Privacy Policy

1. Personal data we collect

We collect the following categories of information:

• Account information: email address, sign-in method, display name, and Google profile image if you choose Google sign-in.
• Profile information: optional test date, settings, subscription status, and preferences you enter.
• Study activity: answers, diagnostic attempts, mock test attempts, lesson progress, mistakes, essays, and related analytics.
• Study plan: the lessons, drills, mock tests and essays you schedule, with their dates, times and lengths.
• Google data: if you sign in with Google, your Google name, email address and profile image; if you add your study plan to Google Calendar, the email address of the Google account you connect and an access token that lets Jurica update the calendar it creates. Section 5 explains exactly what we do with Google data.
• Billing information: Stripe customer identifiers, subscription identifiers, plan information, billing status, and invoice events. Stripe processes card details directly.
• Referrals: your invite code, how many friends have subscribed with it and the rewards it has earned, and, if you subscribed with someone’s code, whose it was. Your first name is shown on your invite page to anyone who has your link or code.
• Technical information: session cookies, IP address, browser and device information, request times, security logs, and error information.
• Communications: emails you send us, support requests, and mailing-list preferences.

2. How we use personal data

We use personal data to:

• create accounts and keep users signed in;
• provide lessons, practice, mock tests, diagnostic results, and analytics;
• keep your study plan and, if you ask us to, copy it into Google Calendar;
• store answers, essays, and progress so the product works across sessions;
• process payments, trials, renewals, cancellations, and billing support;
• send sign-in codes, service notices, billing messages, and requested emails;
• detect abuse, protect accounts, debug errors, and maintain reliability;
• understand which features are useful and improve the platform.

3. Lawful bases

Under UK data protection law, we rely on different lawful bases for different uses of data:

• Contract: providing the service you requested, managing accounts, saving study activity, and handling billing.
• Legitimate interests: keeping the service secure, preventing abuse, debugging, improving reliability, and understanding product use in a proportionate way.
• Consent: optional marketing emails or mailing-list subscriptions. You can withdraw consent at any time.
• Legal obligation: records we must keep for tax, accounting, consumer, or regulatory reasons.

4. Service providers

We use service providers to operate Jurica. They process data only for the purposes we instruct, unless their own legal obligations require otherwise.

• Convex: backend database, functions, and application infrastructure.
• Stripe: payment processing, subscriptions, invoices, and billing portal.
• Google: authentication, if you choose Google sign-in, and Google Calendar, if you choose to add your study plan to it.
• Resend: transactional email and mailing-list delivery.

We do not sell personal data. We do not share personal data for third party advertising.

5. Google user data

Jurica asks Google only for what each feature needs, and only when you choose that feature.

• Google sign-in (scopes: openid, email, profile). We receive your Google name, email address and profile image, and use them to create your account, sign you in and show your name and picture in the app.
• Add to Google Calendar (scope: calendar.app.created). With your permission, Jurica creates one secondary calendar in your Google account called “Jurica study plan” and adds, updates and removes the entries of your study plan in that calendar only, so they appear alongside your other events. This permission does not let Jurica see, change or delete any other calendar or event in your Google account, and we never ask for that.

We store the Google account email and a refresh token for the calendar connection in our database, where only Jurica’s server functions can read them; they are never shown in the app or sent to anyone else. We use them only to keep the “Jurica study plan” calendar in step with your plan.

We do not sell Google user data, share it with third parties, use it for advertising, or use it to develop or train AI or machine-learning models. People at Jurica do not read it, except with your permission to help with a support request, for security purposes, or where the law requires it.

You can disconnect at any time with “Remove from Google Calendar” on the Study plan page, which deletes the “Jurica study plan” calendar and revokes our access, or from your Google Account at myaccount.google.com/permissions. Deleting your Jurica account does the same and removes the stored token.

Jurica’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

6. Cookies and local storage

Jurica uses essential session technology to keep you signed in and to protect authentication flows. Google sign-in also uses short-lived cookies for state and security during the sign-in process. We do not currently use advertising cookies or cross-site tracking cookies. More detail is available in our Cookie Notice.

7. International transfers

Some providers may process personal data outside the United Kingdom, including in the United States. Where required, we rely on appropriate transfer safeguards such as adequacy regulations, Standard Contractual Clauses, the UK Addendum, or provider participation in recognised transfer frameworks.

8. Retention

We keep account and study data while your account is active. If you delete your account, we delete or anonymise personal account data within a reasonable period unless we need to keep limited records for billing, security, legal, or dispute-resolution reasons.

Mailing-list records are kept until you unsubscribe or ask us to remove them. Security and operational logs are kept for a limited period unless needed to investigate abuse or technical problems.

9. Your rights

Depending on the circumstances, you may have the right to access, correct, erase, restrict, object to, or receive a copy of your personal data. Where we rely on consent, you may withdraw it at any time.

To exercise these rights, email support@jurica.io. You also have the right to complain to the Information Commissioner’s Office at ico.org.uk.

10. Children

Jurica is intended for LNAT candidates aged 16 and above. We do not knowingly collect personal data from children under 16. If you believe a child under 16 has created an account, contact us and we will review it.

11. Security

We use authentication, access controls, encrypted transport, managed infrastructure, and limited operational access to protect data. No internet service can guarantee perfect security, but we design Jurica to minimise unnecessary collection and exposure.

12. Changes

We may update this policy as Jurica changes. The effective date above shows when the policy was last revised. Material changes will be posted here and, where appropriate, sent to active users.