Privacy and Data Protection
Last updated: 1st February 2024
We take data protection very seriously because Brain Glue is used mostly by young people. On this page you can learn about what data is collected and stored, how it is used and how it relates to the terms of the General Data Protection Regulation (GDPR), incorporated in English law as the Data Protection Act 2018.
Brain Glue is a trading name of Mega Seating Plan Ltd ("we", "us"), which acts under the terms of the GDPR as the "data processor". Users ("you", "your") retain responsibility under the GDPR as the "data controller".
The basis for processing data under the GDPR is 'legitimate interests'. The processing is necessary for the purpose of generating revision quizzes for students, and these tasks could not otherwise be performed. Processing of personal data is limited to the purposes described below.
What data is collected and stored?
User data
During registration we collect your first name, email address and password, to be used as follows:
-
First name: Allows us to address you by name within the app or in emails. Your surname is not collected.
-
Email address: Allows you to recover your password if you forget it, and allows us to communicate with you (only if you have consented to receive marketing emails).
-
Password: When you register, you submit a password. This is never seen by us or received by our servers - it is stored in a 'hashed' format that cannot be decoded. This password is necessary to ensure that your data is visible only to you.
In usage, we will store data about your chosen exam specifications and your progress in quizzes. This is used to recommend the most appropriate quizzes for you.
How is the data stored?
User data is stored in Firebase storage, hosted within the European Union.
How long is imported data stored?
You data is retained for as long as you maintain an account on Brain Glue.
How is the data disposed of?
On deletion of a user account, all data associated with that user is also deleted.
Registration with the ICO
Mega Seating Plan Ltd is registered with the Information Commissioner's Office (registration number ZA331933).