Privacy policy

2. What data we collect and why

We collect as little data as possible:

Account information — your name and email address are collected when you create an account or sign in with Google or Apple, and are stored securely by Supabase. Legal basis: contract, because this is needed to provide an account.
Learning progress — topics started and completed, XP, and streaks are stored locally on your device. Legal basis: legitimate interests, because this provides personalised revision.
Accessibility preferences — reduce motion, high contrast, font settings, and similar comfort options are stored on your device and, for signed-in users, may sync to your account so the same settings follow you across devices. Legal basis: legitimate interests, because these settings make the app usable.
Age/consent confirmation — your month/year of birth is used on-device to confirm you are old enough to use the app. We store the resulting age-confirmation record locally; we do not store your full date of birth on our servers. Legal basis: legal obligation and legitimate interests for child safety.
Chat messages sent to Mamo — transmitted to Google's Gemini API to generate a response. Recent chat threads may also stay on your device locally so you can continue a conversation later. We do not store your chat history on our own servers. Legal basis: consent, because you choose to use the chat.
AI marking submissions — the written answer you submit, the question, and the relevant mark scheme are sent to Google's Gemini API for feedback. We do not store the submitted answer after the response is generated. Legal basis: consent, because you choose to submit for marking.
Error and reliability reports — if error monitoring is enabled, crash/error details and limited technical context may be sent to Sentry so we can fix broken app flows. We scrub names, emails, auth tokens, cookies, URLs, and learner answers before sending. Legal basis: legitimate interests, because this keeps the app reliable and safe.
Website analytics — the public website uses Plausible Analytics, a privacy-friendly analytics service that does not use cookies or identify you personally.

We do not collect your precise location, payment information, health records, or medical diagnostic information.

4. AI-generated content

The Mamo chat feature and AI marking use Gemini, an AI model made by Google (google.com). Messages and AI-marked answers you send are processed by Google's servers to generate responses. Google's Privacy policy applies to this processing: policies.google.com/privacy

All Mamo responses and AI marks are generated by AI and should not be treated as a substitute for teacher advice. You can turn off AI support in Settings; this disables Mamo chat and AI marking on this device.

We do not send your name or email address to Google for Mamo or AI marking requests — only the physics question text, answer text, and relevant mark scheme needed to provide the feature.

5. How we store data

Learning progress is stored locally on your device. If you sign in, comfort settings may also sync to your account so they stay consistent across devices. Recent Mamo chat threads may remain in local device storage until you clear them. Clearing the app's data or deleting the app removes local stored data permanently.

We take reasonable technical and organisational steps to protect your data, including encrypted connections (HTTPS) and access controls on our systems.

If you tap an external simulation link in the Explore tab, you will leave NeuroPhysics and visit a third-party website. Those sites are not controlled by us and have their own privacy policies.

6. Children and young people

NeuroPhysics is intended for users aged 13 and over. We do not knowingly collect personal information from children under 13. If you are under 13, please do not use this app or create an account.

We follow the ICO's Children's Code (Age Appropriate Design Code). We default to privacy-protective settings, do not use data for advertising or profiling, collect only the minimum data needed, and make account deletion available in the app.

Parents or guardians who believe their child under 13 has used the app may contact us to request data deletion. If we discover a user is under 13, we will delete their account.

7. How long we keep your data

Your account and email: kept until you delete your account.
Learning progress: stored on your device and deleted when you clear app data or uninstall.
Comfort settings: stored on your device and, for signed-in users, may remain in your account until you delete the account.
Mamo chat threads: may remain in local device storage until cleared from the device.
AI marking submissions: not stored by us after the response is generated.
Error and reliability reports: kept by Sentry according to its retention settings so we can diagnose app crashes.
Server request logs: Vercel may retain request metadata for security and reliability purposes.

When you delete your account in Settings, your account data is removed from Supabase. Some provider-side deletion and backup cleanup may take up to 30 days.

8. Your rights under UK GDPR

You have the right to access your personal data, ask for inaccurate data to be corrected, request erasure, restrict processing, object to processing based on legitimate interests, receive portable data where applicable, and withdraw consent where processing is based on consent.

To exercise these rights, contact us at support@neurophysics.app. We will respond within one calendar month.

You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113.

9. Third-party services

We use the following third-party services:

Google Gemini API — powers the Mamo AI tutor. Messages are sent to Google's servers. See policies.google.com/privacy.
Supabase — provides authentication (account login). Your name and email address are stored on Supabase's servers. See supabase.com/privacy.
Vercel — hosts the API proxy. Vercel may log request metadata (IP address, timestamps). See vercel.com/legal/privacy-policy.
Sentry — receives scrubbed crash/error reports if error monitoring is enabled. See sentry.io/privacy.
Plausible Analytics — measures public website traffic without cookies or personal profiles. See plausible.io/data-policy.

Exam-style questions are original content created for revision practice. NeuroPhysics is not affiliated with, endorsed by, or associated with any exam board.

10. Cookies and local storage

We use your device's local storage to remember you are logged in, save learning progress, remember accessibility preferences, and keep recent Mamo chat threads on your device so you can continue a conversation later.

The public website uses Plausible Analytics without cookies. We do not use advertising cookies, tracking cookies, or analytics that identify you personally.

11. COPPA / US users

If you are located in the United States and under 13 years old, you should not use this app. NeuroPhysics does not knowingly collect personal information from children under 13 in the United States.

For users aged 13-17 in the US, your parent or guardian should review this privacy policy before you create an account. If you believe a child under 13 in the US has created an account, contact us and we will delete the account and associated data promptly.

1. Who we are