Privacy Policy

This Privacy Policy describes how Guideline Genius LTD ("we", "us") collects, uses, and shares personal information in connection with our website and services. We are committed to protecting your privacy in compliance with the UK GDPR and the Data Protection Act 2018.

What we collect

• Account information: email address and password (hashed) when you create an account.
• Usage data: pages viewed, articles read, questions attempted, time spent — used to improve the service and provide your personal progress.
• Payment information: handled by Stripe; we do not store card details.
• Cookies and analytics: first-party analytics cookies for product improvement (anonymised).

How we use your data

• To provide the service (account, content, progress tracking)
• To process payments through our payment provider (Stripe)
• To send transactional email (account verification, receipts)
• To send marketing email only with your explicit opt-in consent
• To improve the service through anonymised usage analytics

Your rights

Under UK GDPR you have the right to:

• Access your personal data
• Request correction of inaccurate data
• Request deletion of your data
• Export your data in a portable format
• Withdraw marketing consent at any time
• Lodge a complaint with the Information Commissioner's Office (ICO)

Data sharing

We share data only with the third-party processors required to operate the service: Stripe (payments), Supabase (database hosting in EU/UK), Vercel (web hosting in EU/UK), Resend (transactional email), and PostHog or Plausible (analytics). Each has a data processing agreement in place.

Contact

For any privacy-related enquiry contact us at hello@guidelinegenius.com.

Changes to this policy

We may update this policy from time to time. The "Last updated" date at the top reflects the current version.