Your notes are yours.

Privacy notice · 11 October 2026

Who is responsible for your information

BRAVADO STUDY LTD, company number 17100777, operates Bravado Study and is responsible for how the service uses your information. Our company details are on the support page.

What we use and why

We use your name, email, account and sign-in information to provide access and send account emails. Course details, exam dates, extracted notes, saved AI study material, answers, marks, flashcard reviews and completed tasks provide the study features, progress tracking and daily plan. Course choices and performance shape those suggestions; app marks are study feedback, not official results or decisions about admission or qualifications.

If you choose Google sign-in, Google shares your basic account identity, including your email and profile name, with Supabase to sign you in or create your Bravado account. We do not request access to your Gmail messages, contacts or Google Drive. Google processes the sign-in under its own privacy terms.

Request and usage records help us apply allowances, check trial eligibility, prevent duplicate payments and keep the service reliable. Basic activity events help us understand which features work. Support messages contain your email address and anything you include. Please do not upload sensitive personal information, other people’s private information or material you do not have permission to use.

• Providing the service: for adult users, we rely on our contract with you for account access, requested study features, account emails and related support. For learners aged 16 or 17, we rely on our legitimate interest in providing the private study tools they request.
• Subscriptions: we use payment and subscription information to fulfil our contract with the purchaser. We keep information needed for accounting and handle statutory privacy requests to meet legal obligations.
• Running and improving Bravado: we rely on legitimate interests in protecting accounts, preventing abuse, applying limits, fixing problems and understanding basic feature use. Activity measurement does not include your study content or create advertising profiles. You can contact us to object to processing based on legitimate interests.

Your material and AI requests

Uploaded files are processed to extract text. The app saves extracted text and source details, not the original file. The sample workspace uses example data held in your browser for that visit. Tutor conversations stay in the current page rather than being saved as chat history in the study database; recent messages are sent with a question to understand a follow-up.

OpenAI receives the relevant questions, course context, source excerpts and recent conversation needed to generate an answer. Practice and marking requests can also include your answers and marking criteria. Syllabus discovery sends course and institution details to an AI web-search tool; it does not upload your note files for that search.

OpenAI’s API does not use customer content to train or improve its services by default. We turn off normal saved response storage, but provider abuse-monitoring logs can still contain requests and answers, ordinarily for up to 30 days, with legal and safety exceptions. We do not promise zero retention or UK-only AI processing. See OpenAI’s API data controls.

Our providers and international processing

• Supabase provides sign-in and stores account and study data. Our database project is configured in Ireland.
• Vercel hosts Bravado and handles requests, including uploaded content in transit through the app. Application functions are configured in Dublin. Technical and security logs can be created.
• OpenAI processes the AI requests described above.
• Resend delivers confirmation and password-reset emails. It processes recipient addresses, email content and delivery information. Although our sending region is Ireland, Resend stores email and delivery data in the US. Ordinary email content and logs are retained for 30 days; backups can last seven days.
• Stripe handles trial subscriptions, payment card collection and payments when you choose Pro. Bravado keeps customer, subscription and invoice references, amounts, trial eligibility and subscription status; it does not store payment card numbers. Stripe also acts independently for purposes such as fraud prevention and legal or payment-network obligations.
• Google provides our consumer Gmail inbox for support and privacy emails under its own privacy terms. This is not a Google Workspace business email service.

Some provider processing takes place outside the UK, including in the US. Database and sending-region settings do not keep every support system, log or backup in Ireland. The standard data-processing terms for Supabase, Vercel, OpenAI, Resend and Stripe include contractual safeguards for relevant international transfers, including standard contractual clauses and the UK Addendum. Their linked terms explain the details; contact us for information about safeguards relevant to your data. Gmail correspondence follows Google’s own international-processing terms.

AI allowances and activity records

AI usage records contain a request identifier, model, times, token and search counts when available, and a cost estimate or reservation. They do not contain your questions, notes or AI answers. Signed-in usage is linked to your account. An interrupted request may hold some allowance when actual usage cannot be confirmed. Daily request counts and operational identifiers enforce limits.

Activity events record actions such as starting signup, uploading a source, generating practice or receiving a payment. They do not include study content. If you arrive through one of our campaign links, we can attach its approved campaign and ad labels to your signup and account to measure which campaigns lead to paid subscriptions. These activity records do not contain the full referring URL, Facebook or Google click identifiers, or arbitrary tracking parameters. Signed-in events can be linked to your account, so we do not describe all activity measurement as anonymous.

To diagnose signup problems, we record whether a form was opened, started or submitted, and limited error categories such as a missing field or connection timeout. These diagnostics never include the name, email or password you entered. A random identifier groups events from the same open form; it is kept in page memory and changes when the page reloads.

Keeping and deleting information

Saved account and study data stays until you delete the relevant content or your account. There is no automatic inactive-account deletion schedule. Deleting a source also deletes generated card sets, practice exams and answer guides in that course, so export anything you need first. Some practice results can remain until account deletion.

Settings provides a study-data export and account deletion. Self-service deletion requires any subscription to have ended, not just to have its next renewal cancelled. Email us for an earlier erasure request or if you cannot use those controls; the subscription check does not prevent a privacy request.

Account deletion removes the authentication account and linked study data from the active database. It removes the account link from AI usage, activity and payment records, but does not delete all those records. Payment-provider references and some request-limiting identifiers can remain. Unlinking a record does not necessarily make it anonymous.

Daily cleanup removes activity events older than 30 days, AI usage metadata older than 90 days, daily request counters older than 35 days, and expired short-term request limits and billing locks. Eligible records are normally removed on the next daily run. Cleanup works in batches, so a backlog can take additional runs to clear. This routine does not delete saved study data, provider logs or payment records.

Payment and refund records needed for company accounting are kept for six years after the end of the relevant financial year, or longer where a specific legal requirement applies. Stripe retains its own records for payment, fraud and legal obligations. Deleting a Bravado account does not automatically delete Stripe records or support emails. Support correspondence has no automatic expiry; we use it to handle and follow up your request, with relevant messages also kept where needed for accounting or an unresolved dispute. Contact us to request review or deletion of correspondence.

Deleting from the active app does not promise immediate deletion from every provider system. Provider logs and backup copies follow their own rules. OpenAI and Resend’s ordinary content-retention periods are described above; other security, account and legally required records can have different periods.

Cookies and browser storage

Sign-in uses secure, HttpOnly session cookies. A refresh cookie can last up to 30 days; short-lived verification and recovery cookies support account confirmation, Google sign-in and password reset. When the live homepage tutor is enabled, a cookie lasting up to one day limits its usage. Your theme preference stays in local storage until changed or cleared. If you submit a question before signing in, we keep its pending draft in local storage on your device for up to 24 hours so you can return to it after signup or sign-in. The draft is deleted once it is answered or when you log out. No Facebook pixel, advertising cookies or cross-site marketing trackers are installed.

Your requests and concerns

You can contact us about access, correction, erasure, portability or restriction of your information, or to object to a use of it. Which rights apply depends on the purpose and lawful basis; we may need to verify that a request comes from you. The in-app export covers study data and linked AI usage records, rather than every provider log or support message. For a broader request, email the privacy contact above.

You can also raise a concern with the UK Information Commissioner’s Office through its complaints service.

Learners under 18

Bravado is for learners aged 16 or over. Study suggestions use your course, exam date and practice results to help you choose what to revise. They do not make decisions about your education or qualifications. If a suggestion, privacy setting or use of your information worries you, contact us and we will explain it in plain language.