Privacy policy

This policy explains what personal data lifeinuk.study (operated by Skyie Global Technologies) collects when you use our website and apps, why we collect it, who we share it with, and the rights you have under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who we are

Skyie Global Technologies is the data controller for the personal data we hold about you. You can contact us at [email protected] for any privacy-related question or to exercise your rights.

2. Information we collect

We collect only what we need to run the service:

• Account information. Your email address and (optionally) the name you give us when you request your first sign-in link. We do not collect or store passwords because we use passwordless magic-link authentication.
• Study activity. Question attempts, exam scores, time spent on each chapter, and your spaced-repetition progress — all linked to your account so we can show you your stats and pick the right cards next.
• Aria conversations. Messages you send to our AI tutor Aria, plus the responses, are stored against your account so you can resume a conversation. Aria's processing happens at Google via their Generative AI APIs; we send only the message content and a short system prompt — never your name, email, or payment information.
• Payment metadata. If you upgrade to a paid plan, our payment processor Stripe (Stripe Payments UK, Limited) handles your card details directly — we never see them. We retain only the subscription status, plan, and last-four digits returned by Stripe.
• Technical data. IP address (used for rate limiting and abuse detection only), browser/OS user agent, and timestamps of requests.

3. Why we use your data (legal basis)

• To provide the service — fulfilling our contract with you (UK GDPR Art. 6(1)(b)). Includes signing you in, saving your progress, generating Aria responses.
• To run the business — legitimate interests (Art. 6(1)(f)), e.g. preventing fraud, securing the platform, rate-limiting abusive traffic.
• To send you essential service emails — magic-link sign-in emails, payment receipts, and important policy changes. These are not marketing.
• To improve the service — only with your consent (Art. 6(1)(a)), via the analytics cookie category. You can change your mind any time.

4. Who we share your data with

We only share your data with carefully selected processors who help us run the service. They are bound by data-processing agreements that prevent them from using your data for any other purpose.

• Google LLC — Generative AI APIs that power Aria. See Google's privacy policy.
• Stripe Payments UK, Limited — payments and subscription management, where applicable.
• Maielr Technologies (UK) Ltd — transactional email delivery for magic-link sign-ins and receipts.
• Hosting infrastructure — our app servers run on a UK-located VPS. Database backups stay within the United Kingdom.

We do not sell your personal data. We do not share it with advertisers — ads on the site are served from creatives we host ourselves and do not depend on your identity.

5. International transfers

Most of our processing happens in the UK. Where data leaves the UK (notably to Google's Generative AI infrastructure), we rely on the UK International Data Transfer Addendum to the EU Standard Contractual Clauses, which the UK Information Commissioner's Office recognises as an appropriate safeguard.

6. How long we keep your data

• Account data and study progress — for as long as your account exists. If you delete your account, we erase identifying information within 30 days, retaining only aggregate statistics that can no longer be linked to you.
• Aria conversations — kept while your account is active so you can resume them. Deleted alongside your account.
• Payment records — retained for six years after your last transaction to comply with HMRC record-keeping rules.
• Technical logs — 30 days, then deleted.

7. Your rights

Under UK GDPR you have the right to:

• Access — request a copy of the personal data we hold about you.
• Rectification — ask us to correct inaccurate or incomplete information.
• Erasure — ask us to delete your data when we no longer need it (also called "the right to be forgotten").
• Restriction — ask us to stop processing your data while we investigate a concern.
• Portability — receive your data in a structured, machine-readable format and have it transferred to another provider.
• Object — object to processing based on our legitimate interests.
• Withdraw consent — for any processing that's based on consent, withdrawable at any time without affecting processing already done.

To exercise any of these rights, email us at [email protected]. We respond within one calendar month.

8. Children

The Life in the UK test is taken by adults applying for British citizenship or permanent residency, and our service is not intended for children under 16. We do not knowingly collect personal data from anyone under 16. If you believe a child has signed up, contact us and we'll delete the account.

9. Security

We use HTTPS for every connection, encrypted backups, role-based access controls inside the team, and rate limiting against brute-force and abuse. Magic-link tokens are 32 bytes of cryptographic randomness and expire after 15 minutes. We do not store passwords.

10. How to complain

If you're unhappy with how we've handled your data, please contact us first so we can put things right. You also have the right to lodge a complaint with the UK Information Commissioner's Office at ico.org.uk/make-a-complaint or by calling 0303 123 1113.

11. Changes to this policy

If we make material changes, we'll email everyone with an active account at least 14 days before the change takes effect. The "last updated" date at the top of this page reflects the latest revision.