commissioner's Office (ICO) at ico.org.uk if you believe your rights have been infringed.

To exercise any of these rights, email us at privacy@retainlylearning.com. We will respond within 30 days.

6. ICO registration

Retainly Learning Ltd is registered with the Information Commissioner's Office (ICO) as a data controller.If we are not yet registered at the time you read this, registration is in progress — it is a legal requirement under UK GDPR and we are complying with it.

7. Children's privacy

Retainly is designed for students aged 13 and over. We do not knowingly collect personal data from children under the age of 13. If you are under 13, please do not create an account or use the service.

If we become aware that we have collected personal data from a child under 13, we will take steps to delete that data as soon as possible. If you believe a child under 13 has provided us with personal data, please contact us at privacy@retainlylearning.com.

For users aged 13–17, we recommend that a parent or guardian reviews this Privacy Policy.

8. Cookies

Our website (retainlylearning.com) uses no tracking cookies. We use Vercel Analytics, which is a privacy-friendly analytics service that does not use cookies or collect personal data. No cookie consent banner is required.

The Retainly iOS app does not use cookies. Authentication is handled via secure, HTTP-only session tokens managed by Supabase.

9. Contact

If you have any questions about this Privacy Policy or how we handle your data, please contact us:

10. Changes to this policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you via the app or by email. The “Last updated” date at the top of this page indicates when this policy was last revised.

Continued use of Retainly after changes are posted constitutes your acceptance of the revised policy.