Legal
Privacy Notice
What we collect, why, where it is stored, how long we keep it, and what you can ask us to do.
Last updated 28 September 2026
This notice explains what personal data Revision Ninja collects, why we collect it, who can see it and what you can ask us to do about it. It is written for the people who use the service: students, teachers, school administrators and anyone who buys access.
1. Who we are
Revision Ninja is run by Revision Ninja Ltd, 43-45 Tavern Street, Ipswich, Suffolk, IP1 3AG. For anything about your data, email hello@revisionninja.com.
2. Who is in charge of a student's data
When a school buys a licence and its students use Revision Ninja, the school is the data controller: it decides which students have accounts, which classes they are in, and which staff can see their work. We are the data processor and we act on the school’s instructions.
When someone buys access for themselves — an individual learner, or a parent buying for their child — we are the controller of that account.
Where your school is the controller, ask the school first if you want data corrected or deleted; they can instruct us and we will act on it. You can always email us directly as well.
3. What we collect
We collect only what the service needs to work:
- Account details — your email address, the display name shown in the app, and, if you sign in with Google or Microsoft, the name and profile picture those accounts give us.
- School and class membership — which school you belong to, which class you are in, your year group, and for staff whether you are a teacher or a school administrator.
- Learning and progress — lessons completed, quiz answers and scores, past-paper practice and the marks you give yourself, diagnostic test results, revision scheduling, streaks, XP, levels and badges.
- Live activity while you are working on a course — which page or activity you are on, the last thirty lessons and quizzes you finished with their times and quiz results, your lesson, quiz and XP totals, and when your device last reported in. Your device sends this to us about every forty-five seconds while a course page is open on screen, and again when you finish something or move to another page or activity.
- Payment records — what was bought, when, how much, and the reference from our payment provider. Card numbers never reach our servers; Stripe collects and processes them.
- Basic service data — when you last used the service, and the technical logs our hosting provider keeps to run the site securely.
We do not ask for home addresses, phone numbers or dates of birth, and we do not collect special category data such as health or ethnicity.
4. Why we use it, and our lawful basis
- To run the service you or your school asked for: showing lessons, marking quizzes, saving progress and showing a teacher how their class is doing. Where your school is the controller we act on the school's instructions; where you bought access yourself, our lawful basis is performing our contract with you.
- To take payment and keep proper financial records. Lawful basis: performing our contract with you, and our legal obligation to keep accounting records.
- To keep the service secure and working, and to investigate problems. Lawful basis: our legitimate interests in running a safe, reliable service.
We do not use anyone’s data for advertising or profiling, we do not sell it, and we do not send marketing email.
5. Who can see a student's work inside the app
A student can always see their own work.
Teachers and school administrators at that student’s school can see the student’s progress, quiz scores, past-paper practice and diagnostic test results. The Diagnostic Test is a teaching tool, not a private self-check, and we say so in the app.
Teachers and school administrators at a student’s school can see this live view for their students, so a teacher can see who is working on what during a lesson. It is shown to school staff only: never to other students. It comes from the student’s own device, so it can be out of date or wrong, and a closed laptop shows as away. The Markbook is the record of a student’s work.
When a teacher starts a live session for a class, students in that class see a short banner with its title on their course pages, and a session summary of what each student finished is kept for the school.
Leaderboards show a student’s display name, level and XP to other students signed in with the same school email domain — their class, their year group or their school. Leaderboards only exist for students signed in with a school email address: a student who signs in with a personal address, such as Gmail or Outlook, is not ranked and is shown no leaderboard at all. Teachers and school administrators are never ranked. Leaderboard records hold a display name, a level and a score; they never contain email addresses.
Nobody outside the school sees a student's work, apart from Revision Ninja Ltd's own site administrators, who can see it when they need to support or repair the service.
7. Where your data is stored
Account, school, class and progress data is stored in Google Cloud data centres in Europe: europe-west2 (London) and europe-west4 (Netherlands). Stripe processes payments under its own safeguards, which can involve transfers outside the UK; those transfers rely on the UK's approved transfer mechanisms.
8. How long we keep it
We keep an account and its learning records while the account is in use and while the school's licence is live, so a student's progress is still there next term.
The live view is overwritten each time a student’s device reports in, and school staff’s live views never show anything older than twelve hours (the live board itself looks back fifteen minutes). It is not deleted automatically, and it is not yet removed when an account is deleted or a student leaves a class, so the last report stays on record. Email hello@revisionninja.com if you would like it removed and we will look into it. Session summaries and the record of who cleared a student’s progress are kept with the school’s records.
We delete sooner when we are asked to. A student or member of staff can ask us to delete their account, and a school can ask us to delete its students' records: email hello@revisionninja.com and we will do it, normally within 30 days.
We keep payment records for six years, because tax law requires it.
9. Students and children under 13
Most people using Revision Ninja are secondary-school students. Accounts for students are created through their school, using the school's email addresses; we do not offer accounts directly to children.
We collect the least we can, we do not profile children or use their data for advertising, and nothing a student does is shared outside their school. A parent or carer who wants to see or delete their child's data should ask the school; you can also email us and we will work with the school.
11. How we protect your data
Sign-in is handled by Google Firebase Authentication. Every read and write is checked against database security rules and, for anything our servers do on your behalf, against a second check on the server, so a student can only read their own work and a teacher can only read the work of students at their own school. The site is served over HTTPS, and only Revision Ninja Ltd's site administrators hold administrative access.
12. Your rights
Under UK data protection law you can ask us to give you a copy of your data, correct it, delete it, limit how we use it, give it to you in a portable format, or stop using it. Where we relied on your consent, you can withdraw it.
To do any of that, email hello@revisionninja.com. We will answer within one month. Where your school is the controller of student data, we will pass the request to the school and act on its instruction.
13. Complaints
If you are unhappy with how we have handled your data, please tell us first and we will try to put it right. You can also complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.
14. Changes to this notice
We update this notice when the product changes. The date at the top shows when it last changed, so check back here from time to time; the version published here at the time applies.
15. Contact us
Questions about this notice or about your data: hello@revisionninja.com, or write to Revision Ninja Ltd, 43-45 Tavern Street, Ipswich, Suffolk, IP1 3AG.