Privacy Policy — AI Study Method

Last updated: 30 October 2026

This policy explains what personal information AI Study Method ("we", "us", "our") collects when you use aistudymethod.com, how we use it, and your rights under UK data protection law (the UK GDPR and the Data Protection Act 2018).

Who we are

AI Study Method is the data controller for personal information collected through this website. You can reach us at hello@aistudymethod.com.

Information we collect

Information you give us — your email address when you join our mailing list or request the free prompt library; your email address and, if you choose to give it, the subject and level you teach when you sign up for teacher updates; your name, email, your child's year group and message when you use our contact form; and your name, email and payment details when you buy a course.
Information collected automatically — limited technical information such as your browser type, approximate country, whether you are on a mobile or desktop device, and the pages you visit.
Revision Arcade activity — when a game is played we record which game, subject, level, exam board and topic was chosen, the score, how long the game took and how many questions were answered correctly. This is linked to a randomly generated identifier stored in your browser, not to a name, email address or account. We do not store the IP address the game was played from.
Leaderboard entries — if a player chooses to submit a score, the three letters and optional four-character class code they type in are stored and shown publicly on the leaderboard alongside the score. These are chosen by the player; we ask that real names are not used.
Revision Arcade accounts (optional) — a player may create an account to keep their Velvet Coins, collection and avatar across devices. An account consists of a username (we suggest a random one and ask that real names are not used), a password and a recovery key. We never ask for an email address, a name, a date of birth or any other personal detail. The password and recovery key are never stored as typed: we keep only a salted cryptographic hash of each (PBKDF2-SHA256). Against the account we hold the coin balance and lifetime coins earned, the daily-cap counter, the collectibles owned, the chosen avatar, and the dates the account was created and last used.

How we use your information

To send you the resources, prompt library or updates you have requested.
To respond to enquiries you send through the contact form.
To email teachers who have asked for them occasional updates about new lessons for their subjects.
To provide, deliver and support any course you purchase.
To maintain and improve the website.

Our legal bases

We rely on your consent for marketing emails (you can withdraw it at any time), on performance of a contract to deliver a course you have bought, and on our legitimate interests in responding to enquiries and keeping the site secure.

Who we share it with

We use a small number of trusted service providers who process data on our behalf:

Systeme.io — email marketing, course checkout and payment processing.
Formspree — receives contact-form submissions, teacher suggestions, teacher-updates sign-ups, student feedback and mistake reports, and forwards them to us.
GitHub Pages — website hosting.
Bunny.net — video delivery; hosting for the Revision Arcade leaderboard and activity statistics; and the database that holds Revision Arcade accounts. The account database is held in a European Union region. A backup copy of it is taken every night and kept for 30 days on a rolling basis, after which each backup is deleted automatically.
Plausible Analytics — privacy-focused website analytics. Plausible does not use cookies and does not collect or store personal data.

We never sell your personal information. Some providers are based outside the UK/EEA; where that is the case, appropriate safeguards (such as standard contractual clauses) are in place.

Cookies

This site itself uses minimal cookies. Third-party tools embedded on some pages — for example video players or the checkout — may set their own cookies, governed by their own privacy policies.

The Revision Arcade uses your browser's local storage rather than cookies to hold a randomly generated identifier, the initials you last used, and your most recent game. The class-session page for teachers also uses local storage, only to remember which of its steps have been opened; that record stays in the browser and is not sent to us. Mini-lessons use local storage to remember which lessons have been finished, the best score and stars for each, the last lesson opened, and any Velvet Coins earned while not logged in to an account. That record also stays in the browser and is not sent to us. If a student chooses to save those coins to a Revision Arcade account, they are added to the account's coin balance in the same way as coins won in games, within the same daily limit. Clearing your browser's site data removes all of it.

How long we keep it

We keep your personal information only for as long as necessary — for example, while you remain subscribed to our list, or as needed for our records and to meet legal obligations — after which it is deleted.

Individual Revision Arcade activity records are kept for no more than 90 days and are then deleted. Anonymous totals calculated from them — for example how many people played a topic — contain no identifier and are kept indefinitely. Leaderboard scores remain on the weekly and all-time boards.

A Revision Arcade account is kept for as long as it is used. An account that has not been logged into for 18 months is deleted, together with its coins and collection. Nightly backups of the account database are kept for 30 days and then deleted, so a deleted account disappears from every copy within 30 days. Because an account holds no email address, we cannot send a warning before a dormant account is removed.

Your rights

Under UK data protection law you have the right to access, correct, erase, restrict or object to our use of your personal information, to data portability, and to withdraw consent at any time. To exercise any of these, email hello@aistudymethod.com. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk.

Children

Our mailing list and the free Prompt Library sign-up are for people aged 16 or over. The sign-up forms ask you to confirm that you are 16 or over, and ask younger students to have a parent or teacher sign up instead. We do not knowingly collect an email address from anyone under 16; if we learn that we have, we will delete it. If you believe a child under 16 has signed up, please tell us at hello@aistudymethod.com.

Apart from that sign-up, we do not ask students for their name, email address or any other contact detail. The teacher-updates sign-up is for teachers and other school staff.

The free revision games are designed to be used by school-age students. When a game is played we record the activity described above against a random identifier held in the browser. We do this to understand which subjects and topics are useful and which students find difficult, so we can improve them. It is not used to build a profile of an individual, is never sold or shared for advertising, and no attempt is made to identify who a device belongs to.

Nothing on the site requires a child to create an account or provide any personal detail in order to use it. Every game can be played without an account. Where a student chooses to create a Revision Arcade account, it asks for a username, a password and nothing else — see Student data at a glance below. If you would prefer no activity to be recorded at all, using your browser's private mode will prevent the identifier being stored between visits. If you have any concern about your child's use of the site, please contact us at hello@aistudymethod.com.

Student data at a glance

This section is written for students, parents and teachers who want a plain summary of what the Revision Arcade does and does not hold. The detail above takes precedence if anything here is unclear.

No personal details. No name, email address, school, date of birth, photo or contact detail is asked for or stored — with or without an account. We ask that usernames, leaderboard initials and class codes are not real names, and we suggest a random username at sign-up.
Accounts are optional. Every game and mini-lesson works without one. An account only exists so coins, collectibles and the chosen avatar carry across devices. Lesson progress (which lessons are finished, and coins not yet saved) is kept only in the browser on the device being used.
Friend codes. Each account has a short random friend code. If a new player enters a friend's code when signing up, we record that the two accounts are linked so both can receive bonus coins — nothing else. No name, email, phone number or contact list is involved: players pass the code on themselves, and we never see who it was sent to. Neither player is shown the other's username. The link is deleted when either account is deleted. To stop a player using their own code, the browser keeps a list of the accounts it has been logged in to; this list stays on the device and is only sent when creating a new account.
Seasonal bonuses. Now and then a featured lesson comes with a one-off coin bonus (for example, a Halloween treat for finishing the Halloween lesson). When an account collects one, we record which bonus it was and when, so it is paid only once. Nothing else is recorded, and the record is deleted with the account. Until the bonus is collected, the browser remembers on the device that the lesson was finished.
Feedback and mistake reports. Students can answer three short questions about the site (the feedback quest) and can report a mistake on a lesson screen. Answers are sent to us through Formspree with the page they came from. Feedback is sent without the username. A mistake report includes the username only when the student is logged in, so we can pay the coins for a confirmed mistake. The forms ask students not to write their name or school. For the one-off feedback-quest coins, the account database records only that the bonus was paid and when, not what was written; the record is deleted with the account.
Passwords are hashed, never stored. Only a salted hash of the password and of the recovery key is kept. We cannot read either. If both the password and the recovery key are lost, the account cannot be recovered — there is no email address to verify ownership against, and we will not guess.
Where it lives. Account data is held in a Bunny.net database in the EU. Game-activity statistics and leaderboard scores are also hosted by Bunny.net. Nothing is stored on this website's own server, which serves static pages only.
Backups. The account database is backed up every night; each backup is kept for 30 days and then deleted automatically.
How long. Accounts are deleted after 18 months without a login. Individual activity records are deleted after 90 days. Leaderboard scores (initials and class code only) stay on the boards.
Never sold, never advertised against. Nothing is sold, shared with advertisers, or used to profile an individual.
Deleting an account. Email hello@aistudymethod.com with the username. Because we hold no contact detail we may ask you to prove control of the account by logging in, before we delete it.

Changes to this policy

We may update this policy from time to time. The date at the top shows when it was last revised.