Privacy Policy

Who We Are

Kepler Revise is an online revision platform designed for students. This page explains how we handle personal information when you browse the site, create an account, use revision features, buy a paid plan, or contact us.

You can contact Kepler at privacy@keplerrevise.co.uk about this policy, the use of your personal information, GDPR concerns, or a request to exercise your data-protection rights.

What We Collect

• Account details such as your name, username, email address, sign-in method, and profile image.
• Profile and onboarding details such as year group, qualification level, subjects, plan type, and whether your account setup is complete.
• Platform activity data such as XP, level, dobloons, streaks, revision progress, class activity, quiz and tournament participation, and selected in-product settings.
• For ranked Arena matches, the participants, submitted answers, response times, scores, and AI marking output used to assess each answer.
• Social or collaboration data such as friends, friend requests, quiz invitations, and some class or verification records where relevant.
• Content you submit, including quiz content, question suggestions, update suggestions, Kepler AI prompts, and past-paper workspace inputs.
• Technical and analytics data such as pages viewed, browser/device information, approximate usage patterns, and cookie or browser-storage choices.
• Your age declaration at sign-up, recorded as whether you confirmed that you are aged 13 or over or confirmed that you are under 13, together with the date and declaration version.
• Email preference and consent records, including which optional message categories you selected, when you changed or withdrew those choices, and basic delivery status used to prevent duplicate or excessive messages.
• Payment and subscription data where relevant, including plan status and Stripe subscription references. Kepler does not store full card details itself.

How We Use Information

• To create and manage your account.
• To personalise dashboards, revision pathways, course suggestions, and progress tracking.
• To run quizzes, tournaments, classes, leaderboards, and other community features.
• To operate AI-supported features such as quiz generation, marking, and past-paper help when you choose to use them.
• To process subscriptions, confirm plan access, and manage cancellations or renewals.
• To monitor performance, investigate bugs, prevent abuse, protect the platform, and improve the product.
• To protect ranked competition integrity, investigate suspected cheating, and quality-check questions and AI-assisted marking.
• To comply with legal obligations and respond to valid requests relating to security, fraud, or law enforcement.
• With your consent, to send the optional study-email categories you select, such as suggestion updates, streak reminders, weekly progress summaries, and occasional inactivity check-ins.

Our Lawful Bases

We use personal information only where we have a lawful basis. We generally rely on performance of our contract with you to provide account and revision features, legitimate interests to secure and improve the service where those interests do not override your rights, legal obligation where the law requires processing, and consent for optional analytics, advertising storage, and optional study emails.

Consent is optional and is not a condition of creating or using a Kepler account. You can refuse or withdraw it without losing core platform access. Withdrawing consent does not make earlier processing unlawful.

Optional Email Notifications

Optional study emails are off by default and are technically disabled for accounts recorded as belonging to a user under 13. Users who confirm that they are aged 13 or over can independently choose suggestion updates, streak reminders, weekly progress summaries, and inactivity check-ins. Existing users remain opted out unless they confirm their age eligibility and actively choose one or more categories.

These messages use account and study data only to create the update you selected. Kepler limits optional email to no more than one message in 20 hours and three messages in seven days. Inactivity check-ins are limited to one every 14 days.

Every optional message includes an unsubscribe link, a link to granular email preferences, and one-click unsubscribe support for compatible email services. You can change or withdraw your choices at any time. Essential account messages, such as security, verification, payment, or service notices, are separate and are not controlled by these optional preferences.

Kepler does not place open-tracking pixels in these study emails. We retain limited delivery and consent records to prevent duplicates, honour your choices, investigate delivery problems, and demonstrate that a valid choice was recorded.

Cookies And Similar Storage

Kepler uses a mix of cookies, local storage, and session storage. Some of this storage is required for core site features, such as keeping the platform working properly, remembering essential product state, and storing your consent choice.

Functional storage is always enabled because parts of the platform rely on it, including tutorials, quiz drafts, progress continuity, and related user-experience features.

Analytics is optional. Google Analytics only loads if you consent to it. You can review or change your analytics preference at any time through the cookie preferences controls in the footer or account settings.

AI Features

If you use Kepler AI features, the prompts and supporting content you submit may be processed to generate responses, quiz content, marking help, or past-paper support. That can include question text, revision prompts, and limited context needed to answer your request.

In ranked Arena matches, authorised Kepler administrators may review submitted answers, timing information, and structured AI marking output for competition-integrity investigations and marking-quality assurance.

We use this information to provide the feature you asked for, improve reliability, and manage access according to your plan. AI responses can be incorrect, incomplete, or unsuitable for your exact use case, so they should support revision rather than replace your own checking.

Advertising

Kepler may show advertising on free parts of the platform to keep them free. Where advertising is shown, we work with Google AdSense. Third-party vendors, including Google, use cookies to serve ads based on your prior visits to this website or other websites.

Google's use of advertising cookies (such as the DoubleClick cookie) enables it and its partners to serve ads to you based on your visits to this site and/or other sites on the internet. You can opt out of personalised advertising by visiting Google's Ads Settings at adssettings.google.com, or opt out of some third-party vendors' use of cookies for personalised advertising at www.aboutads.info/choices.

Where required by law, advertising cookies only run with your consent, which you can review or change at any time through the cookie preferences controls in the footer.

Payments And Subscriptions

If you buy a paid plan, payment processing is handled through Stripe. Stripe manages payment details directly and returns status information we need to activate, update, or cancel your subscription.

Kepler stores subscription-related information such as your current plan and a Stripe subscription reference, but not full card details.

Who We Share Data With

• Google and Firebase, which provide authentication, database, storage, and analytics infrastructure.
• Google AdSense and its advertising partners, where advertising is shown, as described in the Advertising section above.
• Stripe, where needed for subscription billing and payment processing.
• AI providers used for Kepler AI features when you actively use those tools.
• Resend, which processes the recipient email address, limited message content, and delivery metadata to send optional Kepler emails on our behalf. Kepler disables open tracking in these messages.
• Professional advisers, regulators, or authorities where required by law or where reasonably necessary to protect Kepler, its users, or the public.

International Data Transfers

Some service providers may process information outside the United Kingdom. Where this happens, we use appropriate contractual and organisational safeguards required by applicable data-protection law. For email delivery, Resend's Data Processing Addendum includes international-transfer provisions and the UK Extension to the EU-US Data Privacy Framework.

How Long We Keep Data

We keep information for as long as reasonably necessary to operate the platform, provide your account features, maintain security, support subscriptions, resolve disputes, and meet legal or accounting obligations.

Different types of data may be kept for different periods. For example, account records and subscription records may need to be retained longer than short-lived analytics or temporary feature data.

Detailed ranked Arena match audit records are retained for 12 months after the match completes and are then scheduled for automatic deletion.

Email delivery records are kept only for as long as needed to operate frequency limits, troubleshoot delivery, and maintain compliance evidence. Consent and withdrawal records may be retained after you opt out where reasonably necessary to demonstrate and continue honouring your choice.

Your Rights

• You can ask for access to the personal information we hold about you.
• You can ask us to correct inaccurate information.
• You can ask us to delete information where there is no valid reason for us to keep it.
• You can object to certain processing or ask us to restrict it in some situations.
• You can withdraw analytics consent at any time through cookie preferences on your device.
• You can withdraw optional email consent at any time through the email preferences page or the links in any optional email.
• You can complain to the UK Information Commissioner's Office if you believe your data-protection rights have not been respected.

Security

We use technical and organisational measures intended to protect information from unauthorised access, misuse, loss, or disclosure. No system is perfectly secure, so we cannot promise absolute security, but we do aim to keep the platform and its supporting systems responsibly maintained.