Privacy policy
Written in plain English — if anything here is unclear, ask us. This is a summary of how GogoUni handles your information.
We collect as little as we can get away with
To use GogoUni we need: your email, a display name (we suggest first name + last initial, not your full surname), your year group, your grades and subject choices, and — if you upload one — a photo or PDF of your school report. We don't ask for your date of birth, home address, or school ID number, because we don't need them.
Uploaded school reports
When you upload a report, it's sent directly to Anthropic's Claude API to read the grades — we don't use a separate scanning service. Teacher names and written comments are never saved. By default we delete the original file once you've confirmed your grades; if you choose to keep it, it's automatically deleted 90 days after upload regardless.
Who can see your information
Your profile is private by default. There are no public profiles or community features. If you're a student, a parent can only see your data after you generate a share code and they enter it — linking is never something a parent can initiate on their own, and you can revoke it at any time from Settings.
What we don't do
No advertising trackers, no behavioural profiling, no selling your data. Our analytics (Plausible) are cookieless and only ever tell us aggregate things like “how many people visited the pricing page,” never anything about you individually — which is why we don't need a cookie consent banner.
Who else processes your data
- Supabase — hosts our database and file storage
- Anthropic (Claude) — reads uploaded school reports
- Stripe — processes payments; we never see or store your card details
- Plausible — cookieless, aggregate analytics
If you're under 16
We ask a parent or guardian to confirm your account by email before it activates. This is a one-time step and doesn't give them access to your account unless you separately choose to link them.
How long we keep things
- Uploaded report files: deleted after 90 days at the latest (sooner if you didn't opt to keep the original)
- Inactive accounts: we'll email a warning after about 22 months of inactivity, then delete the account after 24 months if nothing changes
- Deleting your account: your account is deactivated immediately, and all data is permanently deleted within 30 days
Your rights
You can delete your own account and data at any time from Settings. For anything else — access, correction, or questions about this policy — contact us using the details on our website.
This is an engineering-baseline summary, not a substitute for formal legal advice — the founder should have this reviewed by a UK data-protection professional before launch.