Privacy Policy

1. Who we are

PredictMyGrade is operated by Lewis Price trading as PriceyLewis Software, the data controller for the personal data described here. Our address is The Bristol Office, 2nd Floor, 5 High Street, Westbury-on-Trym, Bristol, BS9 3BY, England. We are registered with the Information Commissioner's Office (ICO) as a data controller, registration number ZC266751. You can contact us about privacy at priceylewissoftware@gmail.com.

2. What we collect

• Account details from the provider you sign in with (Google, GitHub or Microsoft): your name, email address and a provider account identifier. We never receive your password.
• Study data you enter: modules, grades, credits, targets, deadlines, goals, study plans, snapshots and notes. If you use the GPA tracker, also your courses with their term, credit hours, letter grades, current percentage and final exam weight, whether each is a regular, Honors or AP/IB class, and your GPA settings (college or high school, a target GPA, the credits you need to graduate, and an earlier GPA with the credits it covers). With Premium, also the graded parts of a course you add (name, weight and score) and the GPA plans you save. We save your GPA once a day when it changes, so you can see your GPA history.
• What you study and how you found us: when you first sign in we ask whether you're doing GCSEs, A-Levels, BTECs or T Levels, a university degree, or studying at a US-style college or high school graded in GPA, so we can show the right pages, and (optionally) how you heard about us. You can change what you study in Settings.
• Why you left: if you choose a reason when you delete your account or cancel Premium, we save only that reason and the date. It isn't linked to your account, name or email, so it can't identify you.
• Study coach conversations: the questions you ask the coach and the replies you receive.
• Subscription records: your plan, subscription status and renewal dates, and a record that you ticked the boxes before checkout. If you get the free welcome trial, we also keep the date it ends, so it's only given once per account. Card details are collected and held by our payment provider, not by us. If a parent or guardian pays through your "ask a parent" link, Lemon Squeezy holds their name and payment details. Lemon Squeezy also tells us their email address, which we keep only to send them a confirmation of the purchase and the reminders before a free trial ends or a plan renews, and delete when the plan ends or with your account, whichever comes first.
• Emails and messages you send us, for example asking for help or reporting a bug through email or the contact form, including any attachments, and our replies.
• Share links (Premium): if you create one, anyone with the link can see your name, average, module marks and upcoming deadlines (on the GPA tracker: your GPA, courses and grades instead of modules) until you turn it off. We record how many times it is viewed.
• Invites: if you join through a friend's invite link, we link your account to theirs so you both get the free Premium. When you add your first mark, we email them your first name to say you've started. People who open your own invite link see your first name.
• Waitlist sign-ups: if you join the waitlist before we open, your email address and (optionally) your level of study, used only to tell you when your place is ready and when we launch (consent). Ask us any time to remove you.
• Two-step sign-in: if you turn on an authenticator app for your account, we store the secret it uses and your one-time recovery codes, so we can check the codes you enter. They are deleted when you turn it off or delete your account.
• Email delivery problems: if an email we send you bounces or you mark it as spam, our email provider tells us, and we record your address and the reason so we stop emailing it. We remove this if you ask us to email you again, or when you delete your account.
• Technical data: essential cookies, server logs (IP address, browser, pages requested) used for security and troubleshooting, and your display preferences.
• Security records: if something looks like an attack or misuse, such as too many requests to a sensitive page or repeated failed sign-in codes, we record the IP address, browser type, the page and, if you're signed in, your account. Serious ones are emailed to us as an alert.

3. How we use it and our lawful bases

• To provide the service you signed up for: dashboards, forecasts, planning tools and exports (contract).
• To take payment and manage your subscription (contract).
• To answer your study coach questions and write your reports when you use those features (contract).
• To send the weekly progress email that comes with Premium (contract). It starts off if you look likely to be under 18 (a parent paid, you study GCSEs, A-Levels, a BTEC or a T Level, or you told the GPA tracker you're at high school), and on otherwise. Change it in Settings, or turn it off with the link in the email.
• To improve grade forecasts and show peer comparisons, using grades combined across many students. The university forecast only learns from students who have finished their degree, and what it keeps is a set of number weights, not anyone's marks. Your marks are only included if you turn on Include my marks in anonymous statistics in Settings, and you can turn it off at any time. It is off unless you choose it. Comparisons only appear once at least 20 students contribute, and never show anyone's individual marks. On the GPA tracker, comparisons use the latest saved GPA of other GPA students who turned this on (consent).
• To keep the service secure, prevent abuse and fix problems (legitimate interests).
• To respond to support requests (legitimate interests).
• To send getting-started tips by email, only if you ask for them (consent). Turn them off in Settings or with the link in any tips email.
• To send occasional news about new features and offers, only if you ask for it (consent). Turn it off in Settings or with the link in any news email.
• To tell every user about changes to their account or the service, such as new prices, terms or this policy, planned downtime or a security problem (contract, and legal obligation where the law requires us to tell you).
• To confirm a purchase by email, and to remind you before a free trial ends or a subscription renews (contract and legal obligation).

We don't sell your personal data or use it for advertising.

4. Who we share it with

We use a small number of service providers who process data on our behalf:

• Lemon Squeezy: payments, invoicing and tax, as merchant of record for subscriptions.
• Google, GitHub and Microsoft: sign-in, only for the provider you choose.
• Sentry: error and security monitoring, so we hear about bugs. When something breaks on our server it receives technical details of the error, such as the page address and your browser type. We set it up so your name, email address, IP address and marks are not sent. If your browser stops or flags part of one of our pages for security reasons, it sends Sentry a short report directly (the page address, what was stopped and your browser type). Sentry sees the IP address that report comes from, as any website does, and we've set it not to store IP addresses. It also records when our scheduled emails run, with no personal data.
• Our hosting, database and email providers: to run the service and send messages. The website is hosted by Render and our database by Neon. Our inbox is provided by Google (Gmail), so emails you send us pass through and are stored by Google. Security alerts, which can include an IP address, go to our own Gmail and Microsoft Outlook inboxes. The account emails we send you (such as the weekly progress email and renewal reminders) are delivered by Resend, which processes your email address to deliver them.
• Backblaze: stores encrypted backup copies of our database in the EU (Amsterdam), so your account can be recovered if something goes wrong. The backups are encrypted before they leave our server and Backblaze can't read them.
• No analytics: we don't currently use any analytics or tracking service.

Some providers process data outside the UK. Render (Frankfurt), Resend (Ireland), Backblaze (Amsterdam) and Sentry (Germany) are in the EU, which UK law recognises as protecting personal data adequately. Lemon Squeezy, Google, GitHub and Microsoft may process data in the United States; there we rely on the UK-US data bridge or the UK International Data Transfer Agreement (or the UK Addendum to the EU Standard Contractual Clauses).

5. How long we keep it

We keep your account and study data while your account is open. If you don't sign in or use the site for 2 years, we email you, and if you still haven't come back 30 days later we delete the account as described below. We never do this while you have Premium.

When you delete your account, we delete everything linked to it straight away: your profile, modules, plans, snapshots, coach conversations, share links, any support messages or bug reports saved in the app, and any waitlist sign-up with the same email. We send one last email to your address to confirm it has been done. We keep only a record of the account number and the date it was deleted, with no name or email. If the account ever had a subscription, we also keep a scrambled code made from its email address (not the address itself) for 2 years, so the same email can't get a second free trial. Copies in our encrypted database backups can't be changed, so they're removed when those backups are deleted, within 30 days. If we ever have to restore a backup, we delete your account again straight away, so it won't come back.

• Messages you send us through the site are deleted a year after we've dealt with them, and always within 2 years. Emails in our inbox are kept only as long as we need them to help you; ask us and we'll delete them sooner.
• Waitlist sign-ups are deleted once you've created an account, 90 days after we tell you your place is ready, or after 2 years if your place never came up.
• Sign-in sessions are deleted when they expire, after 2 weeks.
• Server logs and security-event records are kept for up to 30 days.
• Backups: encrypted copies of the database are made daily and each one is deleted after 30 days.
• Payment records are kept by Lemon Squeezy as required by tax law.
• If PredictMyGrade closes, we give at least 30 days' notice so you can download your data, then delete all accounts.

6. Your rights

You can ask to access, correct, delete or export your data, object to or restrict how we use it, and withdraw consent at any time. Most of this you can do yourself:

• Download your data from Settings. This covers your account and study data; email us for a copy of anything else we hold about you, such as messages you've sent us.
• Delete your account, which also cancels any subscription.
• Change cookie choices with the Cookie preferences link in the footer.
• Turn on or off whether your marks are used in anonymous statistics, in Settings. Turn off the weekly email, tips or news by email in Settings or with the one-click link in any of those emails.
• For anything else, such as correcting your name or email, email priceylewissoftware@gmail.com. We'll reply within one month.

Complaints

If you're unhappy with how we've handled your data, please tell us first at priceylewissoftware@gmail.com. We'll confirm we've received your complaint within 30 days, look into it, and tell you what we found and what we've done.

You can also complain to the Information Commissioner's Office at any time: ico.org.uk/make-a-complaint, or call 0303 123 1113.

7. Children

PredictMyGrade is intended for students aged 13 and over. If you're under 13, please don't create an account. If we find out an account belongs to someone under 13, we'll delete it.

Many of our users are under 18, so we follow the ICO's Children's Code for everyone. In practice:

• Settings start at the most private option: your marks stay out of anonymous statistics, and tips and news emails stay off, unless you turn them on. The weekly progress email that comes with Premium also starts off for school, college and high school students, and for anyone whose parent paid.
• We don't show adverts, track your location, or share your data with anyone for marketing.
• Other students, parents and teachers can't see your marks unless you create a share link, and you can turn it off at any time.
• Grade forecasts and the study coach are worked out from the marks and dates you enter, to help you plan. GCSE and College forecasts, and GPA predictions, use only your own marks and grades. They are estimates, not decisions about you, and they never affect your school, college or university.
• If you're under 18, a parent or guardian needs to agree to and pay for Premium. The free welcome trial needs no card, and nothing is charged when it ends.

If anything here is hard to understand, ask a parent, carer or teacher, or email us.

8. If you live outside the UK

PredictMyGrade is run from the UK, and we handle everyone's data under UK data protection law (the UK GDPR), wherever they live. The rights in section 6 apply to you too, and you use them in the same way.

• Where your data is: your data is stored and processed in the UK and the EU, with the providers in section 4. If you use PredictMyGrade from another country, such as the United States, your data travels there and back when you use the site.
• We don't sell or share it: we don't sell your personal information, or share it for targeted advertising, as those terms are used in US state privacy laws such as California's.
• Children under 13: PredictMyGrade isn't meant for children under 13 and we don't knowingly collect their personal information, including under the US Children's Online Privacy Protection Act (COPPA). If you're a parent or guardian and think your child under 13 has made an account, email us at priceylewissoftware@gmail.com and we'll delete it.
• We're not your school: we aren't connected to any school, college or university and don't receive records from them. Everything in your account is what you typed in yourself, and your GPA here is not your official transcript.

9. Changes to this policy

If we make significant changes we'll update the date above and tell you by email or in the app before they take effect.