Privacy Policy

What we collect

When you use TheoryDrill, we collect:

• Account info: your email address and name (from Google, Apple, or the email you sign up with).
• Usage data: questions answered, accuracy, streaks, XP, achievements, and other progress data needed to make the app work.
• Payment info: processed by Stripe (web) or Apple/Google (mobile apps). We never see or store your card number.
• Referral data: if you arrive via an affiliate link, we record the referral ID to attribute the referral.

How we use it

We use your data to:

• Run the app and track your progress
• Show you on leaderboards (using your chosen username)
• Send you magic link emails when you sign in
• Process payments
• Attribute affiliate referrals
• Monitor performance and improve the product

We do not sell your data. We do not send marketing emails unless you opt in.

Third parties

We use the following services:

• Supabase for authentication and database (hosted in the EU)
• Stripe for payment processing (web)
• Apple App Store & Google Play for in-app purchase verification (mobile apps)
• Vercel for hosting, analytics, and performance monitoring
• Endorsely for affiliate referral tracking and payouts
• Brevo for transactional and notification emails
• DiceBear for generating avatar images from a username seed

Each of these has their own privacy policy. We only share the minimum data needed for each service to work.

Cookies & local storage

We use essential cookies to keep you logged in. We also store preferences (theme, tips seen) and performance data (personal bests) in your browser's local storage. We do not use tracking cookies or third-party advertising cookies.

Your rights

Under UK GDPR, you have the right to access, correct, or delete your personal data. You can delete your account directly from the Profile page in the app. You can also request a copy of your data by emailing hello@theorydrill.co.uk.

Data retention

We keep your data for as long as your account is active. If you delete your account, your personal data is removed immediately. Anonymised usage statistics may be retained.

Children

TheoryDrill is not intended for children under 13. If we discover that a child under 13 has created an account, we will delete it.

Changes

We may update this policy. If we make significant changes, we will let you know through the app or by email.

Contact

Questions? Email hello@theorydrill.co.uk.