Static Carnival Technologies Limited, trading as Aplailasain, is the data controller for the personal data described in this Privacy Policy.
2. Contact Details
If you have any questions about privacy or want to exercise your rights, please contact us at graham@staticcarnival.com.
3. The Information We Collect
Account data: such as your email address and account identifiers.
Study and user content: such as selected exam boards, subjects, topics, questions you submit, answers you write, and AI responses returned to you.
Usage data: such as monthly request counts, timestamps, plan entitlements, and similar service-usage records.
Payment and transaction data: limited payment and subscription information supplied through our payment providers, such as payment status, product purchased, and transaction references. We do not store your full card details.
Technical and security data: such as basic device, browser, IP/log, and diagnostic information needed to operate, secure, and improve the service.
Communications: information you send to us when you contact support or request help.
4. How We Use Your Information and Our Lawful Bases
To create and run your account, provide the service, and manage paid access — lawful basis: performance of a contract.
To process payments, maintain records, prevent fraud, and comply with legal obligations — lawful bases: performance of a contract and compliance with legal obligations.
To keep the service secure, detect misuse, troubleshoot issues, and maintain logs — lawful basis: legitimate interests in operating a secure and reliable service.
To improve the service, understand usage, and develop features — lawful basis: legitimate interests, and consent where required by law for non-essential cookies or similar technologies.
To respond to support requests and other communications — lawful bases: performance of a contract, legitimate interests, or compliance with legal obligations, depending on the request.
5. AI Processing
Questions, answers, and related study content you submit may be processed through third-party AI services in order to generate tutoring responses, marking guidance, or study support. Please avoid including unnecessary personal or sensitive information in free-text prompts.
6. Who We Share Information With
We share personal data only where reasonably necessary to operate the service, including with service providers that help us provide hosting, authentication, data storage, payments, communications, analytics, security, and AI functionality. These may include:
Google Firebase / Google Cloud: for authentication, hosting, database, and infrastructure services.
Stripe: for payment processing and transaction administration.
AI providers such as Google Gemini: to generate study responses and related outputs.
We may also disclose information where required by law, to enforce our terms, or to protect our rights, users, or the public.
7. International Transfers
Some of our service providers may process personal data outside the UK. Where this happens, we take steps intended to ensure that personal data receives an appropriate level of protection under UK data protection law, for example through adequacy regulations or appropriate contractual safeguards.
8. Data Retention
We keep personal data only for as long as reasonably necessary for the purposes described above. In broad terms:
Account and study data are generally retained while your account remains active.
Inactive accounts may be deleted after around 12 months of inactivity, following reasonable prior notice where practicable.
Payment, transaction, audit, fraud-prevention, and legal compliance records may be retained for longer where necessary to meet legal, accounting, tax, dispute-resolution, or security requirements.
If we do not set a fixed period for a category of information, we retain it using criteria such as the nature of the service, the need to resolve disputes, legal obligations, security needs, and whether the account remains active.
9. Your Rights
Depending on the circumstances, you may have the right to request access to your personal data, rectification, erasure, restriction of processing, objection to processing, and data portability. Where we rely on consent, you may withdraw that consent at any time, although this will not affect processing already carried out lawfully before withdrawal.
10. Children and Students
Aplailasain is designed for educational use by students, including younger users. We aim to explain our privacy practices in clear language. Parents or guardians may contact us about a child’s information or rights. If you believe a child has provided us with personal data inappropriately, please contact us.
11. Cookies and Similar Technologies
We may use cookies or similar technologies to operate the service and, where applicable, to understand usage and improve performance. Where the law requires consent for non-essential cookies or similar technologies, we will seek that consent separately rather than relying only on this Privacy Policy.
12. Complaints
If you have concerns about how we use your personal data, please contact us first. You also have the right to complain to the Information Commissioner’s Office (ICO).