Privacy Policy
This explains what we collect, why, and what you can do about it. Most of our users are 16 to 18 years old, so section 7 matters and we have tried to write it so a student can actually read it.
1. Who controls your data
FourtyFive is operated by <
2. What we collect
Your account. Email address, name, country, school, exam session, the subjects you take, your weekly goal and whether you are left or right handed.
Your studying. Every answer you submit, including handwriting stroke data when you write by hand, the marks and feedback you got, how long you took, your own topic self-ratings, saved questions and your feedback on whether marking was fair.
Billing. Handled entirely by Stripe. We see that you have a subscription and its status. We never see your card details.
Technical. Device and browser information, IP address, and analytics events about how you use the app.
3. Why we are allowed to use it
To provide what you signed up for. Running your account, marking your answers, building your mastery profile and taking payment. This is necessary to perform our contract with you.
Our legitimate interests. Keeping the service secure, fixing bugs, and improving how well the marking works.
Your consent. Non-essential cookies, analytics on our website, and marketing email. You can withdraw consent at any time and nothing about the service gets worse if you do.
Legal obligations. Keeping tax and billing records.
4. Who else processes it
These companies process data on our instructions and cannot use it for their own purposes. We do not sell your data to anyone.
| Who | What they do | Where |
|---|---|---|
| Supabase | Our database, sign-in and file storage | EU (eu-west-3) |
| Google (Gemini) | Marks your answers, powers the AI tutor and question generation | US and global |
| Stripe | Subscriptions, checkout and the billing portal | US and global |
| Resend | Sends your sign-in codes and other email | US |
| Amplitude | Product analytics inside the app | EU data zone |
| HubSpot | Our contact records and website analytics | US |
| Slack | Internal alerts when you report a bug or send feedback | US |
| Cloudflare | Hosts and serves the web app | Global edge network |
5. Where your data goes
Our database is in the EU and our product analytics use an EU data zone. Those were deliberate choices.
Some of the companies above are outside the EEA and the UK. Where data leaves, we rely on the European Commission's Standard Contractual Clauses and, for UK data, the UK International Data Transfer Addendum.
6. How long we keep it
Your account and study data for as long as your account is open. If you close it, we delete your personal data within <
7. If you are under 18
Most FourtyFive users are 16 to 18. If you are under 18, a parent or guardian has to agree to our terms and is the one who pays for any subscription.
We do not use children's data to build marketing profiles or to target advertising. Nothing about how you study feeds marketing segmentation.
If you are in the EU and under 16, we need a parent or guardian's consent before we process your data at all.
A parent or guardian can ask us for a copy of their child's data or ask us to delete it. Email us and we will verify the relationship before acting.
8. Your rights
You can ask us to give you a copy of your data, correct it, delete it, export it, limit how we use it, or object to a particular use. You can withdraw consent at any time.
Email contact@fourtyfive.org from the address on your account. We will respond within 30 days.
If you are not happy with how we handled it, you can complain to the UAE Data Office, to the UK Information Commissioner's Office, or to the data protection authority in your EU country.
9. Cookies
Our website uses cookies. Non-essential ones only run after you accept them, and you can change your mind at any time. The detail is in our Cookie Policy.
10. How we protect it
Every table in our database has row-level security, so your rows are only readable by you. All AI calls run on our servers, so the model key never reaches your browser. There is no password on your account, so there is no password to leak.
11. Changes
If we change this policy we will post a new version here with a new date.
Questions about this document
Email contact@fourtyfive.org and we will respond within 30 days.