Privacy Policy

Last updated: 10 August 2026

Overview

Pass Britain ("we", "our", or "us") is operated by KREYD LABS LTD (Company No. 17152066, registered in England and Wales). We are committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you use our Life in the UK test preparation app and website at passbritain.com.

For the purposes of UK GDPR, the controller is KREYD LABS LTD, contactable at support@passbritain.com.

Information We Collect

  • Account Information: Email address for authentication
  • Onboarding Data: First language, knowledge level, test date timeline, daily study goals, and motivations. Used to personalise your learning experience.
  • Study Data: Your progress, answers, quiz scores, and study statistics
  • Preferences: Test date, study time preferences, audio settings, theme preferences
  • Payment Information:Web payments are processed securely by Stripe. iOS purchases are processed by Apple through StoreKit. Android purchases are processed by Google Play and managed through RevenueCat. We don't store card details.
  • Device Information: Platform (web, iOS, Android), for providing the appropriate app experience
  • Tutor Content: Questions you send to Bertie and the generated answers, so we can provide the AI tutor and maintain conversation context
  • Technical and Diagnostic Data: App platform and version, operation results, non-sensitive error codes, timing, and an opaque account identifier used to diagnose reliability and purchase issues. The native Android app does not use an advertising ID.
  • First-Party Product Analytics: A random opaque browser-session identifier, platform, page path without its query string, bounded campaign labels, external referrer hostname, timestamps, onboarding/funnel milestones, paywall context, and score/count totals without question or answer content. If you sign in, we link that session to your account inside Convex so totals are deduplicated and admin/review activity can be excluded. We do not put your name, email, free-text answers, tutor content, tokens, checkout URL, or client-declared payment state in this analytics record.

How We Use Your Information

  • To provide and personalize your study experience
  • To calculate your readiness score and track progress
  • To enable the AI tutor to give contextual explanations
  • To process payments and manage your premium access
  • To understand where the anonymous-to-learning journey fails and improve conversion, reliability, and retention using aggregated first-party reports
  • To send important service updates (you can opt out)

Lawful Basis for Processing

Under UK GDPR, we process personal information on the following legal bases:

  • Contract: Processing your account, study, and payment information is necessary to provide the service you signed up for
  • Consent: Analytics cookies (Google Analytics) are only placed with your explicit consent via our cookie banner
  • Legitimate interests: We process privacy-limited first-party product analytics and diagnostic information to improve the service, measure whether key journeys work, prevent fraud, and ensure security, where our interests do not override your rights
  • Legal obligation: We retain payment records as required by UK tax law (HMRC)

Security

We use industry-standard security measures to protect your information. All records are stored securely using Convex, and every connection is encrypted via HTTPS.

Third-Party Services

  • Convex: Database and backend services (US-based, SOC 2 compliant)
  • Stripe: Payment processing (PCI DSS compliant)
  • Anthropic (Claude): AI tutor functionality. Your questions are sent to generate helpful explanations.
  • Microsoft Edge TTS: Text-to-speech audio generation for audio mode
  • RevenueCat: Google Play purchase and entitlement management for the Android app
  • Vercel: Web hosting, analytics, and performance monitoring
  • Sentry: Error monitoring and crash diagnostics
  • Google Analytics: Website usage and product-funnel analytics. It loads in the web app only after you accept analytics cookies. We send bounded events such as sign-up, onboarding, study, mock-test, paywall, checkout, and verified purchase activity. Verified purchases include a non-secret transaction identifier, product, platform, currency, and value for deduplication and reporting; we do not send your name, email, account ID, checkout URL, answers, questions, or tutor messages to Google Analytics. See Google's Privacy Policy

International Transfers

Some of our third-party service providers are based in the United States, including Convex (database), Stripe (web payments), RevenueCat (Android in-app purchase management), Anthropic (AI tutor), Vercel (hosting and analytics), Sentry (error monitoring), and Google (analytics and Google Play payments). Your information may be transferred to and processed in the US. These providers maintain appropriate safeguards for cross-border transfers, including compliance with recognised protection frameworks. By using our service, you acknowledge this transfer.

Retention

We keep your account, study progress, results, and preferences while needed to provide continuity in your learning experience. Unlinked anonymous analytics session summaries expire 30 days after their last activity. Funnel events and the minimal summary for a session linked to an account may be retained for up to 400 days for comparisons, deduplication, and exclusion of internal activity. If you delete your account, account-linked study, tutor, checkout, entitlement, diagnostic, and analytics records are removed from our active systems. Verified transaction evidence may be retained for the period required for legal, tax, fraud-prevention, support, and accounting purposes, with contact and funnel linkage removed where the record permits.

Your Rights (GDPR)

Under UK GDPR, you have the following rights:

  • Right of Access: Request a copy of the personal information we hold about you
  • Right to Rectification: Request correction of inaccurate or incomplete records
  • Right to Erasure: Request deletion of your personal information. You can do this directly in the app via Settings → Delete Account.
  • Right to Portability: Request your records in a machine-readable format
  • Right to Object: Object to processing of your information for certain purposes
  • Right to Withdraw Consent: Where processing is based on consent, you can withdraw at any time

Self-Service Account Deletion

You can delete your account and associated records at any time directly within the app. On Android, open the Settings tab, scroll to Delete Account, and confirm. This permanently removes your account, study progress, quiz results, preferences, tutor history, and account-linked premium status or purchase linkage. Transaction records that we must retain for legal, tax, fraud-prevention, or accounting purposes may be kept only for the required period, as described above. This action cannot be undone. If you no longer have the app, use our web account-deletion request.

Children's Privacy

Our service is intended for users aged 13 and over, consistent with our Terms of Service. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, please contact us at support@passbritain.com and we will delete it promptly.

Supervisory Authority

You have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's supervisory authority for privacy and personal information. You can contact the ICO at ico.org.uk/make-a-complaint or by phone on 0303 123 1113.

Contact Us

If you have questions about this Privacy Policy, please contact us at: support@passbritain.com