Privacy Policy

1Who we are

That's LIT is a GCSE English Literature revision app.

References in this policy to “That's LIT”, “we”, “us” or “our” mean the operator of the That's LIT app and website.

2Accounts and data

We may also hold an internal account identifier and account creation date where these are required to operate and manage the account.

3What we do not collect

The texts selected or studied, and quotations saved to the Quotation Bank, are used only to provide access to the relevant revision content. They are not used to assess or rank users.

4How information is used

We use personal information only to:

• create and manage accounts;
• allow users to sign in securely;
• show revision content for the selected texts;
• store and display quotations saved to a user's Quotation Bank;
• confirm whether an individual subscription is active;
• allow schools to organise accounts by class and teacher;
• show schools when a student last accessed the app, to support teaching and timely intervention;
• respond to support requests;
• protect the security and proper operation of the app;
• comply with legal obligations.

We do not use personal information for advertising, student profiling or automated decisions about academic ability.

5Subscriptions and payments

Individual subscriptions are purchased through the Apple App Store or Google Play.

Apple or Google processes and holds the financial information needed to complete the purchase. That's LIT does not collect or store payment card details, bank details or App Store payment credentials.

RevenueCat is used to manage subscription access. RevenueCat may process limited subscription information, such as:

• whether a subscription is active;
• the subscription product selected;
• renewal or expiry status;
• a purchase or transaction reference;
• an account identifier used to link a purchase to your account.

This information is used only to confirm whether a user should have access to subscription features.

6School-managed accounts

A school can create, view, update and delete the student accounts connected to its subscription.

Authorised school staff can manage:

• student names and email addresses;
• classes and teachers;
• the texts assigned to students;
• account access and deletion.

A school can access only the accounts managed under its own subscription.

Schools are responsible for ensuring that they have an appropriate legal basis for creating and managing student accounts.

7Service providers

We do not sell, rent or provide personal information to advertisers, data brokers or other organisations for their own marketing.

Limited information may be processed by services required to operate That's LIT:

• WordPress, which is used to operate the website and account system;
• Apple App Store, which processes Apple subscriptions and payments;
• Google Play, which processes Android subscriptions and payments;
• RevenueCat, which manages subscription status and access.

These services process only the information needed to provide their function. They are not given That's LIT account information for independent advertising or marketing.

We may disclose information where required by law or where necessary to protect someone from a serious and immediate risk of harm.

8Children and young people

That's LIT is designed for GCSE students, so many users will be under 18.

We collect only the limited information needed to provide and manage an account. We do not ask students for their age, address, telephone number, grades or unnecessary personal information.

We do not use student information for advertising, profiling or automated decisions.

For a school-managed account, questions or deletion requests should be directed to the school administrator.

9How long we keep information

Individual accounts

Individual accounts and their associated personal information are deleted after three years, unless the user deletes the account earlier through the account management page.

School accounts

School-managed accounts and their associated personal information are deleted after three years unless the school administrator deletes them earlier.

Billing records

Where a purchase has been made, billing and transaction records may be retained for longer than three years, and are not deleted when an account is deleted, where this is required by law. For example, UK tax rules require financial records to be kept for at least six years.

Deleted information may remain temporarily in secure system backups until those backups are automatically overwritten.

10Account deletion

Individual accounts

Individual users can delete their account through the account management page:

Go to My Account

Users can also request deletion by emailing support@thatslit.org from the email address connected to the account.

School accounts

School-managed accounts must be deleted by the school administrator.

Students and parents who want a school-managed account deleted should contact the relevant school administrator directly.

Deleting an account permanently removes the personal information, class information, saved Quotation Bank entries and selected texts associated with that account, subject to temporary secure backup retention and the billing record exception described above.

11Your data protection rights

Depending on the circumstances, UK data protection law may give you the right to:

• ask what personal information we hold about you;
• receive a copy of that information;
• ask us to correct inaccurate information;
• ask for information to be deleted;
• ask us to restrict or stop certain uses of information;
• complain to the Information Commissioner’s Office.

We may need to verify your identity before providing, changing or deleting account information.

Requests concerning school-managed accounts should normally be made through the school administrator.

12Contact us

Contact us if you have a privacy question, need help with an individual account or want to exercise a data protection right.

Complaining to the ICO

You have the right to complain to the UK Information Commissioner’s Office if you are unhappy with how your personal information has been handled.

More information is available at ico.org.uk .