Privacy Policy

Last updated: 6 April 2026

Who we are

SQETrack is operated by Colburne Holdings Ltd (trading as SQETrack), registered in England and Wales. Contact: hello@sqetrack.co.uk.

What data we collect

When you create an account, we collect:

• Your name and email address
• Your SQE exam dates and study material preferences

When you use the product, we store:

• Your topic confidence ratings and revision history
• MCQ practice results you import
• SRA practice question attempts and scores
• Your weekly planner schedule
• Active recall session results
• Feedback you submit through the app

When you pay, Stripe (our payment processor) handles your card details. We never see or store your card number. We store your Stripe customer ID and payment status.

How we use your data

• To provide the SQETrack revision tracking service
• To send you onboarding and progress emails (you can unsubscribe anytime)
• To improve the product based on aggregated, anonymised usage patterns
• To respond to your feedback submissions

AI-assisted feedback

When you submit feedback through the app, we use AI (powered by Anthropic) to help us understand your message and ask clarifying questions. The AI does not have access to your revision data, exam scores, or personal details beyond your first name. Every submission is reviewed by a real person.

Third-party services

• Stripe (payments): processes your card details securely. See stripe.com/privacy.
• SendGrid (emails): sends transactional and onboarding emails. See sendgrid.com/policies/privacy.
• Anthropic (AI feedback triage): processes feedback text only. See anthropic.com/privacy.
• Hetzner (hosting): servers located in Germany, subject to EU data protection standards.

We do not sell, rent, or share your personal data with any other third party.

Data storage and security

Your data is stored in a PostgreSQL database on a server in Germany, protected by:

• HTTPS encryption for all data in transit
• Bcrypt password hashing (we cannot read your password)
• JWT authentication with daily token expiry
• Rate limiting and IP blocking against brute-force attacks
• Daily encrypted backups retained for 30 days
• CAPTCHA protection on signup and login

Your rights under UK GDPR

You have the right to:

• Access your data: Export your revision data as a spreadsheet from Settings.
• Delete your data: Delete your account and all associated data from Settings. Deletion is permanent and immediate.
• Correct your data: Update your name, email, and exam dates in Settings.
• Withdraw consent for emails: Unsubscribe from any email using the link at the bottom, or contact us.
• Make a complaint: Contact the Information Commissioner's Office (ICO) at ico.org.uk if you believe your data rights have been violated.

For any data request, email hello@sqetrack.co.uk. We will respond within 30 days.

Cookies

SQETrack uses only essential cookies:

• A session cookie for authentication (keeps you logged in)
• No third-party tracking cookies
• No advertising cookies
• No analytics cookies

Data retention

• Active accounts: data retained while your account is active
• Deleted accounts: all data permanently removed immediately
• Backup retention: deleted data may persist in encrypted backups for up to 30 days before being automatically purged

Changes to this policy

We may update this policy from time to time. Material changes will be communicated via email or an in-app notification.