Privacy Policy
What we collect, why, who helps us process it, and how to see or delete it. Last updated: 8 October 2026.
What we collect
Account information (your name, email address, and how you sign in: passkeys, or Google, Microsoft or Apple. We never see your passkey itself); the one-time codes we email to confirm your address; purchase and subscription records (plan, dates, prices and the payment references from Stripe); study activity (course progress, flashcards, notes, questions you add, practice and final-exam attempts, used to run your dashboard and repeat list); the device and browser each of your sign-ins came from, so you can review and end them; and, on a team seat, the progress, questions and chat your team's manager and members can see.
Career, CVs and job applications
CVs you build or upload, and the documents you keep in the Career Hub, are private to you until you use them. If you upload a CV, an AI model run by Cloudflare reads it once to fill in the CV fields, and you review the result before anything is saved. When you apply for a job, the employer's hiring team sees the CV and answers you choose to send. For a written interview, the hiring team sees your answers and may read an AI-drafted summary of the job-related evidence in them; that summary never scores, ranks or recommends anyone, and a person makes every decision. You can ask for adjustments to an interview and report a problem with one. Interview problem reports stay in the employer's records after you delete your account, without your name attached.
Mentors
If you apply to mentor, the details and certification evidence you upload are reviewed by our staff. Your mentor profile shows only what you choose to publish. Questions and sessions you book with a mentor, and reviews you leave, are shared between you and that mentor.
CPE tracker
CPE entries and the evidence files you upload for them are private to you. Our staff see them only if you ask for help with them.
AI Coach and other AI features
Conversations with the AI Coach are stored so you can pick them up again, and are processed by an AI model run by Cloudflare. The same applies to the AI support replies, CV reading and interview summaries described above. We don't use your conversations, CVs or answers to train AI models. Every AI feature says that it is one.
Community and your profile
Posts, answers and resources you share in the Community are visible to other members, and your profile shows each field only to the people you choose (everyone, members, your connections, or only you). Before a post is published, an automated safety check (an AI model run by Cloudflare) looks for abuse and harmful content; anything it flags, and anything it can't check, is held for a moderator instead of being published. Reports you make, and moderators' decisions, are kept as a record.
Teams and single sign-on
If your organisation gives you a seat, its Team Admins see your progress and activity in their programmes. If your organisation uses single sign-on, your identity provider tells us your email address and name when you sign in; we don't send it your study data.
Support chat
If you use "Chat with support" without signing in, we record the name, email and messages you give it so a staff member can follow up and so you can pick the conversation back up. Replies may be drafted by an AI model (run by Cloudflare) before a person reads the conversation — the widget always identifies itself as an AI, never a human. We use this data only to answer you.
Who processes it for us
Cloudflare (hosting, database, file storage, backups, bot checks and the AI features described above); Stripe (payments — your card details go to Stripe directly and never reach us); Resend (sending our emails); Sentry (error reports, which contain technical details of the failure but not your name, email or cookies); Backblaze (an encrypted second copy of our backups); and Google, Microsoft, Apple or your organisation's identity provider only if you sign in with them. We don't sell your data, and we don't share your study activity, exam results, CVs or support conversations beyond the people described above.
Cookies and analytics
Only first-party cookies needed to keep you signed in and to complete sign-up securely. No analytics, no tracking or advertising cookies, and no ad networks.
How long we keep it
Account and study data is kept while your account exists. You can delete your account at any time from Account → Data and privacy: your plan is cancelled, your data is deleted, and the files you uploaded (CVs, CPE evidence, mentor documents, photos) are deleted from storage, retried automatically if storage is briefly unavailable. Payment records are kept without your name or email attached, because tax and accounting law requires it and so a refund or dispute can still be handled. Community posts and resources you shared stay for the people in those conversations, without your name. Encrypted backups are kept for 90 days, so deleted data can remain in them until they expire.
Your rights
You can download a copy of your data at any time from Account → Data and privacy, and delete your account from the same page. For anything else — correcting data, objecting to a use, or a question about how we use it — contact us at the address below.