Privacy Policy

LNAT Logic is operated by the LNAT Logic team, the controller responsible for the personal data described here. You can reach us about anything in this policy, including any request to exercise your rights, at oliver@lnatlogic.com.

We only collect what the service needs to work. That is:

• Account details: your name, email address, and a securely hashed password. If you sign in with Google, we receive your name, email, and Google account identifier instead of a password.
• Optional profile: your target university, intended exam month, and study stage, if you choose to provide them.
• Practice data: the answers you choose for each question and how long you take over them.
• Your learning record: a summary of your progress per question type, built from your practice over time.
• Section B essays: if you buy an essay review, the essay question, the essay you submit by pasting it or uploading a file, and any notes you send with it. An uploaded file is converted to text on submission and the file itself is not kept.
• Review notes: the annotations and written feedback an Oxford Law student records about an essay you submitted.
• Basic usage data: the acquisition channel you arrived from (for example a referral link), plus standard server logs and IP addresses kept by our hosting provider for security and reliability.

We do not collect special category data, and we do not ask for payment card details on the site.

• To run the practice loop, grade your answers, and show you the worked solution.
• To let an Oxford Law student read and annotate an essay you have submitted for review.
• To take payment for practice papers and essay reviews, and to record what you have bought.
• To personalise your sessions based on your past performance.
• To keep the service secure, including rate limiting and abuse prevention.
• To understand which channels bring people to the service, in aggregate.

We process your account and practice data to provide the service you have asked for (performance of a contract). We rely on our legitimate interests for security, abuse prevention, and understanding how the service is found and used, balanced against your rights. Where you sign in with Google, that processing happens on your consent, which you can withdraw at any time by using email sign in instead.

Your practice answers and your Section B essay are not sent to any artificial intelligence service. Every worked solution on this site is written in advance by an Oxford Law student and stored with the question, and every essay review is written by a person. There is no automated decision that produces a legal or similarly significant effect on you.

Real people review your work. When you submit a Section B essay and payment is confirmed, it enters a review queue that authorised reviewers can see, along with the essay question and any notes you sent with it. A reviewer records annotations and written feedback, and you receive it once they publish. Your Section A practice is not part of that review.

We do not sell your data and we do not share it for advertising. We use a small number of trusted providers that process data on our behalf under contract:

Some of our providers, including our AI provider, may process data outside the UK. Where that happens, we rely on appropriate safeguards such as the UK International Data Transfer Agreement or addendum, or an adequacy decision, so your data keeps an equivalent level of protection.

We keep your account, practice history, and learning record for as long as your account is active so that your progress and tutor feedback remain useful to you. If you delete your account, we delete or anonymise your personal data within a reasonable period, except where we must keep limited records for legal or security reasons.

We use a single sign in cookie to keep you logged in. We do not use third party advertising or cross site tracking cookies.

Passwords are stored only as salted hashes, never in plain text. Access to your submitted work is restricted to authorised reviewers. We apply rate limiting, security headers, and standard protections, though no online service can be guaranteed completely secure.

Under UK data protection law you have the right to:

• access the personal data we hold about you,
• have inaccurate data corrected,
• have your data erased,
• receive a copy of your data in a portable format,
• object to or restrict certain processing,
• withdraw consent where we rely on it.

To exercise any of these, email oliver@lnatlogic.com. If you are unhappy with how we handle your data you can also complain to the UK Information Commissioner's Office (ICO) at ico.org.uk.

This service is intended for adults aged 18 and over who are preparing for university admissions. It is not designed for children, and we ask that under 18s do not create an account without involving a parent or guardian. We will add stronger age protections before offering the service to younger students.

We may update this policy as the service develops. We will change the date at the top when we do, and significant changes will be made clear in the app.

For any privacy question or request, email oliver@lnatlogic.com.