Privacy Policy

Personal Data Collection

We collect personal data such as names, email addresses, and other contact information when users sign up for our services or otherwise provide it to us. We also collect information related to user activity on our website, including course progress, quiz scores, and other educational data.

Purpose of Data Processing

The personal data we collect is used to provide users with access to our courses, track their progress, and facilitate communication between users and our staff. We also use the data to improve the functionality and user experience of our website and to send users information about our services.

Data Sharing

We use service providers to host and operate Exact Science. These include Vercel (website hosting), Supabase (database and file storage), Notion (internal operations), Resend (email), Telegram (staff notifications), and Revolut or Stripe (hosted payment and billing services). Each provider receives only the information needed for its role and is subject to appropriate contractual and access controls.

We use Google Analytics and PostHog to understand site use and journeys. PostHog session inputs are masked, and session replay is disabled on sensitive pages such as contact, trial, careers, onboarding and administration. Google Ads and Meta Pixel are controlled by a separate advertising choice and do not load before that consent is given.

Children's Data

Our services are often provided to children. A parent or guardian should submit enquiries and make service decisions for a child unless the student is old enough to do so lawfully themselves. We use student information for teaching, safeguarding, scheduling and progress support, and we apply additional care to public or marketing use of a child's identity or educational information.

Cookies and Similar Technologies

Essential cookies remember security, region and privacy choices. We also collect first-party aggregate statistics about public page visits to understand and improve the website. This measurement does not use an analytics cookie, build an advertising profile, or send information to Google, Meta or PostHog.

To estimate daily visitors, our server creates separate one-way, daily-rotating hashes from information automatically sent with a web request. We never store the raw IP address or browser identifier in the analytics tables. Short-lived uniqueness markers cannot be combined into an individual journey and are deleted within 48 hours; anonymous aggregate statistics are retained for up to 25 months.

You can object to anonymous first-party statistics or advertising at any time using “Cookie settings” in the footer. Rejecting them does not prevent you from using the website. Google Analytics and PostHog remain active as described above.

Data Retention

We retain personal data for as long as it is necessary to provide services, meet safeguarding and legal obligations, resolve disputes and maintain required financial records. Different records require different periods. You may ask us for the period that applies to a particular record or request deletion where we do not have a legal reason to keep it.

Data Security

We take appropriate technical and organizational measures to protect personal data against unauthorized or unlawful processing and against accidental loss, destruction, or damage.

User Rights

Users have the right to request access to and rectification or erasure of their personal data, as well as the right to restrict or object to its processing. Users also have the right to data portability and the right to lodge a complaint with a supervisory authority.

Contact Information

If you have any questions or concerns about our privacy policy or the processing of your personal data, please contact us at george@exactscience.co.

Changes to Privacy Policy

We reserve the right to update this privacy policy at any time and will notify users of any changes by posting the updated policy on our website.

This privacy policy was last updated on 29 July 2026.