Privacy Policy

Last updated: 6 January 2026

We are committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and share your personal data when you use our application.

1. Who We Are

This application is operated by ProgressBytes, a project developed and maintained by Lloyd Stevens (“we”, “us”, or “our”)

2. What Data We Collect

We may collect the following types of personal data:

• Name and email address (for login and identification)

• School affiliation (to assign users to the correct institution)

• Usage data (such as when you log in, progress tracking, and responses to activities)

• Technical data (browser type, operating system, IP address)

We do not knowingly collect or process special category data (e.g., health, race, religion).

3. How We Use Your Data

We use the data to:

• Provide access to the application

• Track user progress and responses

• Communicate with you if needed

• Improve the performance and security of the app

We do not use your data for marketing purposes.

4. Legal Basis for Processing

Under the GDPR, the legal bases we rely on are:

• Consent – where you have given us clear permission

• Legitimate interests – to operate and improve the app effectively

• Contract – to provide our service to users in line with our terms

5. Data Storage and Hosting

We use Supabase as our backend service provider. Supabase stores all data securely in the EU (Frankfurt, Germany) using Amazon Web Services (AWS).

Supabase complies with GDPR. You can read their privacy policy here.

All data is encrypted in transit and at rest.

6. Who We Share Data With

We do not sell or share your personal data with third parties except:

• Supabase (data processor for hosting and backend functions)

• Relevant school staff for monitoring student progress (where applicable)

• Legal authorities, if required by law

7. How Long We Keep Your Data

We keep personal data only as long as necessary to fulfill the purposes outlined in this policy, or as required by law. You can request deletion at any time.

8. Your Rights

You have the following rights under GDPR:

• Access your personal data

• Correct inaccurate data

• Request deletion

• Object to or restrict processing

• Data portability

• Withdraw consent at any time

To exercise these rights, contact us at progressbytes@gmail.com

9. Data Security

We take appropriate measures to protect your data, including encryption, role-based access control, and secure hosting.

10. Changes to This Policy

We may update this privacy policy to reflect changes in the law or our services. We will notify users of any significant changes.