RevisionEngine Privacy Notice

This privacy notice tells you what to expect us to do with your personal information.

Contact details

Email

What information we collect, use, and why

We collect or use the following information for student education and welfare:

  • - Names and contact details for students
  • - Gender
  • - Date of birth
  • - Payment details and financial information including transactions
  • - Biometric data for identification, access or payment purposes
  • - Account access information
  • - Exam results and qualifications
  • - Progress reports
  • - Information relating to compliments and complaints
  • - Lecture and study material uploads, university attended, course name, year of study, performance metrics (e.g., quiz scores, engagement)
  • - Advertising identifiers, IP addresses, device information, and user behaviour data collected through cookies and similar technologies

We collect or use the following personal information for dealing with queries, complaints or claims:

  • - Names and contact details
  • - Payment details
  • - Account login or user information
  • - Purchase or service history
  • - Financial transaction information
  • - Correspondence
  • - Uploaded content where relevant to the complaint, usage logs, technical issue reports

We collect or use the following information for information updates or marketing purposes:

  • - Names and contact details
  • - Address
  • - Marketing preferences
  • - Website and app user journey information
  • - IP addresses
  • - Records of consent, where appropriate
  • - Course interest data, engagement with emails or educational content, cookies

We collect or use the following information to comply with legal requirements:

  • - Financial transaction records, user records required for dispute resolution or fraud prevention

We collect or use the following information to personalise the learning experience, analyse performance data, improve our services, and develop educational tools with the assistance of AI:

  • - Names and contact details for students
  • - Gender
  • - Date of birth
  • - Account access information
  • - Exam results and qualifications
  • - Progress reports
  • - Uploaded lecture and study content, usage patterns, performance analytics, generated content, course and university details, and any feedback submitted

Content sharing

Some content uploaded by users (such as lecture materials or study notes) may be made available to other users on the same course or institution, depending on how the platform is used. Users are responsible for ensuring they have the appropriate rights to upload and share any content, and can choose whether or not to contribute to shared content features.

Lawful bases and data protection rights

Under UK data protection law, we must have a "lawful basis" for collecting and using your personal information. There is a list of possible lawful bases in the UK GDPR and on the ICO's website.

Which lawful basis we rely on may affect your data protection rights which are in brief set out below. You can find out more about your data protection rights and the exemptions which may apply on the ICO's website:

If you make a request, we must respond to you without undue delay and in any event within one month.

To make a data protection rights request, please contact us using the contact details at the top of this privacy notice.

Our lawful bases for the collection and use of your data

Our lawful bases for collecting or using personal information for student education and welfare are:

  • Consent - we have permission from you after we gave you all the relevant information. All of your data protection rights may apply, except the right to object. To be clear, you do have the right to withdraw your consent at any time.

  • Contract - we have to collect or use the information so we can enter into or carry out a contract with you. All of your data protection rights may apply except the right to object.

  • Legal obligation - we have to collect or use your information so we can comply with the law. All of your data protection rights may apply, except the right to erasure, the right to object and the right to data portability.

  • Legitimate interests -- we're collecting or using your information because it benefits you, our organisation or someone else, without causing an undue risk of harm to anyone. All of your data protection rights may apply, except the right to portability. Our legitimate interests are:

    • - We process personal information to support and improve students' learning experience. This includes generating AI-powered study tools such as summaries and quiz questions from uploaded lecture content and study notes. By analysing usage patterns and performance data, we can personalise the platform, identify useful trends, and enhance the overall effectiveness of the service. These activities benefit users by helping them study more efficiently, understand their course content better, and perform more confidently in assessments. We only use the minimum data necessary to achieve these goals, and we put appropriate safeguards in place to protect personal data. The potential risks to individuals are low, as the data is not used in a way that is intrusive or unexpected. Where applicable, users are given control over how their content is shared or reused, and can opt out of optional uses like contributing to training AI models by emailing us.

Our lawful bases for collecting or using personal information for dealing with queries, complaints or claims are:

  • Contract - we have to collect or use the information so we can enter into or carry out a contract with you. All of your data protection rights may apply except the right to object.

  • Legal obligation - we have to collect or use your information so we can comply with the law. All of your data protection rights may apply, except the right to erasure, the right to object and the right to data portability.

  • Legitimate interests -- we're collecting or using your information because it benefits you, our organisation or someone else, without causing an undue risk of harm to anyone. All of your data protection rights may apply, except the right to portability. Our legitimate interests are:

  • We collect and use personal information to help us investigate and resolve queries, complaints, or claims from users. This allows us to provide timely and effective support, ensure fairness, and improve the quality of our service based on user feedback. This benefits users by giving them a clear process to raise concerns and receive assistance, while also helping us maintain the reliability and integrity of our platform. Only relevant information is collected and used, and it is handled with care and confidentiality. The risks to individuals are minimal, and we take steps to ensure the information is only accessed by authorised personnel and used solely for the purpose of handling the issue raised.

Our lawful bases for collecting or using personal information for information updates or marketing purposes are:

  • Consent - we have permission from you after we gave you all the relevant information. All of your data protection rights may apply, except the right to object. To be clear, you do have the right to withdraw your consent at any time.

  • Contract - we have to collect or use the information so we can enter into or carry out a contract with you. All of your data protection rights may apply except the right to object.

  • Legitimate interests -- we're collecting or using your information because it benefits you, our organisation or someone else, without causing an undue risk of harm to anyone. All of your data protection rights may apply, except the right to portability. Our legitimate interests are:

    • We use personal information to keep users informed about important updates to our platform, such as new features, service improvements, or changes to our terms and policies. We may also send occasional marketing communications about new tools or services that we believe may be genuinely useful to our users. This helps users get the most value from RevisionEngine, stay aware of relevant updates, and discover features that support their learning goals. We believe this type of communication is expected and beneficial, especially in an educational setting where staying informed can directly improve the user experience. We minimise risk by only sending communications to users who have shown interest in the service, and we provide clear options to manage preferences or unsubscribe at any time. We do not share marketing data with third parties without consent.

Our lawful bases for collecting or using personal information to comply with legal requirements are:

  • Legal obligation - we have to collect or use your information so we can comply with the law. All of your data protection rights may apply, except the right to erasure, the right to object and the right to data portability.

Our lawful bases for collecting or using personal information to personalise the learning experience, analyse performance data, improve our services, and develop educational tools with the assistance of AI are:

  • Consent - we have permission from you after we gave you all the relevant information. All of your data protection rights may apply, except the right to object. To be clear, you do have the right to withdraw your consent at any time.

  • Contract - we have to collect or use the information so we can enter into or carry out a contract with you. All of your data protection rights may apply except the right to object.

  • Legitimate interests -- we're collecting or using your information because it benefits you, our organisation or someone else, without causing an undue risk of harm to anyone. All of your data protection rights may apply, except the right to portability. Our legitimate interests are:

    • We use personal information to improve and develop our educational tools, including training AI models to generate more accurate and helpful summaries, questions, and learning resources. We also analyse how the platform is used to better understand learning patterns and enhance the effectiveness of the service. This benefits users by making the platform smarter, more relevant, and more personalised over time. For example, it helps ensure that generated content aligns better with students' academic needs and improves their learning outcomes. We only use the minimum data necessary and, where possible, anonymise or aggregate data. Users have the option to opt out of their content being used for these purposes by emailing us. We also take steps to ensure that data is handled securely and that this processing does not negatively impact user privacy or rights.

Where we get personal information from

  • - Directly from you
  • - Providers of marketing lists and other personal information
  • - Suppliers and service providers
  • - Third parties:
    • - Individuals who upload or share content that may contain personal information relating to others, such as academic staff or fellow students.
    • - Service providers involved in the provision of cloud infrastructure, content processing, data storage, analytics, and payment processing, who handle personal information on a strictly controlled, contractual basis.
  • - Content accessed via user-authorised tools that retrieve lecture materials from platforms like Canvas, stored and processed locally before upload.

How long we keep information

We only keep personal information for as long as is necessary for the purposes we collected it for, including to provide our services, meet legal obligations, and resolve disputes. The table below outlines our standard retention periods:

Type of Personal Information Retention Period
User account information (name, email, university, course) Retained for the duration of the account's existence. Deleted within 30 days of a deletion request.
Uploaded content (lectures, notes, summaries, question sets) Retained while the account is active, or until the user requests deletion (subject to content-sharing policies).
Usage data and performance analytics Retained for up to 6 years, anonymised or pseudonymised where possible for long-term analysis and service development.
Payment and subscription records Retained for 6 years from the end of the relevant financial year to comply with tax and accounting laws.
Support queries and complaint records Retained for up to 6 years from the date of final resolution to ensure compliance and quality assurance.
Marketing and communication preferences Retained until the user withdraws consent or objects to processing. A record of opt-outs may be kept indefinitely to prevent future contact.
AI training data Retained for as long as relevant to model development or until the user explicitlywithdraws consent.

Who we share information with

Data processors

Cloud infrastructure and technology service providers -- UK/EEA/US -- all data retained within UK/EEA

This data processor does the following activities for us: Provide the infrastructure to host our platform, store user content, and support content processing, analytics, and AI-driven features, alongside performance improvement and improvement in user experience.

Financial Services - UK/EEA

This data processor does the following activities for us: Process subscription payments and manage related financial records.

Others we share personal information with

  • - Insurance companies, brokers or other intermediaries
  • - Professional advisors
  • - Legal bodies or authorities
  • - Relevant regulatory authorities
  • - External auditors or inspectors
  • - Organisations we're legally obliged to share personal information with
  • - Professional consultants
  • - Other relevant third parties:
    • - Education / Research - We may share anonymised or aggregated data with academic institutions or research collaborators for educational insight, benchmarking, and service development purposes. No personally identifiable information is shared without explicit consent.
    • - We may share limited information with advertising networks to deliver relevant ads to users on the free version of our platform. This may include IP addresses, device types, and browsing behaviour on our site.
    • - We work with third-party ad networks and analytics services to monitor site usage and deliver targeted advertising where appropriate.

Cookies and tracking technologies

We use cookies and similar technologies to deliver core features, understand how our platform is used, and support advertising through third-party services such as Google AdSense. These third parties may use cookies to personalise ads and measure their effectiveness. Users can manage cookie preferences or opt out of personalised advertising through their browser settings or Google's Ad Settings. For more information about how Google uses your data, please visit https://policies.google.com/technologies/partner-sites

Automated processes

We may use automated processes to support the delivery, improvement, and security of our services. This may include monitoring platform activity, assessing uploaded content, personalising user experience, or detecting potential misuse.

These processes may involve the use of machine learning or pattern detection systems, and are intended to help maintain quality, ensure fair use, and enhance the overall user experience.

Special category data and content removal

We do not knowingly collect or process special category data (such as health information, political opinions, or biometric data used for identification). Our platform is not intended for the sharing of sensitive personal information.

Users are responsible for ensuring that any uploaded content does not contain confidential, sensitive, or inappropriate material. If we become aware that such content has been uploaded, we may take steps to review and remove it in accordance with our content moderation policy.

If you believe any content on the platform contains sensitive personal or confidential information, please contact us at , and we will take appropriate action.

How to complain

If you have any concerns about our use of your personal data, you can make a complaint to us using the contact details at the top of this privacy notice.

If you remain unhappy with how we've used your data after raising a complaint with us, you can also complain to the ICO.

The ICO's address:

Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF

Helpline number: 0303 123 1113

Website: https://www.ico.org.uk/make-a-complaint

Last updated

17th May 2025