Welcome to the privacy policy of SelfTute Ltd ("SelfTute", "we", "us", or "our").

At SelfTute, we are committed to protecting your privacy and handling your personal data responsibly. This policy explains how we collect, use, store, and share your personal information when you use our services, including our online learning and school management platform available at app.selftute.com. It also outlines your rights and how the law protects you.

SelfTute Ltd is a UK-based education technology company that provides online tools to help students learn, complete assessments, and track progress, and to help teachers and schools monitor and support learning. We offer services to individuals and to schools.

Depending on how you use SelfTute:

• We act as a data controller when we collect information directly from individual users (such as private subscribers).
• We act as a data processor when we handle information shared with us by schools under a formal agreement. When operating as a processor, we only act on the instructions of the relevant school, which is the data controller.

If you have any questions about this policy or how we use your data, please contact us at support@selftute.com.

The personal data we collect depends on how you interact with SelfTute. It may include:

• Identity and contact data, such as your name, email address, and gender (optional)
• Education data, including class enrolments, quiz results, progress tracking, and feedback
• Technical data, such as your IP address, browser type, and device details
• Subscription and billing data for private users, including payment history (note: all payment data is securely processed via Stripe — see Stripe’s Privacy Policy)
• Authentication data for school users, such as Microsoft SSO or data provided via Wonde (Microsoft Privacy Policy, Wonde Privacy Policy)

We may also process aggregated or anonymised data for reporting, analytics, and service improvement. This data cannot be used to identify you.

We collect personal data in the following ways:

• When you register for an account or subscribe to a plan
• When a school sets up access on your behalf through a secure integration
• When you interact with the platform (e.g. complete quizzes, log in, navigate)
• When you contact us or fill in forms
• Through cookies and similar technologies (see our Cookies Policy)

We use your personal data to provide and improve our services, manage your account, and ensure the platform works effectively for all users. We are required under data protection law to explain the legal grounds we rely on when processing your data. These are known as lawful bases under the UK General Data Protection Regulation (UK GDPR).

We only process personal data where we have a valid lawful basis to do so. The ways we use your data and the relevant bases are outlined below:

• To create and manage your user account:
  We use your personal information to set up and manage your SelfTute account. This is necessary so that we can fulfil the services you sign up for.
• To provide access to learning tools and platform features:
  We use your information to deliver quizzes, record progress, and personalise your experience on the platform. This processing is necessary to perform the services you request.
• To track learning progress and support teaching insights:
  We process quiz results, accuracy rates, and time spent on tasks to help users monitor progress and allow teachers to review student engagement. We do this on the basis of our legitimate interest in delivering a high-quality educational service.
• To manage subscriptions and process payments::
  For private subscribers, we process billing information to activate and maintain your subscription. This is necessary to fulfil our agreement with you and to administer your account.
• To provide customer support and communicate service-related updates:
  We may contact you regarding technical issues, platform updates, or policy changes. This is done as part of our legitimate interest in running a reliable and user-focused service.
• To develop and improve the platform:
  We may analyse anonymised usage data to enhance the functionality, performance, and design of SelfTute. This is in our legitimate interest to improve our products and services.
• To send optional marketing communications:
  If you have opted in, we may use your contact details to send updates about new features or offers. You can withdraw your consent at any time using the unsubscribe link or by contacting us.

We do not use your data for profiling or automated decision-making that produces legal or significant effects. If our purposes for using your personal data change, we will update this policy and, where appropriate, notify you.

When SelfTute is used through a school:

• The school is the data controller and responsible for determining how and why personal data is shared.
• SelfTute acts as a data processor, using the information solely to deliver the service as instructed by the school.
• Data may be transferred through secure integrations such as Microsoft SSO or Wonde.
• It is the school’s responsibility to ensure that appropriate privacy notices are in place and that any necessary consents are obtained for pupils under the age of 13.

We do not contact students directly except in response to a support enquiry.

We may send updates or promotional information to users who have actively chosen to receive them. This includes:

• Product announcements or feature updates
• Offers for returning users
• Invitations to give feedback or participate in surveys

You will only receive these communications if you have opted in. You can opt out at any time by using the unsubscribe link or by contacting support@selftute.com.

We never share your personal data with third parties for their own marketing purposes.

We do not sell your data. We only share personal information where necessary to operate the service, including with:

• Stripe, for secure payment processing (Stripe Privacy Policy)
• Microsoft and Wonde, for school login and integration (Microsoft Privacy Policy, Wonde Privacy Policy)
• Hosting, support, and analytics providers that help us run the platform

Any third-party service providers we work with are contractually bound to safeguard your data and act only on our instructions.

In rare cases, we may also share data if required by law or to prevent harm or misuse of the platform.

We aim to keep your data within the UK or EEA wherever possible. Where data is transferred to countries outside these areas, we ensure appropriate safeguards are in place, such as:

• Recognised adequacy decisions, or
• Standard contractual clauses approved for international transfers

We take data protection seriously and apply security measures to protect your personal information. This includes:

• Encryption of data in transit
• Secure storage and restricted access
• Staff training and internal data protection policies

We also review and update our systems regularly to guard against emerging threats. While we take strong precautions, please note that no internet-based system is 100% secure.

We keep your personal data for as long as it is needed to support the purposes outlined in this policy. This may include:

• Maintaining access to your account and its features
• Supporting your learning history and teacher reporting
• Enabling the option to return and continue using SelfTute in the future
• Handling any follow-up enquiries or service-related matters

When data is no longer needed, it is either securely deleted or anonymised so it can no longer be linked to you.

In some cases, we may retain your name and email address after your account has been closed. This helps us manage repeat sign-ups, prevent misuse, or share relevant service updates. You can request removal of your data at any time by contacting support@selftute.com.

You have a number of rights relating to your personal data, including:

• The right to access the personal data we hold about you
• The right to request correction of inaccurate or incomplete data
• The right to request deletion of your data
• The right to object to or restrict certain types of processing
• The right to withdraw consent (where applicable)
• The right to lodge a complaint with the Information Commissioner’s Office (ICO) at www.ico.org.uk

If you wish to exercise any of your rights, please contact support@selftute.com.

We may update this Privacy Policy to reflect changes to our services or relevant regulations. The latest version will always be available on our website. If we make any significant updates, we will notify users via email or platform message.

SelfTute Ltd
Email: support@selftute.com
Company Number: 12600158