Privacy Policy

Personal Data Collection

We collect personal data such as names, email addresses, and other contact information when users sign up for our services or otherwise provide it to us. We also collect information related to user activity on our website, including course progress, quiz scores, and other educational data.

Purpose of Data Processing

The personal data we collect is used to provide users with access to our courses, track their progress, and facilitate communication between users and our staff. We also use the data to improve the functionality and user experience of our website and to send users information about our services.

Data Sharing

We use service providers to host and operate Exact Science. These include Vercel (website hosting), Supabase (database and file storage), Notion (internal operations), Resend (email), Slack (staff notifications), and Revolut or Stripe (hosted payment and billing services). Each provider receives only the information needed for its role and is subject to appropriate contractual and access controls.

We use Google Analytics and PostHog to understand site use and journeys. PostHog session inputs are masked, and session replay is disabled on sensitive pages such as contact, trial, careers, onboarding and administration. Google Ads and Meta Pixel are controlled by a separate advertising choice and do not load before that consent is given.

Children's Data

Our services are often provided to children. A parent or guardian should submit enquiries and make service decisions for a child unless the student is old enough to do so lawfully themselves. We use student information for teaching, safeguarding, scheduling and progress support, and we apply additional care to public or marketing use of a child's identity or educational information.

Cookies and Similar Technologies

Essential cookies remember security, region and privacy choices. We also collect first-party aggregate statistics about public page visits to understand and improve the website. This measurement does not use an analytics cookie, build an advertising profile, or send information to Google, Meta or PostHog.

To estimate daily visitors, our server creates separate one-way, daily-rotating hashes from information automatically sent with a web request. We never store the raw IP address or browser identifier in the analytics tables. Short-lived uniqueness markers cannot be combined into an individual journey and are deleted within 48 hours; anonymous aggregate statistics are retained for up to 25 months.

Google Analytics and PostHog remain active as described above. First-party aggregate statistics also run by default. They are skipped when a browser sends a Do Not Track or Global Privacy Control signal, and we still honour an earlier opt-out stored in Cookie settings. Advertising measurement (Google Ads and Meta) is off until you turn it on in Cookie settings in the footer. Changing that choice does not prevent you from using the website.

Lesson recordings and transcripts

Some online lessons and classes are recorded or transcribed. We use those recordings and transcripts for teaching, safeguarding, quality and administration. They are available to Exact Science staff who need them for that work, and they are not published. Not every lesson is recorded. Email hello@exactscience.co if you want to know whether a recording or transcript is held for your child, or to ask us to delete one where we do not have a legal reason to keep it.

Problems on iPhone and iPad

Exact Science uses Problems.cc to facilitate lessons and practice. Problems.cc and the Problems app are operated by EXSCI LTD, the company behind Exact Science. The Problems service also has its own privacy policy on Problems.cc and terms of use.

EXSCI LTD operates the Problems app and problems.cc. You can play daily games without creating an account. Guest puzzle progress is stored on your device. If you sign in, we process your account email, account identifier and any profile name supplied by your sign-in provider, together with synced puzzle progress, Practice answers, results, activity and maths rating. We use these details to operate your account, save progress and personalise Practice.

Optional voice dictation

Voice dictation is optional. Before recording, the app tells you that your audio will be sent to Problems and OpenAI and asks for your permission. iOS also requires microphone access. You can choose to type your answer instead.

When you stop recording, the app securely sends the recording to Problems, which sends it to OpenAI's transcription API to convert speech into text. Our transcription request does not include your name, email address or account identifier. Problems does not save audio recordings in its database or file storage. The temporary recording on your device is removed after transcription or cancellation. OpenAI handles transcription requests under its API data controls.

The transcript stays in an editable answer draft. Dictating does not submit your answer. You can review, change or discard the text before choosing Send.

Answer checking

When you submit a numeric answer, the app asks whether you allow your answer and the maths problem to be sent to OpenAI for checking. Some answers are checked directly by Problems; others need AI checking. The OpenAI request contains the answer text and relevant problem material, rather than your account identity. Submitted answers and their outcomes are stored with your Practice progress.

We have not opted into sharing API content for model training. OpenAI's standard Chat Completions service may retain content for abuse monitoring for up to 30 days; its published transcription endpoint policy currently lists no content retention. These are different processing paths. We use these services for transcription and answer checking.

Service providers and security

We use Supabase for account authentication and data storage, Vercel for hosting and API delivery, and OpenAI for the AI features described above. Google may process authentication when you choose Google sign-in. We retain operational records such as account identifiers, API requests, timestamps, answer outcomes, response status and response duration to understand product use and maintain reliability. IP addresses and authentication/security records may be processed to protect the service and limit abuse.

Your choices and deletion

You can decline voice dictation and type instead. You can decline AI answer checking and keep editing or choose another question. The app asks again before each recording, and answer-checking consent lasts only while you stay on that question.

We keep your account information, progress and submitted answers while your account is active to provide the app's features. You can delete your account through Profile → Settings → Account → Delete account. Deletion removes your sign-in account and the associated profile, Practice answers and progress from the active service. Operational and security records are retained where needed to protect and maintain the service, resolve disputes or meet legal obligations. Provider backups and security records may persist through their retention cycles. You can ask us for the period that applies to a particular record.

Contact hello@problems.cc for access, correction or deletion requests and questions about provider processing. The general policy's user rights and retention provisions also apply to Problems.

Data Retention

We retain personal data for as long as it is necessary to provide services, meet safeguarding and legal obligations, resolve disputes and maintain required financial records. Different records require different periods. You may ask us for the period that applies to a particular record or request deletion where we do not have a legal reason to keep it.

Data Security

We take appropriate technical and organizational measures to protect personal data against unauthorized or unlawful processing and against accidental loss, destruction, or damage.

User Rights

Users have the right to request access to and rectification or erasure of their personal data, as well as the right to restrict or object to its processing. Users also have the right to data portability and the right to lodge a complaint with a supervisory authority.

Contact Information

If you have any questions or concerns about our privacy policy or the processing of your personal data, please contact us at george@exactscience.co.

Changes to Privacy Policy

We reserve the right to update this privacy policy at any time and will notify users of any changes by posting the updated policy on our website.

This privacy policy was last updated on 9 October 2026.