Privacy policy
Last updated [DATE]Who we are
Ebbdeck Ltd (company number 17268664, registered office London) runs Ebb Deck (the website and web app at ebbdeck.com and the Ebb Deck iPhone app) and is the data controller for the personal data described here. Contact us about privacy at hello@ebbdeck.com. [ICO REGISTRATION NUMBER]
What we collect
- Your name, email address, and the exam date and daily goal you set.
- Your answers, confidence ratings, flags, notes and test history, so the question bank can schedule your reviews and show your progress.
- Payment records. Card details are handled by Stripe and never reach our servers.
- If you buy an App Store pass in the iPhone app: details of your App Store transactions that Apple sends us (product, purchase date, refund date if any, and transaction identifiers), so we can unlock your account. Apple handles the payment; we never see your card or Apple ID details.
- Technical data: the devices you are logged in on (browser type, or the device name of your iPhone, and IP address), and security logs used to prevent abuse.
- Messages you send us through the contact form or problem reports.
- If you joined through a referral or ambassador link, who referred you.
Data the iPhone app stores
The app keeps a copy of the question bank, your answers, confidence ratings, review schedule, flagged questions, daily goal, exam date and study streak on your iPhone so it works offline. When you are signed in and online, it sends your answers, confidence ratings, flags and profile to our servers and receives the ones you made on the website, so both stay the same. A sign-in token is stored on the phone so you stay signed in. If you use the app without an account, your progress stays on the phone until you sign up or delete the app. Daily reminders are scheduled on the phone and don't send data to us. [ADD ANY ANALYTICS OR CRASH REPORTING THE APP USES]
Why we use it, and our lawful basis
- To provide the question bank you signed up for (contract): your account, progress, purchases and receipts.
- To keep the service secure (legitimate interests): device limits, rate limits and fraud checks on referrals.
- To send study tips and exam reminders (consent): only if you ticked the box, and you can stop them at any time.
- To meet legal duties (legal obligation): keeping financial records.
Who we share it with
We use a small number of processors: Stripe (website payments), [HOSTING PROVIDER] (hosting), [EMAIL PROVIDER] (email). App Store purchases are made with Apple, which acts under its own privacy policy. We do not sell your data. [INTERNATIONAL TRANSFERS AND SAFEGUARDS]
How long we keep it
[RETENTION PERIOD] after your last pass ends, or until you delete your account in Account settings. Payment records are kept for [6 YEARS] for tax purposes.
Your rights
You can download or delete your data from your account at any time, on the website or in the app. Deleting your account removes your progress from our servers; deleting the app removes the copy on your phone. You also have the right to access, correct, restrict or object to our use of your data. If you are unhappy with how we handle it, you can complain to the Information Commissioner's Office.