Privacy
Policy.

Kepler Revise is an online revision platform designed for students. This page explains how we handle personal information when you browse the site, create an account, use revision features, buy a paid plan, or contact us.

You can contact Kepler at privacy@keplerrevise.co.uk about this policy, the use of your personal information, GDPR concerns, or a request to exercise your data-protection rights.

• Account details such as your name, username, email address, sign-in method, and profile image.
• Profile and onboarding details such as year group, qualification level, subjects, plan type, and whether your account setup is complete.
• Platform activity data such as XP, level, dobloons, streaks, revision progress, class activity, quiz and tournament participation, and selected in-product settings.
• For ranked Arena matches, the participants, submitted answers, response times, scores, and AI marking output used to assess each answer.
• Social or collaboration data such as friends, friend requests, quiz invitations, and some class or verification records where relevant.
• Content you submit, including quiz content, question suggestions, update suggestions, Kepler AI prompts, and past-paper workspace inputs.
• Technical and analytics data such as pages viewed, browser/device information, approximate usage patterns, and cookie or browser-storage choices.
• Your age declaration at sign-up, recorded as your confirmation that you are aged 13 or over, together with the date and declaration version.
• Email preference and consent records, including which optional message categories you selected, when you changed or withdrew those choices, and basic delivery status used to prevent duplicate or excessive messages.
• Payment and subscription data where relevant, including plan status and Stripe subscription references. Kepler does not store full card details itself.

• To create and manage your account.
• To personalise dashboards, revision pathways, course suggestions, and progress tracking.
• To run quizzes, tournaments, classes, leaderboards, and other community features.
• To operate AI-supported features such as quiz generation, marking, and past-paper help when you choose to use them.
• To process subscriptions, confirm plan access, and manage cancellations or renewals.
• To monitor performance, investigate bugs, prevent abuse, protect the platform, and improve the product.
• To protect ranked competition integrity, investigate suspected cheating, and quality-check questions and AI-assisted marking.
• To comply with legal obligations and respond to valid requests relating to security, fraud, or law enforcement.
• With your consent, to send the optional study-email categories you select, such as suggestion updates, streak reminders, weekly progress summaries, and occasional inactivity check-ins.

We use personal information only where we have a lawful basis. We generally rely on performance of our contract with you to provide account and revision features, legitimate interests to secure and improve the service where those interests do not override your rights, legal obligation where the law requires processing, and consent for advertising storage and optional study emails. The analytics controls described below use an opt-out preference; the default setting does not record your consent.

Consent is optional and is not a condition of creating or using a Kepler account. You can refuse or withdraw it without losing core platform access. Withdrawing consent does not make earlier processing unlawful.

Optional study emails are off by default. Accounts are for users aged 13 or over, and you can independently choose suggestion updates, streak reminders, weekly progress summaries, and inactivity check-ins. Existing users remain opted out unless they confirm their age eligibility and actively choose one or more categories. Emails remain disabled for any legacy account still recorded as belonging to a user under 13.

These messages use account and study data only to create the update you selected. Kepler limits optional email to no more than one message in 20 hours and three messages in seven days. Inactivity check-ins are limited to one every 14 days, and are not sent at all during the main UK exam season in May and June.

Every optional message includes an unsubscribe link, a link to granular email preferences, and one-click unsubscribe support for compatible email services. You can change or withdraw your choices at any time. Essential account messages, such as security, verification, payment, or service notices, are separate and are not controlled by these optional preferences.

Kepler does not place open-tracking pixels in these study emails. We retain limited delivery and consent records to prevent duplicates, honour your choices, investigate delivery problems, and demonstrate that a valid choice was recorded.

Kepler uses a mix of cookies, local storage, and session storage. Some of this storage is required for core site features, such as keeping the platform working properly, remembering essential product state, and storing your consent choice.

Functional storage is always enabled because parts of the platform rely on it, including tutorials, quiz drafts, progress continuity, and related user-experience features.

Analytics starts on by default on a browser without a saved choice. Google Analytics measures page visits and feature use, and receives account-linked information where available, including a user ID, sign-in status, plan and qualification level. You can stop analytics immediately using Reject optional in the banner, or turn Analytics off and save using Cookie preferences in the footer or account settings. This stops further analytics collection and removes accessible Google Analytics cookies from this browser. Existing saved choices to turn analytics off remain off.

We store your cookie choice in the kepler_cookie_consent cookie for 180 days on this browser, then ask again. Changing your choice resets that period. Essential storage includes the functional storage described above; it is shown together in cookie preferences.

If you use Kepler AI features, the prompts and supporting content you submit may be processed to generate responses, quiz content, marking help, or past-paper support. That can include question text, revision prompts, and limited context needed to answer your request.

In ranked Arena matches, authorised Kepler administrators may review submitted answers, timing information, and structured AI marking output for competition-integrity investigations and marking-quality assurance.

We use this information to provide the feature you asked for, improve reliability, and manage access according to your plan. AI responses can be incorrect, incomplete, or unsuitable for your exact use case, so they should support revision rather than replace your own checking.

Kepler may show advertising on free parts of the platform to keep them free. Where advertising is shown, we work with Google AdSense. Third-party vendors, including Google, use cookies to serve ads based on your prior visits to this website or other websites.

Google's use of advertising cookies (such as the DoubleClick cookie) enables it and its partners to serve ads to you based on your visits to this site and/or other sites on the internet. You can opt out of personalised advertising by visiting Google's Ads Settings at adssettings.google.com, or opt out of some third-party vendors' use of cookies for personalised advertising at www.aboutads.info/choices.

Where required by law, advertising cookies only run with your consent, which you can review or change at any time through the cookie preferences controls in the footer.

If you buy a paid plan, payment processing is handled through Stripe. Stripe manages payment details directly and returns status information we need to activate, update, or cancel your subscription.

Kepler stores subscription-related information such as your current plan and a Stripe subscription reference, but not full card details.

• Google and Firebase, which provide authentication, database, storage, and analytics infrastructure.
• Google AdSense and its advertising partners, where advertising is shown, as described in the Advertising section above.
• Stripe, where needed for subscription billing and payment processing.
• AI providers used for Kepler AI features when you actively use those tools.
• Resend, which processes the recipient email address, limited message content, and delivery metadata to send optional Kepler emails on our behalf. Kepler disables open tracking in these messages.
• Professional advisers, regulators, or authorities where required by law or where reasonably necessary to protect Kepler, its users, or the public.

Some service providers may process information outside the United Kingdom. Where this happens, we use appropriate contractual and organisational safeguards required by applicable data-protection law. For email delivery, Resend's Data Processing Addendum includes international-transfer provisions and the UK Extension to the EU-US Data Privacy Framework.

We keep information for as long as reasonably necessary to operate the platform, provide your account features, maintain security, support subscriptions, resolve disputes, and meet legal or accounting obligations.

Different types of data may be kept for different periods. For example, account records and subscription records may need to be retained longer than short-lived analytics or temporary feature data.

Detailed ranked Arena match audit records are retained for 12 months after the match completes and are then scheduled for automatic deletion.

Email delivery records are kept only for as long as needed to operate frequency limits, troubleshoot delivery, and maintain compliance evidence. Consent and withdrawal records may be retained after you opt out where reasonably necessary to demonstrate and continue honouring your choice.

• You can ask for access to the personal information we hold about you.
• You can ask us to correct inaccurate information.
• You can ask us to delete information where there is no valid reason for us to keep it.
• You can object to certain processing or ask us to restrict it in some situations.
• You can withdraw analytics consent at any time through cookie preferences on your device.
• You can withdraw optional email consent at any time through the email preferences page or the links in any optional email.
• You can complain to the UK Information Commissioner's Office if you believe your data-protection rights have not been respected.

We use technical and organisational measures intended to protect information from unauthorised access, misuse, loss, or disclosure. No system is perfectly secure, so we cannot promise absolute security, but we do aim to keep the platform and its supporting systems responsibly maintained.

For privacy questions, GDPR concerns, correction or deletion requests, or other data-protection matters, use the email below.

If we make important changes to this policy, we will update this page and change the last updated date shown above.