Privacy policy

This policy explains what personal data Revisio collects, why we collect it, and the rights you have over it. It applies to everyone who uses revisio.uk — students, parents, guardians and teachers.

Who we are

Revisio is operated by Education Software Systems Ltd, a company registered in England and Wales (company number 16407982), with its registered office at 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ. We are the data controller for personal data collected through revisio.uk.

What we collect

• Account details: name, email address, year group, exam board selection.
• Usage data: lessons completed, diagnostic results, mock exam answers and grades.
• Billing data (parents only): handled by Stripe; we do not store card details.
• Technical data: IP address, device type, browser, anonymised analytics via Google Analytics.

How we use it

• To deliver the revision service, including AI-personalised study plans.
• To improve content quality and platform reliability.
• To communicate about the service (account, billing, safeguarding).

Our lawful basis

We process account and usage data to perform our contract with you (delivering the revision service). We rely on our legitimate interests to keep the platform secure and to improve it, and on your consent for optional analytics, which you can withdraw at any time. Where the service is used by a child, a parent, guardian or school stands behind these arrangements.

Children's data

Revisio is intended for students aged 14–16. Where a parent or guardian subscribes on behalf of a child, the account is provisioned by the adult and consent is recorded against that adult's account.

Who we share it with

We do not sell personal data and we do not use it for advertising. We share data only with the service providers (sub-processors) that help us run Revisio. Each is bound by a data-processing agreement and may only use the data to provide their service to us:

• Nhost — hosts our database and handles sign-in, authentication and account emails (such as verification and password-reset messages).
• Netlify — hosts the Revisio website and the secure functions that run the service.
• Anthropic — provides the AI (Claude) that marks answers, generates feedback and lessons, and powers Mylo, our AI study companion. Practice answers, related content and the messages students exchange with Mylo are sent to Anthropic to produce this marking and Mylo's replies. Under Anthropic's commercial terms, this content is not used to train their AI models.
• Stripe — processes subscription payments. Card details are entered directly with Stripe and are never stored by Revisio.
• Proton Mail — hosts our business email, so it processes any correspondence you send to or receive from our revisio.uk addresses.
• Google Analytics — provides aggregated, privacy-respecting usage statistics that help us improve the platform.

We may also disclose data where we are legally required to do so, or to protect the safety of a child or other person.

Parent and Guardian Access to Tutoring Transcripts

Revisio is designed so that a parent or guardian can supervise their child's use of our AI tutor, Mylo. This section explains exactly what that means for your data.

What a linked parent or guardian can see

A parent or guardian whose account is linked to a student's account can view that student's Mylo conversation history: the messages the student sent, Mylo's replies, and when those conversations took place. This is a full record, not a summary — transparency is a deliberate safety feature of Revisio, not a side effect.

Only an adult linked as a parent or guardian has this access. Accounts linked in any other way (for example, a friend on a shared plan) cannot see any conversation content.

How the link is created

The student invites an adult from within their account. When that adult subscribes, we create their account (or match it to an existing one using the same email address) and link it to the student's. We will always tell the student, within the product, that a linked parent or guardian can see their Mylo conversations. We do not create these links silently.

Why we process data this way (lawful basis)

We rely on performance of a contract (UK GDPR Article 6(1)(b)) with the subscribing adult, and our legitimate interest (Article 6(1)(f)) in providing safe, supervised AI tutoring for children — an interest we consider aligned with the child's own best interests, consistent with the ICO's Age Appropriate Design Code. We have designed this feature so the child always knows supervision exists, which the Code requires of parental monitoring tools.

Where the data lives and who processes it

Conversation transcripts are stored on infrastructure in the EU (eu-central-1). Mylo's responses are generated by Anthropic, our AI sub-processor; conversation content is sent to Anthropic solely to produce the tutoring response and is not used to train their models. Our full sub-processor list is in the section above.

How long we keep transcripts

Transcripts are retained while the student's account is active. When an account is deleted, access is disabled immediately and transcripts are permanently removed within 30 days of the deletion request.

Your rights

Students and parents can both exercise the usual rights — access, correction, and erasure — by contacting us at privacy@revisio.uk. A student who believes a link to an adult is wrong (for example, the linked person is not their parent or guardian) can contact us and we will investigate. Where a child is old enough to understand their rights, we will hear from them directly.

If you are unhappy with how we handle personal data, you can complain to the Information Commissioner's Office (ico.org.uk).

International transfers

Some of our providers (including Anthropic) are based outside the UK. Where personal data is transferred outside the UK, we rely on appropriate safeguards recognised under UK data protection law — such as the UK International Data Transfer Agreement or Addendum, or an adequacy decision — so that your data remains protected.

How long we keep it

We keep account and progress data for as long as the account is active. If an account is closed, we delete or anonymise the associated personal data within 12 months, except where we are required to retain certain records (for example, billing records) for longer by law.

Cookies and analytics

We use essential cookies to keep you signed in and to operate the service; these are always on because the service cannot run without them. We also use analytics cookies to understand how the platform is used and to improve it — but only if you accept them. When you first visit, our cookie banner lets you accept all cookies or choose essential only, and you can change your choice at any time using the Cookie preferences link in the footer. We do not use advertising cookies and we do not sell your data to advertisers.

Your rights

You have the right to access, correct, export or delete your personal data, and to object to or restrict certain processing. Where a child uses Revisio, a parent or guardian may exercise these rights on their behalf. To make a request, contact privacy@revisio.uk. You also have the right to complain to the UK Information Commissioner's Office (ICO) at ico.org.uk.

Changes to this policy

We may update this policy from time to time. When we make material changes, we will update the date at the top of this page and, where appropriate, notify you by email.

Contact

Privacy queries: privacy@revisio.uk
General: hello@revisio.uk
Post: Education Software Systems Ltd, 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ