Privacy policy
01What we collect and why
This policy explains what Gradus collects about you, why we collect it, how long we keep it, who we share it with, and the choices you have. Gradus is an exam study product for ACCA and CFA candidates. In this policy, we, us, and Gradus mean the Gradus product team, and you means the person using the product. If you have any question about this policy or your data, contact us at hello@getgradus.com.
Account information. When you create an account we collect your email address and a securely stored password. If you sign in with Google we receive your email and basic profile from Google. You may add a display name and a profile picture, but you do not have to. We use this to create and secure your account, to sign you in, and to contact you about your account.
Your study setup. When you set up Gradus you tell us which exam papers you are studying, and you can add your exam date for each paper. We use this to show you the right content, to organise your study home screen, and, if you choose, to remind you as your exam approaches.
Your study activity. As you study, Gradus records what you do so the product can work and so you can track your own progress. This includes flashcard ratings and review history used to schedule your revision, your answers and marks on practice mock exams including any written answers you type, and which chapters and tools you have used. We use this only to run the features you are using, to save your progress, and to show you your own activity.
Purchase and access records. We keep a record of which papers and levels you have bought, which features you have access to, and how that access was granted, whether by a purchase or by a manual grant. When you buy, our payment provider Stripe handles your card details and sends us a record of the payment, such as the amount, the date, and a payment reference. We do not see or store your full card number.
Beta applications. If you apply for a Gradus beta, we collect the name you choose to give us, your email, country, exam registration status, previous exam attempts, current study resources, and how you found Gradus. We use these answers to review applications, choose the beta group, and contact applicants. We delete the applications after that beta ends.
Technical and usage information. When you use Gradus we and our service providers automatically receive basic technical information such as your device type, browser, and internet protocol address, which is normal for any website and is used to deliver the pages, keep the service secure, understand which study paths are working, and fix problems. Product analytics events use your internal user id, not your email address.
We do not collect special category data such as health, religion, or biometric data. We do not knowingly collect data from anyone under 18, and Gradus is intended for adult exam candidates.
02How we use your information
We use your information to provide and secure the product, to save and show your study progress, to give you the access you are entitled to, to respond to your requests, and to send you account and service messages. We do not sell your personal data, and we do not use your study answers to advertise to you. Where the law requires us to name a legal ground, we rely on performing our agreement with you, our legitimate interest in keeping the service working and secure, your consent where we ask for it, and compliance with the law.
03Who we share it with
We do not sell your personal data. We share it only with the service providers that help us run Gradus, and only so they can provide their service to us. These are Supabase, which hosts our database and manages sign-in and accounts; Render, which hosts and serves the website; Stripe, which processes your payments and your card details when you buy; Resend, which sends account and service emails on our behalf; PostHog, which helps us understand product usage without advertising cookies; Sentry, which helps us diagnose errors; and Google, for Google sign-in if you choose it and Google Cloud Storage, which stores and serves study videos. We may also share information if the law requires it, to protect the rights and safety of Gradus and its users, or as part of a business transfer, in which case we will tell you. Some providers may store data outside your country; where that happens we rely on the safeguards those providers put in place.
04How long we keep it
We keep your account and study data for as long as your account is active. If you ask us to delete your account, we aim to delete your personal data within 30 days, except for the small amount we must keep by law or for security. We keep ordinary technical logs for a short period for security and then delete or anonymise them.
05Your choices and rights
You can ask us to see what we hold, get a copy, correct it, delete it, or limit how we use it, and you can object to certain uses and withdraw any consent you gave. Where the law gives you the right, you can also ask us to send your data to another service. To make a request, see deleting your account and data below, or email us at hello@getgradus.com. We aim to respond within 30 days. If local law gives you the right to complain to a data protection authority, you may do that. We would rather hear from you first so we can put things right.
06Deleting your account and data
You can delete your Gradus account and personal data at any time. The quickest way is in the app: go to your account settings, open the delete account section, type the confirmation word, and confirm. This removes your account and personal data straight away. If you would rather we did it, or you cannot sign in, email us at hello@getgradus.com from the email address on your account, with the subject delete my account, and we will confirm and aim to delete your personal data within 30 days. Either way, we may keep a small amount of information where the law requires it or for security, and we will tell you what and why. If you want a copy of your data before it is deleted, say so and we will send it.
07Cookies and similar technologies
Gradus uses only the cookies needed to keep you signed in and to make the product work. We use cookieless product analytics so we can see whether key study flows are working. We do not use tracking or advertising cookies.
08Children
Gradus is for adult exam candidates and is not intended for children. We do not knowingly collect data from anyone under 18. If you believe a child has given us data, contact us and we will delete it.
09Changes to this policy
We may update this policy as the product changes. When we make a significant change we will update the date at the top and, where appropriate, tell you in the app or by email.
10Contact
For any privacy question or request, email hello@getgradus.com.