Privacy · T-SkiLL

The short version

We keep what the app needs to work: your account, your progress and how you answer questions, so it can mark your work and show you more of what you find hard.
We never sell your data, there are no adverts, and none of your data is sent to an AI company.
Other students can find you by your username, and see your avatar, level and course. They can only find you by your first name, or see you on leaderboards, if you turn that on in Settings.
You can download everything we hold, or delete your account, in the app under Settings, then Privacy & data.
If you ask by email instead, we only act after you confirm from the email address on your account. Nobody can delete your account just by emailing us and pretending to be you.
Questions or worries: hello@tskill.co.uk. You can also complain to the ICO, the UK's data protection regulator.

Who holds your data

T-SkiLL is run from England by its founder, [TO CONFIRM: founder's full legal name], working as a sole trader under the name T-SkiLL. That person is the data controller: they decide what is collected and why, and they are the one answerable for it. The same controller runs the app, this website and T-SkiLL Studio. A company, T-SkiLL LTD, is being set up and will take over as controller. We will update this page before it does.

Our postal address is [TO CONFIRM: trading address, or a correspondence address if the founder does not want a home address published]. Our ICO registration number is [TO CONFIRM: ICO data protection fee registration number]. We have not appointed a Data Protection Officer [TO CONFIRM]; the founder handles data protection directly.

The quickest way to reach us about anything on this page is hello@tskill.co.uk.

What we collect

When you sign up. Your email address, first and last name, username, school or college, T Level course and year group, the avatar you pick, and that you said you are 16 or over and agreed to our Terms and this policy (with the date and version). If you sign in with Google, or with Apple on an iPhone or iPad, we get your email address and name from them, and we record which way you sign in. There is no T-SkiLL password: you sign in with a code we email you, or through Google or Apple.

As you study. Which lessons you start and finish, your scores, XP, level, streaks and daily goals, the days you study, your topic test and exam practice results, flashcards and questions due for revision, and glossary terms you save.

How you answer, not just whether you were right. For every question: the answer you gave, whether it was right and the marks it earned, when the question appeared and when you answered, how long you took, how long before you first touched the screen, whether you opened a hint and when, how many tries you had, whether you skipped it, and how confident you said you were. For each lesson: how long each slide was on screen and where you stopped if you left early. With these we record the app version, whether you are on iPhone or Android, and whether you were offline.

Which parts of the app you use. A short list of events, such as starting or finishing a lesson, opening revision or the leaderboard, and turning notifications on. These are recorded by us, in our own database. There is no third-party analytics or advertising tool in the app.

If you use the social features. Your friends and friend requests, battles and clashes you play and the answers you give in them, your record against each rival, your Kira balance and how it moved, networking groups you join with a code, anyone you block, and any report you make about another student.

What you type. Your written answers, and anything you send through Report a problem, Send a suggestion or a request to add your school. With a report or suggestion we also record the app version, your phone's model and its system version, so we can reproduce the problem.

Your devices and sign-ins. The name and type of each device you sign in on, its operating system, an ID for the device, the network (IP) address you sign in from, the country that address is in (worked out by our hosting provider's network as the request arrives; we do not send your address to anyone to look it up), and when each device was last used. We use these to keep your account safe: to spot sign-ins from somewhere new and to slow down people guessing codes.

Notifications. If you allow notifications, a push token (an address for your phone) and your notification choices.

When something goes wrong. If the app crashes, a crash report with your account ID (not your name or email), your device model and the app version. For a small share of sessions (about 1 in 10), and for sessions that crash, a replay of what was on screen, set so that text and images are hidden in the recording. For some sessions we also record how long screens take to load.

What the app keeps on your phone. So it opens quickly and works offline, the app saves some things on your phone itself: your sign-in, a copy of your profile and of pages you have opened, lessons you download (with their answers, so they can be marked offline), and anything you did offline that has not reached us yet. Signing out removes your sign-in, your profile and the saved pages. Downloaded lessons stay until you remove them under Downloads, and anything waiting to be sent goes the next time the app is online. Other apps on your phone cannot read any of it.

You have to give us your email address, first and last name, username, school, course and year group to have an account, because the app is built around them. Everything else is created as you use the app, and the social features are optional.

We do not collect your location, your contacts, your photos or any special category data such as health or religion. The camera is only used when you choose to scan a code, to join a clash or meet up with a classmate, and nothing it sees is stored.

Why we hold it

UK data protection law says we need a lawful reason for each use of your data. These are ours.

To run the app you signed up for (performing our agreement with you): your account, lessons, marking, XP, streaks, revision, leaderboards, friends and battles. We cannot show you your progress without storing it.
To teach you better (our legitimate interest, and yours, in the app working well): your answers and timings choose what the app shows you next, such as bringing back questions you got wrong. Looked at across all students, they tell us which questions are confusing or wrongly marked so we can fix them. That analysis is about the lessons, not about you.
To keep things fair and safe (legitimate interest): checking answers for signs of automated cheating, looking into reports, blocking abusive devices, and protecting your account. If answers come in faster than a person could read them, the app may not award XP for them and may flag the lesson for a person at T-SkiLL to look at. A flag on its own never blocks you or closes your account. If you think we got it wrong, tell us and a person will look again.
To fix faults (legitimate interest): crash reports, screen replays and the problems you report.
To learn why people leave (legitimate interest): if, when you delete your account, you choose to tell us why, we keep your answer without your name or account so we can improve the app. It is optional.
To remind you when you have stopped studying (your consent, because you turned them on; or, if your account is older than that setting and they were already on, our legitimate interest): a few short emails, explained in Emails and notifications. You can turn them off at any time.
Notifications (your consent): only if you allow them. You can turn them off in Settings or on your phone.
When the law requires it (legal obligation): for example, keeping a record that we dealt with your data request.

Where we rely on legitimate interests, we have weighed them against your interests and your age, and you can object at any time (see Your rights). We make no decisions about you by computer alone that have a legal or similarly serious effect on you.

What other students can see

Finding you: any student signed in to T-SkiLL can search for you by your username. They can also find you by your first name, but only if you turn on Let classmates find me by first name in Settings, then Privacy & data. It is off unless you turn it on. The results show your username, avatar and level, whether you are on their course, and your first name only if you turned that on.

Friends also see your first name, year group and course and, unless you turn off Share progress with friends, your streak, this week's XP and the module you are working on.

Online status: if you turn on Show friends when I'm online (Settings, then Privacy & data), your friends who have also turned it on see a green dot on your avatar while you are using the app, and you see theirs. It is off unless you turn it on, and while it is off you do not see anyone else's. It works out "online" from the app telling us every minute or so that it is open, it is never shown to anyone who is not your friend, it never shows a time or "last seen", and we do not keep a history of it: each check replaces the one before, and it is cleared when you leave the app or turn the setting off.

On leaderboards and your profile: your username, avatar, level, XP and course. The course and school leaderboards group you with students on your course or at your school, so they show you to those students, and your school's page lists its top ten students to other students there. You are not on the leaderboards unless you turn it on in Settings, then Privacy & data, then Show me on the leaderboard, and you can turn it off again there at any time. (If your account was made before 24 September 2026, it was on by default and stays as it was until you change it.) The same screen controls what your profile shows.

In battles and clashes (when they are switched on): the people you play see your name, avatar and score for that game, and which questions you got right, and you and a rival can see your record against each other. Anyone with a clash's code can join that clash.

Meeting by holding phones together (newer iPhones only): while the app is open, your phone looks for other phones running T-SkiLL very close by, using a short-lived random code. When two phones are held together, each student is shown the other's name and avatar and can choose to add them or start a battle. It is off unless you turn it on under Settings, then Privacy & data, then Nearby. (If you had already used it before 24 September 2026, it stays on until you turn it off.) It never records where you are.

Other students never see your email address, your answers, your marks (apart from a battle you play), your devices or anything you send us. If you block someone, neither of you can find or see the other.

Your school and teachers cannot see your account or your results. If that ever changes, we will update this page and ask you first.

People at T-SkiLL who need to (to answer your messages, fix a fault or look into a report) can see your account. Our admin tools are limited to named T-SkiLL staff.

Emails and notifications

Emails you always get because the app cannot work safely without them: sign-in codes, a warning if your account is signed in from somewhere new, and replies to any request you make about your data.

Reminder emails. If you stop finishing lessons, we may send a short, friendly reminder: at most one each after about 3, 7, 14 and 30 days, never more than four for one break, and nothing at all once you have been away for more than about six weeks. If you come back and later stop again, we wait at least two weeks before the next one. They are off until you turn them on in Settings, then Notifications, then Email me reminders, and you can turn them off again there at any time. (If your account is older than that setting, they were already on, and they stay on until you turn them off.) Every reminder also has a link at the bottom to turn them off in one tap. That only stops the reminders. It does not change your account.

Notifications on your phone only appear if you allow them. Study and streak reminders are set up by the app on your phone itself, and you can turn them off in Settings. Now and then we also send news from the team to everyone who allows notifications. You can turn these off in Settings, then Notifications, then News from T-Skill. Friend requests and battle updates show inside the app. To stop all of them, turn notifications off for T-SkiLL in your phone's settings.

We never send marketing from other companies, and we never share your email address with anyone to market to you.

What we never do

We do not sell your data. We have never done it and there is no version of this business where we do.

There is no advertising in T-SkiLL and no advertising or third-party analytics trackers in it. The usage events described above stay in our own database and are used to improve the app, not to build a profile of you for anyone else.

We do not send your work, your answers or anything else about you to an AI company. We do use AI to help write and check lesson content against the specification, but that happens on our own course material, before you ever see it, and no student data goes into it.

Who else handles it

Running the app means other companies process some of it for us. Each one may only use it to do the job we ask, under a contract that requires them to protect it.

Supabase stores the database and files and handles signing in. Nearly everything above lives here.
Resend sends our emails, including sign-in codes and reminders.
Expo delivers app updates and, if you allow them, push notifications.
Sentry receives crash reports and screen replays, so we can find out why the app failed.
Vercel hosts this website and T-SkiLL Studio, and counts visits to this website (see This website).
Cloudflare checks that the person joining the waitlist on this website is a person and not a bot.
Google and Apple, only if you choose to sign in with them, and Apple and Google also deliver push notifications to phones.

Where it is kept

Our database and files are hosted by Supabase in London, in the UK. Supabase is a US company, so its staff may reach them from outside the UK to support us. Some of the companies above are based in, or use servers in, the United States and elsewhere outside the UK: at least Resend, Expo, Sentry, Vercel, Cloudflare, Google and Apple. When your data goes outside the UK, it is protected by one of the safeguards UK law accepts, such as the UK Extension to the EU US Data Privacy Framework or the ICO's International Data Transfer Agreement. [TO CONFIRM: which safeguard applies to each provider]

How long we keep it

Your account and everything in it: while your account exists. If you delete it in the app, it goes straight away. If you ask by email, it goes 14 days after you confirm (see Deleting your account).
Accounts nobody uses: if your account is not used for 2 years (no signing in and no opening the app), we delete it. We email you 30 days before, and signing in or opening the app before then keeps it. A suspended account is looked at by a person instead.
Sign-ups where the emailed code was never entered: removed within about an hour.
Sign-in codes: work for 10 minutes, cleared within a day.
Failed sign-in records: deleted 7 days after the last failed attempt (a lockout stops escalating after a clear day).
Warnings about sign-ins from somewhere new: our record of each warning includes the email address it went to and the network (IP) address: 12 months, and deleted straight away if your account is deleted.
How many sign-in codes were asked for for each email address and each device, used to stop anyone flooding an inbox: 12 months, and deleted straight away if your account is deleted.
Your devices and sign-in history, including network (IP) addresses: each device is deleted 12 months after it was last used, and all of them when your account is deleted.
How you answered each question: 2 years, or until you delete your account if that is sooner.
Which parts of the app you use (the usage events described above): 2 years.
Records of what T-SkiLL staff did in our admin tools, which can include a change they made to your account and the network address they worked from: 2 years.
Download-your-data files: the link works for 7 days, then the file is deleted.
Why you left, if you told us when deleting your account: 2 years, kept without your name or account.
Confirmation links for email requests: 24 hours, and they work once.
Crash reports and screen replays: our provider, Sentry, keeps these for up to 90 days.
Email delivery records: our provider, Resend, keeps these for 30 days.
Waitlist email addresses: until we launch, or until you use the unsubscribe link, which deletes the address.
Scrambled network addresses used to stop abuse of this website's forms and visit counter: 2 days. They are cleared out the next time anyone uses the form after that.
Kept without your name: when you delete your account, the usage events described above (such as that a lesson was started or finished) stay until their 2 years are up, but no longer point to you, and if you reported a broken lesson, the fact that it was broken stays so we can fix it, with your name, device and anything you wrote stripped out.

If you are under 18

Most of our students are 16 to 18, and the app is built with that in mind. You need to be at least 16 to have an account. We try to keep the settings that matter most private by default: you are not on leaderboards, other students cannot find you by your first name, your phone does not look for other phones nearby, your school is not shown on your profile, and we do not send you reminder emails, unless you turn them on; your email is never shown, and there is no chat with strangers.

You can use every right on this page yourself. You do not need a parent's permission. If you are unsure about anything here, ask a parent, carer or teacher, or write to us and we will explain.

Parents and carers. If you want to know what we hold about your child, or want it deleted, email us. To protect your child, we will confirm the request with them through the email address on their account before we act. That is the same check we use for everyone, and it stops anyone else from pretending to be a parent.

If we learn that someone under 16 has made an account, we will delete it.

Deleting your account

The quickest way is in the app: Settings, then Privacy & data, then Delete account. You need to be signed in. You type DELETE, and we email a six-digit code to the address on your account and ask for it, so nobody who picks up your phone can delete your account. Once you confirm, your account is deleted straight away. You do not have to give a reason. If you choose to, we keep the reasons you picked and anything you wrote, but not your name, account, email or the time you left, only the day, your course and roughly how long you had the app. Please do not put anything that identifies you in what you write. We delete these answers after 2 years.

By email. You can also write to hello@tskill.co.uk. Because anyone can write an email and claim to be you, we never act on the sender's address alone:

We only ever act on the email address registered on the account. We will not delete an account for a different address from the one on file.
We send a one-time confirmation link to that registered address, even if your request came from somewhere else. The link works once and expires after 24 hours.
Nothing happens until someone uses that link. If you did not ask, ignore the email and your account stays as it is.
Once confirmed, the account is deleted 14 days later. Signing in or opening the app before then cancels it, and we email you to say so.

If you can no longer get into the email address on your account, tell us and we will work out another safe way to check it is you. We will not ask for your password (there is not one) or a sign-in code.

Deleting removes your profile, progress, answers, friends, battles and devices, and our records of sign-in warnings and code requests for your account. What is kept, in a form no longer about you, is listed under How long we keep it. A suspended account cannot delete itself to escape a suspension; if yours is suspended, write to us and a person will deal with your request.

Your rights

Under UK data protection law you can:

get a copy of what we hold about you. In the app: Settings, then Privacy & data, then Download my data. We email a link to a file you can open in Excel, Numbers or Google Sheets. The link works for 7 days, so the app lets you ask for one copy a week. If you need one sooner, email us and we will send it, free, within one month;
have it corrected if it is wrong. Most of it you can change yourself in Settings;
have it deleted (see above);
have it sent to you in a form another service can use (the download includes machine-readable files);
object to us using it because of our legitimate interests, including the reminder emails, which we will always stop;
ask us to pause using it while we sort out a disagreement about whether it is right or whether we should have it;
withdraw consent where we rely on it, such as notifications, at any time. This does not undo what we did while you had agreed;
ask a person to look again at anything the app decided automatically;
complain to us, and to the ICO (see Contact and complaints).

Email hello@tskill.co.uk. There is no charge. We answer within one month; if a request is very complicated we may need up to two more months, and we will tell you within the first month if so. To protect you, we reply to the email address on your account and may ask you to confirm the request from there before we act. If we need to check it is you, the month starts once you have confirmed.

This website

No cookies. This website does not set cookies. When you open the waitlist form, Cloudflare's check (see below) loads in its own small frame, and Cloudflare may keep short-lived data in your browser while it checks you are a person. That is the only thing on this site from another company that can store anything in your browser.

Visit counts. On the main pages of this website (not on this page, the Terms or the FAQ) we use Vercel's own visitor analytics. It counts page views, which site sent you, your type of device and browser, and your country. Vercel says it does not use cookies, does not follow you across other sites and does not build a profile of you.

We also count three things ourselves, so that we can tell how many people who see the front page go on to join the waitlist: that the page was opened, that the signup field was opened, and that it was completed. With each one we record the page address, the name of the website that sent you (never the page you came from), and whether you are on a phone, a tablet or a desktop.

What we store in your browser. To join those three events into one visit we put a random string in your browser's session storage, which the browser throws away when you close the tab. A few other small flags help pages move smoothly from one to the next and remember what you have already seen. If you join the waitlist, we keep the email address you typed in your browser's local storage, only on your device, so the page remembers you have already joined; clearing this site's data removes it. None of this is a cookie, and none of it is sent to anyone to track you.

The waitlist. If you join, we hold the email address you typed and when you joined, until we launch or you unsubscribe, and we send you one welcome email with an unsubscribe link. Cloudflare checks the form is being filled in by a person. We also keep a scrambled, one-way record of your network address for 2 days, only to stop automated abuse of the form and of the visit counter. It is stored separately and never joined to your email address.

If we messaged you on LinkedIn

To tell T Level students that T-SkiLL exists, people working with us look for students and recent leavers on LinkedIn and send them a message. If we contacted you, we took your name and profile link from your public LinkedIn profile, and noted your school, year group and T Level subject if your profile showed them, plus whether and when we messaged you and whether you replied. If you gave us a phone number, we hold that too.

We do this because we have a legitimate interest in telling students about a free revision tool made for them. If you would rather we did not, tell us at hello@tskill.co.uk or reply to our message: we will delete what we hold and keep only enough to make sure we never contact you again. We delete these records 12 months after our last contact with you. If you told us no, after that we keep only the address of your LinkedIn profile, so that we never message you again. All the rights above apply to you too.

Changes to this policy

When we change this policy, we update the date at the top. If a change affects how we use data you have already given us, we will tell you in the app or by email before it takes effect.

If T-SkiLL LTD takes over from the founder, or if T-SkiLL is ever merged with or taken over by another organisation, your data would pass to the new owner only so it can keep running T-SkiLL under this policy. We would tell you before that happened.

Contact and complaints

Anything about your data, or this policy: hello@tskill.co.uk.

If you think we have handled your data badly, you have the right to complain to us. Email hello@tskill.co.uk, or tell us any other way you like. We will let you know we have received it within 30 days, look into it properly, and tell you what we found and what we have done about it.

You also have the right to complain to the ICO, the UK's data protection regulator, at ico.org.uk/make-a-complaint or on 0303 123 1113. Until 30 September 2026 it is called the Information Commissioner's Office. From that date it is the Information Commission, and it is still known as the ICO.

This policy sits alongside our Terms.

← Back