Privacy Policy
Last updated: June 2026
1. Who We Are
Applaa is operated by Applaa Ltd (Company Number: 16787669), a company registered in England and Wales. We are the data controller for personal data collected through the Applaa platform, website and related services.
Contact: privacy@applaa.com
2. What Data We Collect
- Account data: name, email address, password (encrypted)
- Profile data: age range, year group, region, learning preferences
- Usage data: pages visited, features used, time spent, learning progress
- Device data: browser type, operating system, IP address
- Communications: messages you send us, support requests
- Payment data: processed securely by Stripe — we do not store card details
3. How We Use Your Data
- Create and manage your account
- Provide and improve the Applaa platform and AI features
- Personalise your learning experience
- Process payments and manage subscriptions
- Send service-related communications
- Send marketing communications where you have given consent
- Comply with our legal obligations
- Detect and prevent fraud, abuse or security issues
4. Legal Basis for Processing (UK GDPR)
- Contract: to provide the service you have signed up for
- Legitimate interests: to improve and secure the platform
- Consent: for marketing emails and non-essential cookies
- Legal obligation: where required by law
5. Children's Privacy
Applaa is designed for children aged 8–16. We comply with the UK Children's Code (Age Appropriate Design Code). We do not use children's data for marketing or profiling. We do not collect more data from children than is necessary to provide the service.
Parents and guardians may request access to, correction of, or deletion of their child's data by emailing privacy@applaa.com.
6. Sharing Your Data
We do not sell your personal data. We may share data with:
- Service providers: Supabase (database), Stripe (payments), Vercel (hosting), Google Analytics (anonymised usage data)
- AI providers: third-party AI model providers to power tutoring features — no personal identifying data is passed
- Legal authorities: where required by law or to protect rights and safety
7. Data Retention
We retain your personal data for as long as your account is active. If you delete your account, we will delete or anonymise your data within 30 days, except where retention is required by law.
8. Your Rights Under UK GDPR
- Access — request a copy of the data we hold about you
- Correction — ask us to correct inaccurate or incomplete data
- Erasure — ask us to delete your data
- Restriction — ask us to restrict how we use your data
- Portability — receive your data in a machine-readable format
- Objection — object to processing based on legitimate interests
- Withdraw consent — at any time where processing is consent-based
To exercise any right, email privacy@applaa.com. We will respond within 30 days.
9. Cookies
We use cookies to operate and improve the platform. See our Cookie Policy for full details.
10. International Transfers
Some service providers may process data outside the UK or EEA. Where this occurs, we ensure appropriate safeguards are in place, including standard contractual clauses approved by the ICO.
11. Security
We use industry-standard technical and organisational measures including encryption, access controls and secure hosting. No system is completely secure and we cannot guarantee absolute security.
12. Complaints
You have the right to complain to the UK Information Commissioner's Office (ICO):
ico.org.uk · 0303 123 1113
13. Changes to This Policy
We may update this policy from time to time. We will notify you of significant changes by email or notice on the platform. Continued use of Applaa after changes means you accept the updated policy.
14. Contact
privacy@applaa.com
Applaa Ltd · Company No. 16787669 · Registered in England and Wales