Privacy Policy

LNAT Tutor is operated by the LNAT Tutor team, the controller responsible for the personal data described here. You can reach us about anything in this policy, including any request to exercise your rights, at support@lnattutor.example.

We only collect what the service needs to work. That is:

• Account details: your name, email address, and a securely hashed password. If you sign in with Google, we receive your name, email, and Google account identifier instead of a password.
• Optional profile: your target university, intended exam month, and study stage, if you choose to provide them.
• Practice data: the answers you choose, the written reasoning you give for each question, your stated confidence, how long you take, and the chat messages you exchange with the AI tutor during a session.
• Your learning record: a summary of your strengths, recurring reasoning mistakes, and progress per question type, built from your practice over time.
• Review notes: feedback and next tasks written by a human tutor about your reasoning.
• Basic usage data: the acquisition channel you arrived from (for example a referral link), plus standard server logs and IP addresses kept by our hosting provider for security and reliability.

We do not collect special category data, and we do not ask for payment card details on the site.

• To run the practice loop, grade your answers, and give you tutoring feedback.
• To let a human tutor review your reasoning and set your next task.
• To personalise your sessions based on your past performance and prior tutor guidance.
• To keep the service secure, including rate limiting and abuse prevention.
• To understand which channels bring people to the service, in aggregate.

We process your account and practice data to provide the service you have asked for (performance of a contract). We rely on our legitimate interests for security, abuse prevention, and understanding how the service is found and used, balanced against your rights. Where you sign in with Google, that processing happens on your consent, which you can withdraw at any time by using email sign in instead.

When you practise, the reasoning text you write and the question context are sent to our AI provider (Groq) to generate tutoring feedback. The correct answer key is held on our servers and is never given to the AI tutor while it is coaching you. There is no automated decision that produces a legal or similarly significant effect on you. A human tutor remains the factual safety net and reviews your reasoning.

Real people review your work. When you submit a session for review, an authorised tutor can see that session: the questions, your chosen answers, your written reasoning, and your chat with the AI tutor. Tutors only see sessions assigned to them or in the shared review queue, and they cannot see sessions you have not submitted.

We do not sell your data and we do not share it for advertising. We use a small number of trusted providers that process data on our behalf under contract:

Some of our providers, including our AI provider, may process data outside the UK. Where that happens, we rely on appropriate safeguards such as the UK International Data Transfer Agreement or addendum, or an adequacy decision, so your data keeps an equivalent level of protection.

We keep your account, practice history, and learning record for as long as your account is active so that your progress and tutor feedback remain useful to you. If you delete your account, we delete or anonymise your personal data within a reasonable period, except where we must keep limited records for legal or security reasons.

We use a single sign in cookie to keep you logged in. We do not use third party advertising or cross site tracking cookies.

Passwords are stored only as salted hashes, never in plain text. Access to your submitted work is restricted to authorised reviewers. We apply rate limiting, security headers, and standard protections, though no online service can be guaranteed completely secure.

Under UK data protection law you have the right to:

• access the personal data we hold about you,
• have inaccurate data corrected,
• have your data erased,
• receive a copy of your data in a portable format,
• object to or restrict certain processing,
• withdraw consent where we rely on it.

To exercise any of these, email support@lnattutor.example. If you are unhappy with how we handle your data you can also complain to the UK Information Commissioner's Office (ICO) at ico.org.uk.

This service is intended for adults aged 18 and over who are preparing for university admissions. It is not designed for children, and we ask that under 18s do not create an account without involving a parent or guardian. We will add stronger age protections before offering the service to younger students.

We may update this policy as the service develops. We will change the date at the top when we do, and significant changes will be made clear in the app.

For any privacy question or request, email support@lnattutor.example.