Privacy policy
Written in plain English — if anything here is unclear, ask us. This is a summary of how GogoUni handles your information.
We collect as little as we can get away with
To use GogoUniwe need: your email, a display name (we suggest first name + last initial, not your full surname), your year group, and your grades and subject choices. You type your grades in yourself — we don't ask you to upload school reports or any other documents. We don't ask for your date of birth, home address, or school ID number, because we don't need them.
Who can see your information
Your profile is private by default. There are no public profiles or community features. If you're a student, a parent can only see your data after you generate a share code and they enter it — linking is never something a parent can initiate on their own, and you can revoke it at any time from Settings.
What we don't do
No advertising trackers, no behavioural profiling, no selling your data. Our analytics (Vercel Web Analytics) are cookieless and only ever tell us aggregate things like “how many people visited the pricing page,” never anything about you individually — which is why we don't need a cookie consent banner.
Who else processes your data
- Supabase — hosts our database and file storage
- Vercel — hosts the website and provides cookieless, aggregate analytics
- Stripe — processes payments; we never see or store your card details
- Resend — sends our emails (such as deadline reminders and account notices)
- Sentry — error monitoring; records technical details when something breaks
Age and younger users
You need to be 13 or over to use GogoUni. In the UK, 13 is the age at which you can agree to an online service handling your own data (Data Protection Act 2018). We handle your information the same careful way whatever your age — private by default, no advertising, and no more data than we need. A parent can only ever see your data if you generate a share code and give it to them.
How long we keep things
- Inactive accounts: we'll email a warning after about 22 months of inactivity, then delete the account after 24 months if nothing changes
- Deleting your account: your account is deactivated immediately, and all data is permanently deleted within 30 days
Your rights
You can delete your own account and data at any time from Settings. For anything else — access, correction, or questions about this policy — contact us using the details on our website.
This is an engineering-baseline summary, not a substitute for formal legal advice — the founder should have this reviewed by a UK data-protection professional before launch.