Privacy Policy
Last updated: April 2026
SwipeLearn is built by Howler Monkey Ltd, a company registered in England and Wales. We take your privacy seriously — especially because many of our users are under 18. This policy explains what data we collect, why, and what we do with it, in plain language.
The short version
- We only collect what we need to make SwipeLearn work for you.
- We never sell your data. Ever.
- We don't show you ads or track you for advertising.
- You can delete your account and all your data at any time.
1. What we collect
Information you give us
- Account details — your email address and password (or Google/Apple sign-in token). We need this so you can log in.
- Learning preferences — your year group, exam board, subjects, and daily card goal. We need this to show you the right content.
- Exam dates — optional. If you tell us when your exams are, we can help you plan your revision.
Information we collect automatically
- Learning interactions— which cards you've seen, how you responded (got it, explain more, quiz answers), and how long you spent on each card. We use this to personalise your feed and track your progress.
- Streaks and daily activity— how many cards you've done each day. This powers the streak and daily goal features.
- Basic analytics — page views and feature usage (via PostHog, hosted in the EU). We use this to understand how people use the app so we can make it better. We do not track you across other websites.
What we do NOT collect
- Your real name (unless you choose to set a display name)
- Your date of birth or exact age
- Your school name
- Your location or GPS data
- Your contacts or phone data
- Any biometric data
2. How we use your data
| Data | Purpose |
|---|---|
| Log you in, send password resets, important account updates | |
| Year group & exam board | Show you content for the right specification |
| Learning interactions | Personalise your feed, schedule reviews (spaced repetition), track topic mastery |
| Streaks & daily activity | Show your progress and motivate consistent learning |
| Analytics events | Improve the app (e.g. fix bugs, understand which features are useful) |
| Payment info | Process subscriptions (handled by Stripe for web payments and RevenueCat for subscription management — we never see your full card number) |
We never use your data for behavioural advertising, profiling for marketing, or selling to third parties.
3. Who we share your data with
We only share data with services that help SwipeLearn work:
- Supabase (EU region) — our database and authentication provider
- Stripe (UK) — web payment processing; RevenueCat — subscription and entitlement management across all platforms
- PostHog (EU) — privacy-friendly product analytics
- Vercel — web hosting
- Anthropic — AI content generation (we send topic data, never your personal information)
We have data processing agreements with each of these providers. None of them use your data for their own purposes.
4. Where your data is stored
Your data is stored in the European Union (Supabase EU, PostHog EU). Web payment data is processed by Stripe in the UK. Subscription status is managed by RevenueCat. We do not transfer your personal data outside the UK/EU.
5. How long we keep your data
- Account data — kept while your account is active. Deleted within 30 days of account deletion.
- Learning data — kept while your account is active. Deleted with your account.
- Analytics data — anonymised and aggregated. Individual events are deleted after 12 months.
- Payment records — kept for 7 years as required by UK tax law.
6. Your rights
Under UK data protection law (UK GDPR), you have the right to:
- Access — ask us for a copy of all data we hold about you
- Correct — fix any inaccurate data
- Delete — delete your account and all associated data
- Export — download your data in a portable format
- Object — opt out of analytics tracking
You can exercise most of these rights directly in the app (Settings → Export my data / Delete my account). For anything else, email us at privacy@howlermonkey.co.uk.
7. Children's privacy (AADC)
SwipeLearn is designed for students aged 13 and over. We comply with the UK Age Appropriate Design Code (AADC):
- Privacy by default — we collect the minimum data needed. Your profile is private. There are no social features that expose your information.
- No profiling for marketing — we only use your data to personalise your learning experience, never for advertising.
- No nudge techniques— our paywall is clear, dismissible, and never pressures you. Streaks are motivational, not manipulative — we won't send guilt-trip notifications.
- Transparent and honest — this policy is written in plain language because we want you to actually understand it.
If you are under 13, please do not create a SwipeLearn account. If we discover that we have collected data from a child under 13, we will delete it promptly.
8. Security
We use industry-standard security measures: encrypted connections (HTTPS), secure authentication, row-level security on our database, and regular security reviews. Payment information is handled entirely by Stripe (web) or Apple/Google (mobile) and never touches our servers.
9. Changes to this policy
If we make significant changes, we'll notify you in the app before they take effect. Minor wording changes won't be notified but the "last updated" date will change.
10. Contact us
If you have questions about your privacy or this policy:
- Email: privacy@howlermonkey.co.uk
- Post: Howler Monkey Ltd, [registered address]
If you're not happy with how we've handled your data, you can also complain to the Information Commissioner's Office (ICO) at ico.org.uk.