Last updated: September 2026
MasteryMind ("we", "our", "us") is committed to protecting your privacy. This policy explains how we collect, use, and safeguard your personal information when you use our educational platform across our web application and mobile companion apps (iOS and Android).
We collect the following types of information:
To allow seamless sign-in and offline revision, our mobile app stores authentication tokens in your device's encrypted secure storage (iOS Keychain / Android Keystore) and queues offline quiz answers locally until you reconnect. These offline items are linked to your current account and are cleared upon sign-out.
We use your information to:
We take extra care to protect student data. We comply with UK GDPR, the Data Protection Act 2018, and the ICO Age-Appropriate Design Code (Children's Code). We implement age-appropriate privacy protections and limit data collection strictly to what is necessary for educational purposes. We do not serve third-party advertisements or track students across external apps or websites.
We do not sell your personal information or share it with data brokers. We may share data with vetted service providers strictly to operate our platform:
Class and public leaderboards are off until you choose to join one in your profile, and you can leave at any time.
You can add friends only by sharing your invite link or code, or by playing a challenge someone sent you. We never search your contacts and nobody can find you by name. Friends see your display name, avatar, shared streak, weekly XP and challenge scores, and you appear on each other's friends leaderboard. Accepting a friend is your choice to share those with them. Your detailed learning data stays private.
Anyone with a challenge link can play it without an account. Their score is stored against a random code in their browser, not against a name, until they sign up.
You can remove or block a friend at any time, and report anyone whose name, avatar or behaviour worries you. A blocked student can no longer add you or see your challenges and is not told. There is no messaging between students.
We keep your data for as long as your account is active, because your learning progress is what makes the app useful to you.
You can delete your account yourself, without emailing us and without waiting for us to action a request:
If you have uninstalled the app or prefer to do this in a browser, the steps are also written out at masterymind.co.uk/account/delete, along with what to do if you can no longer sign in.
There is one thing to do first. If you pay for a subscription, cancel it before you delete: Subscription → Manage subscription in the web app, or your App Store or Google Play subscription settings if you subscribed on a phone. We check both our own billing record and Stripe before we delete anything, and if either still shows a live subscription we stop and tell you, so you are never left paying for an account that no longer exists.
Once that is done, deletion is immediate and permanent. It removes your profile and email address, your subjects and exam dates, your streak, XP and leaderboard entries, and every quiz answer, mastery score and study session. We cannot restore any of it afterwards.
Two things survive. Anonymised usage counts, so we can still see how many people used a feature — these cannot be linked back to you. And our hosting provider's encrypted service backups, which are taken on a rolling schedule and overwritten in turn; we never restore a deleted account from one, and they exist only so the service can be brought back after a failure. Separately from deletion, technical error logs are removed after 90 days and anonymised usage events after 400 days.
Under UK GDPR, you have the right to:
Access and portability: go to Profile → Account & Security → Download my data. You get a JSON file straight away, with no request to make and no waiting: your profile, your subjects and exam dates, your streak, your XP history, your mastery score for every topic, and your activity log. If you want something that file does not include, ask us using the details in section 13 and we will send it.
Deletion: see section 7 — it is a button in the web app, not a request.
Anything else: correction, objection, or withdrawing consent — contact us using the details in section 13. We respond within 30 days, as UK GDPR requires.
We implement appropriate technical and organisational measures to protect your data, including encryption, secure authentication, and access controls. However, no system is completely secure, and we cannot guarantee absolute security.
We use essential cookies to maintain your session and remember your preferences. We may use analytics cookies to understand how the service is used. You can control cookies through your browser settings.
Our service may contain links to external websites. We are not responsible for the privacy practices of these sites. We encourage you to review their privacy policies.
We may update this privacy policy from time to time. We will notify you of significant changes via email or through the service. The date at the top indicates when the policy was last updated.
If you have questions about this Privacy Policy or wish to exercise your data rights, please contact us at privacy@masterymind.com.
You have the right to lodge a complaint with the Information Commissioner's Office (ICO) if you believe your data protection rights have been violated: ico.org.uk