Privacy Policy

01Who this notice covers

This notice explains how personal information is handled when you use PastPaperGrind or contact us.

Use the Privacy option on the Contact page for questions or rights requests.

02Account and profile information

When you sign in with Google, we receive account information such as your name, email address and profile image. We also keep the preferences you provide, including selected subjects, qualification, exam boards, exam date where supplied, study settings and character choice.

03Learning activity

We save question attempts, submitted answers (including drawings where used), scores, practice sessions, bookmarks, mistake and review history, revision statistics, streaks, and Paper and character collection progress. This lets you resume practice and review your learning.

04Billing information

We keep subscription status, billing references and renewal or cancellation information to manage paid access. Payments are processed by Stripe, an authorised payment provider. PastPaperGrind does not store full payment card details. Stripe handles payment information under its own privacy notice.

05Messages and service information

If you contact us, we receive the information you choose to send, such as your email address, message and the question reference attached to a report. Please do not send passwords or full card details.

Operating the service may also involve IP addresses, device and browser information, request times and basic diagnostic records used to deliver the service, investigate errors and protect accounts. We do not currently use advertising trackers or a separate visitor analytics service.

06Why we use information

We use information to create and maintain accounts, deliver practice and feedback, save progress, calculate revision statistics, maintain streaks and rewards, manage subscriptions and answer support requests. We also use information where necessary to protect the service, investigate abuse or payment issues, improve reliability, meet legal obligations and communicate important account or service information.

07Personalisation

Your practice history helps show previously answered questions, identify mistakes, highlight weak topics and suggest what to practise next. These recommendations support your own choices; they are not official assessments or decisions about academic eligibility.

08Legal bases where required

Where data protection law requires a legal basis, core account, learning and subscription processing supports providing the service you request. Security, troubleshooting and support may rely on legitimate interests, balanced against your rights, including the interests of younger users. Required financial records may be kept to meet legal obligations. Where processing relies on consent, you may withdraw it without affecting the lawfulness of earlier processing.

09Service providers

Providers process information for sign-in, service delivery and storage, payment processing, security and support communications. Google provides sign-in and services used to store account and learning information; Stripe processes payments and manages billing. Email services process messages when you contact us. Providers receive information needed for their role, subject to applicable contractual and legal protections.

10When information is shared

We do not sell personal information. We share it with service providers for the purposes described above, when required by law, where reasonably necessary to investigate fraud or protect rights and safety, or when you request or consent to sharing. If ownership of the business changes, relevant information may transfer subject to appropriate protections and any notice required by law.

11How long information is kept

Account and learning information is kept for as long as reasonably needed to provide your account and the service. Support messages, security records and payment records may be retained where needed for legal obligations, disputes, fraud prevention or legitimate operational needs. Retention depends on the information and purpose, rather than a single period for everything.

Deleting your account removes account-linked study data and cancels active subscriptions. Payment providers may retain invoices and records required by law; records needed for legal or security reasons may also be retained. Deleting an account does not erase email correspondence from every recipient or information already copied to your device.

12Your choices and rights

Depending on where you live, you may have rights including access, correction, deletion, a copy of your data, portability, restriction of processing, objection to certain processing, and withdrawal of consent. These rights can have legal conditions and exceptions. You may also complain to your local data protection authority.

Use Account → Privacy & account to download your account data or confirm deletion. Contact us using the Privacy category for other requests, including support correspondence not included in the download. We may need to verify your identity before acting on a request. Essential account and payment notices may still be necessary while you use the service.

13Younger students

Younger students should read this notice with a parent or guardian where appropriate. Eligibility and any parental permission or consent depend on applicable law. Where parental consent is legally required, it must be obtained before the relevant processing.

Parents, guardians and students can use the Privacy contact option if they believe information has been provided without required permission. We will review the concern and take appropriate steps. Do not send identity documents unless we ask for information needed to handle a specific request.

14International use

Information may be processed in countries different from where you live. Where legally required, transfers must have an appropriate legal basis and safeguards, such as recognised adequacy arrangements or approved contractual protections. Contact us for information about protections relevant to your data.

15Security

We use reasonable technical and organisational safeguards to protect personal information. No service or transmission can be guaranteed completely secure. Protect your sign-in account and contact support if you suspect unauthorised access.

16Cookies and similar storage

Cookies and browser storage support sign-in, security, preferences and saved practice. The Cookies Policy explains what is used and how to manage it.

17Changes and contact

We will update this notice when our practices change and provide additional notice where required. Use the Privacy category on the Contact page for questions about this notice or your data.