Legal
Privacy Policy
Effective date: 4 September 2026
This Privacy Policy explains how IBBase (“we”, “us”, “our”) collects, uses, stores and protects your personal information when you use our website and services.
1. Data controller
IBBase is the data controller for personal information collected through the Services. For questions about this policy, contact us through the IBBase help centre.
2. Information we collect
We collect the following types of information:
- Account information: name, email address, and authentication details when you sign up or sign in.
- Usage information: exam generations, questions answered, marking attempts, tutor-assist requests, time spent, and feature interactions.
- Payment information: we do not store full payment card details. Payments are processed by Stripe; we receive a customer ID, subscription status and billing history.
- Device and technical information: browser type, IP address, device type, and cookies or similar identifiers.
- Communications: messages you send to our support team.
3. How we use your information
We use your information to:
- provide, operate and improve IBBase features;
- process payments and manage subscriptions;
- enforce usage limits and detect abuse or unauthorised access;
- personalise your study experience and generate progress insights;
- communicate with you about your account, updates and support requests; and
- comply with legal obligations.
4. Legal basis for processing
We process personal data on the basis of performance of a contract (providing the Services), legitimate interests (security, fraud prevention and product improvement), consent (where required), and legal obligation.
5. Data sharing
We do not sell your personal data. We share information only with trusted service providers necessary to operate IBBase, such as:
- Stripe for payment processing;
- Supabase / Lovable Cloud for authentication, database and hosting infrastructure; and
- AI providers solely to generate questions, explanations and feedback based on your inputs.
All providers are contractually bound to use your data only for the purposes of providing services to IBBase and to maintain appropriate security measures.
6. Data retention
We keep your personal data for as long as your account is active or as needed to provide the Services. If you delete your account, we will securely delete or anonymise your personal data within a reasonable period, unless we are required to retain it by law.
7. Security
We use industry-standard technical and organisational measures to protect your data, including encryption in transit, access controls, and regular security reviews. No online service can guarantee absolute security, so please keep your account credentials safe.
8. Your rights
Depending on your location, you may have rights to access, correct, delete, restrict or port your personal data, and to object to certain processing. To exercise these rights, send us a request through the IBBase help centre.
9. Cookies and tracking
IBBase uses cookies and similar technologies to keep you signed in, remember preferences, understand usage and improve the Services. You can manage cookie preferences through your browser settings.
10. International transfers
Our service providers may process data outside your country of residence, including in the United States, Australia and the European Union. Where such transfers occur, we rely on approved safeguards such as standard contractual clauses.
11. Children
IBBase is not directed to children under 13. If we learn that we have collected personal data from a child under 13 without parental consent, we will delete it promptly.
12. Changes to this policy
We may update this Privacy Policy from time to time. Material changes will be notified by email or through the Services at least 14 days before taking effect.
13. Contact us
For privacy questions or data requests, contact our team through the IBBase help centre.