Privacy Policy
Last updated: 5 March 2026
Overview
Pass Britain ("we", "our", or "us") is operated by KREYD LABS LTD (Company No. 17152066, registered in England and Wales). We are committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you use our Life in the UK test preparation app and website at passbritain.com.
For the purposes of UK GDPR, the controller is KREYD LABS LTD, contactable at support@passbritain.com.
Information We Collect
- Account Information: Email address for authentication
- Onboarding Data: First language, knowledge level, test date timeline, daily study goals, and motivations. Used to personalise your learning experience.
- Study Data: Your progress, answers, quiz scores, and study statistics
- Preferences: Test date, study time preferences, audio settings, theme preferences
- Payment Information:Processed securely by Stripe (we don't store card details)
- Device Information: Platform (web, iOS, Android), for providing the appropriate app experience
How We Use Your Information
- To provide and personalize your study experience
- To calculate your readiness score and track progress
- To enable the AI tutor to give contextual explanations
- To process payments and manage your subscription
- To send important service updates (you can opt out)
Lawful Basis for Processing
Under UK GDPR, we process personal information on the following legal bases:
- Contract: Processing your account, study, and payment information is necessary to provide the service you signed up for
- Consent: Analytics cookies (Google Analytics) are only placed with your explicit consent via our cookie banner
- Legitimate interests: We may process information to improve our service, prevent fraud, and ensure security, where our interests do not override your rights
- Legal obligation: We retain payment records as required by UK tax law (HMRC)
Security
We use industry-standard security measures to protect your information. All records are stored securely using Convex, and every connection is encrypted via HTTPS.
Third-Party Services
- Convex: Database and backend services (US-based, SOC 2 compliant)
- Stripe: Payment processing (PCI DSS compliant)
- Anthropic (Claude): AI tutor functionality. Your questions are sent to generate helpful explanations.
- Microsoft Edge TTS: Text-to-speech audio generation for audio mode
- RevenueCat: In-app purchase management (iOS and Android apps only)
- Vercel: Web hosting and deployment
- Google Analytics: Website usage analytics. Only activated with your consent via our cookie banner. Collects anonymised usage data such as pages visited and session duration. See Google's Privacy Policy
International Transfers
Some of our third-party service providers are based in the United States, including Convex (database), Stripe (payments), RevenueCat (in-app purchases), Anthropic (AI tutor), Vercel (hosting), and Google (analytics). Your information may be transferred to and processed in the US. These providers maintain appropriate safeguards for cross-border transfers, including compliance with recognised protection frameworks. By using our service, you acknowledge this transfer.
Retention
We keep your records for as long as you have an active account. Study progress, results, and preferences are maintained to provide continuity in your learning experience. If you delete your account, all associated information is permanently removed from our systems within 30 days. Payment records may be retained longer for legal and accounting purposes.
Your Rights (GDPR)
Under UK GDPR, you have the following rights:
- Right of Access: Request a copy of the personal information we hold about you
- Right to Rectification: Request correction of inaccurate or incomplete records
- Right to Erasure: Request deletion of your personal information. You can do this directly in the app via Settings → Delete Account.
- Right to Portability: Request your records in a machine-readable format
- Right to Object: Object to processing of your information for certain purposes
- Right to Withdraw Consent: Where processing is based on consent, you can withdraw at any time
Self-Service Account Deletion
You can delete your account and all associated records at any time directly within the app. Go to Profile → Settings → Danger Zone → Delete Account. This will permanently remove all study progress, quiz results, preferences, and payment records. This action cannot be undone.
Children's Privacy
Our service is intended for users aged 13 and over, consistent with our Terms of Service. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, please contact us at support@passbritain.com and we will delete it promptly.
Supervisory Authority
You have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's supervisory authority for privacy and personal information. You can contact the ICO at ico.org.uk/make-a-complaint or by phone on 0303 123 1113.
Contact Us
If you have questions about this Privacy Policy, please contact us at: support@passbritain.com