Privacy Policy

The short version

We collect what we need to run a reading membership and nothing else. We don't sell your data. Your notes are private, and we don't use them to train AI models.

What we collect

• Account details — your name, email address, and a hashed password. We never store your password in readable form.
• Reading activity — which chapters you have opened and completed, so we can show progress and resume where you left off.
• Things you write — notes, bookmarks, workbook answers, checklist progress and any support messages you send us.
• Your photo — only if you choose to upload one. We resize it and save it as a new image, which also strips out anything else the original file was carrying, such as camera and location data.
• A review — only if you choose to leave one. It includes a star rating and whatever you write.
• Payment details — handled by Stripe. Card numbers never reach our servers; we store only Stripe's customer and subscription identifiers.
• Audit answers — if you take an audit, the answers you gave, the score worked out from them and the date. An audit you take without an account is held against a private link rather than a person, and nobody else can open it.
• Messages you send us — anything you write in Chat to Jatinder or the message box on the site, and the name, email address and phone number you give with it.
• Mailing list details — your name, email address and phone number if you ask us to email you something or join the list, along with the date you agreed and the exact wording you agreed to.
• Technical logs — IP address and browser string when you download a resource, kept to prevent abuse of paid files.

Why we collect it

To give you an account, to remember your place in a course, to save the work you do in workbooks and checklists, to score an audit and show you what to do next, to take payment for a plan, to answer your messages, to send you service email (verification, password resets, receipts), and to keep the service secure. Marketing email is separate and only goes to people who have asked for it, and every one carries a way to stop.

What we do not do with it

We do not sell your data. We do not use anything you write — notes, workbook answers, audit answers, chat messages, support messages — to train AI models, and we do not send it to a third-party AI service. Nothing in an audit is scored by AI: the score is worked out from your answers by a formula written into the audit itself. Your workbook answers are exportable by you, and by nobody else.

Reviews and your photo

Both are optional. You can use everything on the site without either.

A review is not published when you write it. It waits for us to read it, and nothing appears on the site unless we approve it. If we do, we show it as your first name and last initial — "Jatinder P." — together with your photo if you have added one. We never publish your full name, your email address or anything else about your account.

You can change or remove your review at any time from your account page, and removing it takes it off the site. Editing an approved review sends it back for approval, so what is published is always something we have read.

One thing worth knowing: a photo you upload is stored as an ordinary image file on our server with an unguessable web address. We do not link to it anywhere until a review of yours is approved, but anyone who had that address could open it. If that matters to you, do not upload a photo. You can delete it at any time from your account page, and the file is removed from the server, not just hidden.

Who else sees it

• Stripe — payment processing.
• Mailgun — sending transactional email.
• Our hosting provider — storing the database and files.

Each is a processor acting on our instructions. We don't sell or rent your data to anyone.

How long we keep it

Account details and the work you have saved are kept while your account is open. Delete your account and we remove your personal data within 30 days, keeping only what the law requires — principally payment records, which we hold for six years for accounting purposes. Download logs are kept for 12 months to prevent abuse of paid files. Your photo and your review are kept until you remove them or close your account, whichever comes first. Support conversations and chat messages are kept for two years. Your audit results are kept while your account is open, so you can see whether you are improving.

An audit taken without an account is different: it belongs to a private link rather than to a person, so there is nobody to ask about it. If nobody claims it by making an account, we delete it after 90 days.

If you are on the mailing list but have no account, we keep your details until you ask to come off. There is a link in every marketing email, or you can contact us.

Your rights

You can ask for a copy of your data, ask us to correct it, ask us to delete it, or object to how we use it. You can edit your details, remove your photo, withdraw your review, or delete your account from the account page at any time. To make any other request, contact us.

Cookies

We set a session cookie so you stay logged in, and a token to protect forms against cross-site request forgery. Both are strictly necessary for the site to work and are set without asking, because the site cannot function without them.

We also use Google Analytics to see which pages people read, so we can write better ones. Those cookies are not set unless you agree: the first time you visit we ask, and nothing analytics-related runs until you say yes. Choose "No thanks" and no analytics cookie is ever written. Your choice is remembered for a year, and you can change it by clearing this site's cookies in your browser.

Google Analytics tells us things like which pages were viewed, roughly where in the world a visit came from, and whether a visitor is new or returning. It does not tell us who you are, and we do not use it for advertising. Google acts as our processor and may transfer data outside the UK under its standard contractual clauses. You can also opt out of Google Analytics on every site with Google's browser add-on.

We run no advertising cookies.

Changes

If this policy changes we'll update this page and the date at the top.