Legal · Updated 8 August 2026
Privacy Policy
This policy explains in plain language what personal data A1 Study uses, why it is needed and the choices available to you.
1. Who is responsible for your data?
A1 Study operates in Ireland and is the data controller for personal data processed through the A1 Study app and website.
For privacy questions or requests, email support@a1-study.com.
2. Data we collect
| Category | Examples |
|---|---|
| Account and identity | Name, email address, sign-in provider, account identifier and authentication records. |
| Study profile | Country, exam level, school year, subject choices and app preferences. |
| Learning activity | Notes or topics viewed, quiz performance, flashcard activity, saved progress, streaks, points and achievements. |
| Subscription | Store, product, purchase status, renewal or expiry status, entitlement and receipt or purchase identifiers. A1 Study does not receive your full payment-card details. |
| Technical and security | IP address, device and app version, session information and basic access, authentication and security logs. |
| Support | Messages, attachments and other information you choose to send when asking for help. |
Some session information and preferences may be stored locally on your device. Apple or Google may provide basic identity information when you choose their sign-in service.
3. Why we use it
| Purpose | Legal basis |
|---|---|
| Create and secure your account; deliver revision content; save progress and preferences. | Necessary to provide the service you request and perform our contract with you. |
| Manage subscription access and restore purchases. | Contract, and legal obligations that apply to transactions and records. |
| Answer support and privacy requests. | Contract, legal obligations and our legitimate interest in supporting users. |
| Prevent fraud, abuse and security incidents; diagnose service faults. | Our legitimate interests in keeping A1 Study reliable and secure. |
| Meet tax, accounting, consumer-protection and data-protection duties. | Legal obligation. |
Where legitimate interests are used, we consider the impact on users, including younger users, and use only data reasonably needed for the stated purpose.
4. Service providers and sharing
We do not sell personal data. We do not use it for third-party behavioural advertising. Data is shared only where needed to operate the service, comply with law or protect users.
- Supabase provides account authentication, database and backend infrastructure.
- Apple and Google provide optional sign-in and process mobile subscription payments through their stores.
- RevenueCat manages subscription status and access entitlements across platforms.
- Vercel hosts and delivers the A1 Study website and may process basic request and security logs.
- Support and infrastructure providers process communications and technical data only as needed to provide their service to us.
We may disclose information if legally required, or where reasonably necessary to investigate fraud, security threats or misuse of the service. If the service is reorganised or transferred, personal data may be transferred subject to appropriate safeguards and notice.
5. International processing
Some service providers may process data outside Ireland or the European Economic Area. Where European data-protection law requires it, we use an adequacy decision, approved contractual protections or another lawful transfer mechanism.
6. Retention and deletion
- Account, profile and learning data is normally kept while the account is active.
- Support records are kept for as long as reasonably needed to resolve the request and maintain an appropriate record.
- Security logs are kept only for a period reasonably needed to protect and troubleshoot the service.
- Transaction and entitlement records may be kept where required for accounting, tax, fraud prevention, disputes or other legal obligations.
When an account-deletion request is verified, personal data under our control is deleted or irreversibly anonymised unless a limited record must be retained. Protected backups are overwritten through the ordinary backup cycle.
See Delete your A1 Study account for the request process. Account deletion does not itself cancel an Apple or Google subscription.
7. Your data-protection rights
Depending on the circumstances, you may ask for access to your personal data, correction, deletion, restriction, portability, or object to processing based on legitimate interests. If processing is based on consent, you can withdraw that consent without affecting earlier lawful processing.
Email support@a1-study.com. We may request information reasonably necessary to verify your identity. You may also complain to the Data Protection Commission in Ireland.
8. Students and younger users
A1 Study is a general educational service used by students. We apply the same privacy-protective defaults to all users, do not serve behavioural advertising and do not use learning activity to make decisions that produce legal or similarly significant effects.
Privacy information is written to be understandable by teenagers. A parent or guardian may contact us with questions, and purchases by minors must be authorised in accordance with the rules of their Apple or Google account.
9. Security
We use reasonable technical and organisational measures designed to protect personal data, including access controls, encrypted network connections and restricted administrative access. No online service can guarantee absolute security.
10. Changes and contact
We may update this policy when the service, providers or legal requirements change. The date at the top identifies the current version. Material changes will be communicated in an appropriate way.
Contact: support@a1-study.com.