Privacy Policy · T-SkiLL

The short version

We keep what the app needs to work: your account, your progress and how you answer questions, so it can mark your work and show you more of what you find hard.
There are no ads in T-SkiLL, and nothing to buy. We never sell your data. We do not track you across other apps or websites.
Other students can find you by your username. People who are not your friends see your username, avatar and badges. Friends also see your first name, course and year group and, unless you turn it off, your streak and XP. You are not on a leaderboard unless you opt in.
You can download your data or delete your account in the app, under Settings, then Privacy & data. Deleting hides your account straight away and erases it for good 7 days later.
You need to be 16 or over to use T-SkiLL.
Questions or worries: [email protected]. You can also complain to the ICO, the UK's data protection regulator.

Who we are

T-SkiLL is run by T-SKILL LEARNING LTD, a company registered in England, company number 17499160. Our registered office is 7 Thornaby Gardens, London N18 2AU, England.

T-SKILL LEARNING LTD is the data controller for the T-SkiLL app and this website. That means we decide what is collected and why, and we are answerable for it. We are not required to have a Data Protection Officer; our director, Eliud Awuah, is responsible for data protection. We have no company phone number. The way to reach us about anything on this page is [email protected]. A person reads it.

What we collect and why

UK data protection law says we need a lawful reason (a lawful basis) for each use of your data. The table gives ours. You give us nearly all of this yourself, by signing up and using the app. The only things that come from elsewhere are your name and email address (and, for Google, your Google account ID) if you sign in with Google or Apple.

Where the table says contract, we mean the agreement you make with us when you accept the Terms. If you are 16 or 17 and that agreement were ever found not to bind you, we would rely instead on our legitimate interest in giving you the service you asked for. Legitimate interest means a reason that is fair and that you would expect, which we have checked does not outweigh your own interests.

You have to give us your email address, first and last name, username, school, course and year group to have an account, because the app is built around them. Your surname is never shown to other students; we ask for it so we can be sure it is really you if you ever lose access to your email address. The rest is created as you use the app, and the social features are optional.

What	Why	Lawful basis	How long we keep it
Your account. Email address, first and last name, username, the school or college you pick or type in, your course and year group, the avatar you pick, and that you confirmed you are 16 or over and agreed to the Terms (with the date and version).	To make your account and run the app you signed up for.	Contract (our agreement with you).	While your account exists. See Deleting your account.
How you sign in. There is no T-SkiLL password. You sign in with a six-digit code we email you, or with Google, or with Apple. We record which one. From Google or Apple we receive your email address and name. For Apple we also keep a token that lets us tell Apple you have left when you delete your account.	To let you in, and to keep your account yours.	Contract.	While your account exists. Sign-in codes work for 10 minutes and are cleared within a day. A sign-up whose code was never entered is removed within a couple of hours.
Your progress. Lessons started and finished, scores, XP, level, streaks, daily goals, the days you study, topic test and exam practice results, flashcards and questions due for revision, glossary terms you save, achievements and the counts behind them, your daily question.	To show you your progress and bring back what you need to revise. We cannot do that without storing it.	Contract.	While your account exists.
How you answer, not just whether you were right. For every question: your answer, whether it was right and the marks it earned, when it appeared and when you answered, how long you took, whether you opened a hint, how many tries you had, whether you skipped it and how confident you said you were. For each lesson, how long each slide was on screen. With these we record the app version, whether you are on iPhone or Android, and whether you were offline.	To mark your work and choose what to show you next. Across all students it tells us which questions are confusing or wrongly marked, so we can fix them. That analysis is about the lessons, not about you. We also use it to spot automated cheating.	Contract for marking and revision. Legitimate interest for improving lessons and keeping things fair.	2 years, or until you delete your account if that is sooner. Your score for each lesson (not the detail behind it) stays while your account exists.
Which parts of the app you use. A short list of events, such as starting a lesson, opening revision or the leaderboard, or turning notifications on. They are recorded in our own database. No third-party analytics tool is in the app.	To find what is working and what is broken.	Legitimate interest.	2 years. When you delete your account they stay, without your account ID, so they cannot easily be linked back to you.
Your devices and sign-ins. The name and type of each device you sign in on, its operating system, an ID for the device, the network (IP) address you sign in from, the country that address is in (read from the request as it reaches us; we do not send your address to anyone to look it up), and when you last used it. Warnings about sign-ins from somewhere new are logged with the email address and IP address they went to.	To keep your account safe: to spot sign-ins from somewhere new and to email you about them.	Legitimate interest (security).	12 months after you last used the device, and all of it when you delete your account.
Abuse limits. How many sign-in codes have been asked for by each email address, device and network address, and failed sign-in attempts.	To stop anyone guessing codes or flooding an inbox.	Legitimate interest (security).	Counts tied to an email address or device: 12 months, and deleted when you delete your account. Short-term limits by network address: a few hours. Failed sign-in records: 7 days.
Friends, groups and blocks. Your friends and friend requests, cheers you send and receive, groups you join with a code (shown on your profile unless you turn that off), anyone you block, and any report you make about another student. Where meeting up or battles are switched on, who you met or played and when, and your answers in a battle.	To run the social features, which are optional, and to keep people safe.	Contract for the features. Legitimate interest for blocks and reports.	While your account exists.
What you send us. Anything you send through Tell us, a suggestion, a report about a lesson, a request to add your school, or a poll. With a report or suggestion we also record the app version and your phone's model and system version, so we can reproduce the problem.	To answer you and fix things. A person at T-SkiLL reads it.	Legitimate interest, and contract where it is a support request.	While your account exists. When you delete it, a record of each message stays (its type, the lesson it was about, the app version and our reply) so we can still fix things, with your name, device and anything you wrote removed. Some polls are anonymous and keep no link to you.
Waiting for a course. If you tap Tell me when it's ready for a course that is not open yet: your email address, an ID for your phone and its push token.	To tell you when that course opens.	Consent.	Until the course opens and we have told you, or you ask us to remove it.
Notifications. If you allow them: a push token (an address for your phone) and your notification choices.	To send the notifications you chose.	Consent.	While your account exists. Turn them off in Settings or on your phone at any time.
Reminder emails. Whether you have them on, and a log of which reminders we sent you.	To send reminders only to people who want them, and never send the same one twice.	Consent.	While your account exists.
Crash reports. If the app crashes: a report with your account ID (not your name or email), your device model, the system and app version, and what the app was doing. For a small share of sessions we also record how long screens take to load. We do not record your screen.	To find and fix faults.	Legitimate interest.	Held by our provider, Sentry, for a limited period under its own settings (its standard is 90 days).
Staff records. A log of what T-SkiLL staff did in our admin tools, which can include a change to your account and the network address they worked from.	So that staff access to your data can be checked.	Legitimate interest.	2 years.
Why you left. If you choose to tell us when you delete your account: the reasons you picked and anything you wrote, with only the day, your course and roughly how long you had the app. Not your name or account.	To improve the app. It is optional.	Legitimate interest.	2 years.

What the app keeps on your phone. So it opens quickly and works offline, the app saves some things on the phone itself: your sign-in (in the phone's secure storage), a copy of your profile and of pages you have opened, lessons you download (with their answers, so they can be marked offline) and anything you did offline that has not reached us yet. Signing out removes your sign-in and saved profile. Downloaded lessons stay until you remove them under Downloads. Other apps on your phone cannot read any of it.

What we do not collect. Your precise location, your contacts, your photos or your date of birth. We see only the country your connection comes from, to spot unusual sign-ins. We do not ask for special category data such as health or religion; please do not put it in anything you write to us. The camera is used only if you choose to scan a classmate's code, and nothing it sees is stored.

Personalised revision. Choosing what to show you next from how you have answered is the service itself, and it is the only profiling we do, apart from the check for answers that come in too fast (below). We do not use it for anything else.

We make no decisions about you by computer alone that have a legal or similarly serious effect on you. If answers come in faster than a person could read them, the app may not award XP for them and may flag the lesson for a person at T-SkiLL to look at. A flag on its own never blocks you or closes your account. If you think we got it wrong, tell us and a person will look again.

Where we rely on legitimate interests, we have weighed them against your interests and your age, and you can object at any time (see Your rights).

What we never do

There are no ads in T-SkiLL and nothing to buy. We do not take payments, and we do not hold card or bank details.
We never sell your data, and we do not share it with anyone to market to you.
We do not track you across other apps or websites. The app does not read your phone's advertising ID and does not ask permission to track you.
We never use your data to train AI, and no AI makes decisions about you. We use AI tools to help write and check lessons, from our own course material. We also use an AI assistant (Anthropic's Claude) to help build and fix T-SkiLL. While fixing a fault it can sometimes see records from our database; we keep that to what the fix needs, and Anthropic handles it for us as a processor.

Who can see your data

Other students. Any signed-in student can find you by your username. They can find you by your first name only if you turn on Let classmates find me by first name in Settings, then Privacy & data. It is off unless you turn it on.

A classmate who is not your friend sees, by default, your username, avatar and achievements showcase. Your level, course, school and streak are shown only if you switch them on under Settings, then Privacy & data. Your school's name is never shown next to you on a profile or a leaderboard, and no student sees your surname. (Accounts made before 10 October 2026 keep the choices they had.)

Friends also see your first name, year group, course and level and, unless you turn off Share progress with friends, your streak, your XP and your progress.

Leaderboards. You are not on a leaderboard unless you turn it on in Settings, then Privacy & data, then Show me on the leaderboard. You can turn it off again there at any time. A leaderboard lists opted-in students on the same course, with a username (or your first name, if you chose that), avatar, level and XP. A separate table ranks schools by their students' average XP and shows no student names.

Online status. If you turn on Show friends when I'm online, friends who have also turned it on see a green dot on your avatar while you are using the app. It is off unless you turn it on. It never shows a time or a history.

Games with other people. Some features, such as head-to-head battles and meeting a classmate by holding phones together, may not be switched on for everyone. Where they are on, the people you play see your username, avatar and score for that game, and a classmate you meet up with sees your first name, and your level if you show it. Meeting never records where you are.

Other students never see your email address, your answers, your devices or anything you send us. If you block someone, neither of you can find or see the other.

Your school and teachers cannot see your account or your results. There is no teacher or school view in T-SkiLL. If that ever changes, we will update this page and ask you first.

People at T-SkiLL. A small number of named staff can see account details (your name, email, username, course, school, year group) and your progress, so they can answer your messages, fix faults and look into reports. They do not normally read your individual answers, but may when looking into a report, a fault or a request from you. Today that is one person, our director. Our admin tools need a second step to sign in, and changes staff make in them are logged.

Emails and notifications

Emails you always get, because the app cannot work safely without them: sign-in codes, a warning if your account is signed in from somewhere new, and emails about a data request, a deletion or a download you asked for.

Reminder emails. If you stop finishing lessons, we may send a short reminder: at most one each after about 3, 7, 14 and 30 days of not studying, never more than four for one break, and nothing once you have been away for about six weeks. They are off until you turn them on in Settings, then Notifications, then Email me reminders, and you can turn them off there at any time. Each one has a link at the bottom that stops the reminders in one tap. That does not change your account.

Notifications on your phone only appear if you allow them, and you choose which kinds in Settings, then Notifications. Study and streak reminders are scheduled by the app on your phone itself. Now and then we send news from the team to people who allow it; switch it off under News from T-SkiLL. To stop everything, turn notifications off for T-SkiLL in your phone's settings.

Who else handles it

Running the app means other companies handle some of your data for us. They are our processors: each may only use the data to do the job we give it, under a contract that requires it to protect the data.

Supabase stores our database and files and handles signing in. Nearly everything above lives here.
Resend sends our emails, including sign-in codes and reminders.
Expo delivers app updates and, if you allow them, push notifications.
Sentry receives crash reports, so we can find out why the app failed.
Vercel hosts this website, and counts visits to some of its pages (see This website).
Cloudflare provides the DNS for tskill.co.uk, and checks that the person joining the waitlist on this website is a person and not a bot.
GitHub holds encrypted copies of our database, made automatically and kept for no more than 14 days, so we can recover if something goes wrong. The key is kept as a protected secret that only we can use.
Anthropic provides the AI assistant we use to build and fix T-SkiLL (see What we never do).
Apple and Google carry push notifications to phones. If you choose to sign in with Apple or Google, they also receive the fact that you did, under their own privacy policies. They are separate controllers for the account you hold with them.

We share your data with someone else only to do the things above, if the law requires it, or to protect someone from harm. If T-SKILL LEARNING LTD were ever merged with or taken over by another organisation, your data would pass to the new owner only so it can keep running T-SkiLL under this page, and we would tell you first.

Where it is kept

Our database and files are held by Supabase in London (the AWS eu-west-2 region), in the UK. Resend, Expo, Sentry, Vercel, Cloudflare, GitHub and Anthropic are based in the United States, and Supabase's staff can reach data from outside the UK. When your data goes outside the UK, UK law requires a safeguard: the UK-US data bridge for certified US companies, or contract terms approved by the ICO. Each of these providers offers one of them. Ask us and we will tell you which one, and send you a copy.

We keep backups of the database for no more than 14 days. Data you have deleted can remain in a backup until it expires, and is not used for anything. If we ever restore from a backup, we delete again anything that had been deleted.

Age, and if you are under 18

You must be 16 or over to use T-SkiLL. When you sign up you tick a box to say so. We do not ask for a date of birth, and we do not collect one. Because the service is for people of 16 and over, we do not ask for a parent's permission, and you can use every right on this page yourself.

T-SkiLL is built for students aged 16 to 18, with that age in mind. The settings that matter most start private for a new account: you are not on a leaderboard, others cannot find you by your first name, your course and school are hidden, your phone does not look for other phones nearby, and we do not send reminder emails, until you turn them on. Your email address is never shown, and there are no messages, so nobody can write to you. We do not show ads or ask for payment.

Streaks and reminders are there to help you build a habit, not to make you feel bad. Missing a day costs you nothing that matters, and you can turn reminders off whenever you like.

If you are unsure about anything here, ask a parent, carer or teacher, or write to us and we will explain.

If you are under 16. Please do not make an account yet. You are welcome once you turn 16.

Parents and carers. If you want to know what we hold about your child, or want it deleted, email us. To protect your child, we confirm the request with them through the email address on their account before we act.

If you tell us your child is under 16, we act straight away instead: we pause the account and email the address on it. Pausing deletes nothing. If the student replies within 30 days to confirm they are 16 or over, we restore it. If not, we delete the account and everything in it. We never ask for ID or a date of birth.

Deleting your account

In the app (quickest): Settings, then Privacy & data, then Delete account. You type DELETE, and we email a six-digit code to the address on your account, which you enter. The code works for 10 minutes. This stops anyone who picks up your phone from deleting your account.

As soon as you confirm, your account is hidden from other students, friends included, and you are signed out on every phone.
Seven days later it is erased for good. If you change your mind before then, sign back in and tap Keep my account.
You do not have to give a reason. If you choose to, see Why you left above.

By email. You can also write to [email protected]. Because anyone can write an email and claim to be you, we never act on the sender's address alone:

We only act on the email address registered on the account.
We send a one-time confirmation link to that address, even if your request came from somewhere else. It works once and expires after 24 hours.
Nothing happens until someone uses the link. If you did not ask, ignore the email and your account stays as it is.
Once confirmed, the account is erased 14 days later. Signing in or using the app before then cancels it, and we email you to say so.

If you can no longer get into the email address on your account, tell us and we will work out another safe way to check it is you. We will never ask you for a password or a sign-in code.

Accounts nobody uses. If an account is not used for 2 years, we delete it. We email you 30 days before, and using the app before then keeps it.

What goes. Erasing removes your profile, progress, answers, friends, groups, devices, sign-in history, push token and what you sent us, and our records of sign-in warnings and code requests for your account. If you signed in with Apple, we ask Apple to end that link where we can.

What stays, no longer about you. The usage events described above stay until their 2 years are up, with your account ID removed. A record of each message you sent us stays (its type, the lesson it was about, the app version and our reply), with your name, device and anything you wrote removed. Optional reasons for leaving stay for 2 years without your name. Data may also remain in a backup until it expires (see Where it is kept).

A suspended account cannot delete itself to escape a suspension. If yours is suspended, write to us and a person will deal with your request.

Your rights

Under UK data protection law you can:

get a copy of what we hold about you. In the app: Settings, then Privacy & data, then Download my data. We email a link to a zip of spreadsheet files you can open in Excel, Numbers or Google Sheets. The link works for 7 days, and the app lets you ask for one copy a week. It holds most of what is linked to your account; if you want anything else (your friends list, for example), email us;
have it corrected if it is wrong. Most of it you can change yourself in Settings;
have it deleted (see above);
have it sent to you in a form another service can use (the download includes machine-readable files);
object to us using it because of our legitimate interests, including reminder emails, which we will always stop;
ask us to pause using it while we sort out a disagreement about whether it is right or whether we should have it;
withdraw consent where we rely on it, such as notifications, at any time. This does not undo what we did while you had agreed;
ask a person to look again at anything the app decided automatically;
complain to us, and to the ICO (see Contact and complaints).

Email [email protected]. There is no charge. We answer within one month. If a request is very complicated we may need up to two more months, and we will tell you within the first month if so. To protect you, we reply to the email address on your account and may ask you to confirm the request from there before we act. If we need to check it is you, the month starts once you have confirmed.

Keeping it safe

Data travels over encrypted connections. Your sign-in is kept in your phone's secure storage. Access to our database is limited by rules in the database itself, so one student's account cannot read another's, and our admin tools need two-step sign-in. If someone tries to get into our staff tools without permission, we log their network address, the email they tried and their browser, for 180 days. No system is perfectly safe. If a breach put your rights at risk we would tell you and, where the law requires it, the ICO.

This website

No cookies. This website does not set cookies. When you open the waitlist form, Cloudflare's check loads in its own small frame and may keep short-lived data in your browser while it checks you are a person.

Visit counts. On the main pages of this website (the home page and the Mission, Team, Teachers and Letter pages, but not this page, the Terms, Support or the FAQ) we use Vercel's visitor analytics. It counts page views, which site sent you, your type of device and browser, and your country. Vercel says it does not use cookies, does not follow you across other sites and does not build a profile of you.

We also count three things ourselves, so that we can tell how many people who see the front page go on to join the waitlist: that the page was opened, that the sign-up field was opened, and that it was completed. With each one we record the page address, the name of the website that sent you (never the page you came from) and whether you are on a phone, a tablet or a desktop. To join those into one visit we put a random string in your browser's session storage, which the browser throws away when you close the tab. Session storage also holds a few notes that make moving between our pages smooth, such as which page you came from on this site and whether you have seen an intro. If you join the waitlist, a note that you joined (not your email address) is kept in your browser's local storage, only on your device, so the page remembers. The Team page also keeps a note in local storage of when you last saw its animation, so it does not play again straight away. Clearing this site's data removes all of it. None of this is a cookie, and none of it is sent to anyone to track you. If you would rather we did not count your visit, email us, or use your browser's private mode and its tracking protection.

The waitlist. If you join, we hold the email address you typed and when you joined, until we launch or you unsubscribe, and we send you a welcome email with an unsubscribe link. Unsubscribing deletes the address. We also keep a scrambled (hashed) form of your network address for about 2 days, only to stop automated abuse of the form and of the visit counter. It is stored separately and never joined to your email address. Our lawful basis is your consent.

If we messaged you on LinkedIn

Before launch, we and people helping us sent messages on LinkedIn to some T Level students and recent leavers, to tell them T-SkiLL exists. We have stopped doing this.

If we contacted you, we took your name and profile link from your public LinkedIn profile, and noted your school, year group and T Level subject if your profile showed them, plus whether and when we messaged you and whether you replied. If you gave us your phone number, we noted that too, and we may have kept short notes of what was said. We relied on our legitimate interest in telling students about a free revision tool made for them.

We delete these records 12 months after our last contact with you. If you would like them gone sooner, or never want to hear from us, tell us at [email protected] or reply to our message. We will delete everything except the address of your LinkedIn profile, which we keep only so that we never message you again. All the rights above apply to you too.

If we ever contact people this way again, we will update this page before we start.

Changes to this page

When we change this page, we update the date at the top. If a change affects how we use data you have already given us, we tell you in the app or by email before it takes effect. This page sits alongside our Terms.

Contact and complaints

Anything about your data, or this page: [email protected]. Our postal address is the registered office below.

If you think we have handled your data badly, please tell us first. Email the same address. We will let you know we have received your complaint within 30 days, look into it properly, and tell you what we found and what we have done about it.

You also have the right to complain to the Information Commissioner's Office (ICO), the UK's data protection regulator, at ico.org.uk/make-a-complaint or on 0303 123 1113. If we have not put things right, you can take it to them.

T-SKILL LEARNING LTD. Registered in England, company number 17499160. Registered office: 7 Thornaby Gardens, London N18 2AU, England. Email: [email protected]. T-SkiLL is independent and is not affiliated with or endorsed by the Department for Education or any awarding organisation.

Terms Support FAQ

← Back