Privacy Policy

The controller for this policy is [LEGAL ENTITY NAME], trading as Jurica. Contact: hello@jurica.io.

1. Personal data we collect

We collect the following categories of information:

• Account information: email address, sign-in method, display name, and Google profile image if you choose Google sign-in.
• Profile information: optional test date, settings, subscription status, and preferences you enter.
• Study activity: answers, diagnostic attempts, mock test attempts, lesson progress, mistakes, essays, and related analytics.
• Billing information: Stripe customer identifiers, subscription identifiers, plan information, billing status, and invoice events. Stripe processes card details directly.
• Technical information: session cookies, IP address, browser and device information, request times, security logs, and error information.
• Communications: emails you send us, support requests, and mailing-list preferences.

2. How we use personal data

We use personal data to:

• create accounts and keep users signed in;
• provide lessons, practice, mock tests, diagnostic results, and analytics;
• store answers, essays, and progress so the product works across sessions;
• process payments, trials, renewals, cancellations, and billing support;
• send sign-in codes, service notices, billing messages, and requested emails;
• detect abuse, protect accounts, debug errors, and maintain reliability;
• understand which features are useful and improve the platform.

3. Lawful bases

Under UK data protection law, we rely on different lawful bases for different uses of data:

• Contract: providing the service you requested, managing accounts, saving study activity, and handling billing.
• Legitimate interests: keeping the service secure, preventing abuse, debugging, improving reliability, and understanding product use in a proportionate way.
• Consent: optional marketing emails or mailing-list subscriptions. You can withdraw consent at any time.
• Legal obligation: records we must keep for tax, accounting, consumer, or regulatory reasons.

4. Service providers

We use service providers to operate Jurica. They process data only for the purposes we instruct, unless their own legal obligations require otherwise.

• Convex: backend database, functions, and application infrastructure.
• Stripe: payment processing, subscriptions, invoices, and billing portal.
• Google: authentication, if you choose Google sign-in.
• Resend: transactional email and mailing-list delivery.
• Anthropic: AI-assisted essay feedback where that feature is used.

We do not sell personal data. We do not share personal data for third party advertising.

5. Cookies and local storage

Jurica uses essential session technology to keep you signed in and to protect authentication flows. Google sign-in also uses short-lived cookies for state and security during the sign-in process. We do not currently use advertising cookies or cross-site tracking cookies. More detail is available in our Cookie Notice.

6. AI processing

If you use an AI-assisted essay feature, the text you submit may be sent to an AI provider so feedback can be generated. Do not submit special-category personal data or confidential information belonging to another person. We do not ask for it and do not need it to provide LNAT preparation.

7. International transfers

Some providers may process personal data outside the United Kingdom, including in the United States. Where required, we rely on appropriate transfer safeguards such as adequacy regulations, Standard Contractual Clauses, the UK Addendum, or provider participation in recognised transfer frameworks.

8. Retention

We keep account and study data while your account is active. If you delete your account, we delete or anonymise personal account data within a reasonable period unless we need to keep limited records for billing, security, legal, or dispute-resolution reasons.

Mailing-list records are kept until you unsubscribe or ask us to remove them. Security and operational logs are kept for a limited period unless needed to investigate abuse or technical problems.

9. Your rights

Depending on the circumstances, you may have the right to access, correct, erase, restrict, object to, or receive a copy of your personal data. Where we rely on consent, you may withdraw it at any time.

To exercise these rights, email hello@jurica.io. You also have the right to complain to the Information Commissioner’s Office at ico.org.uk.

10. Children

Jurica is intended for LNAT candidates aged 16 and above. We do not knowingly collect personal data from children under 16. If you believe a child under 16 has created an account, contact us and we will review it.

11. Security

We use authentication, access controls, encrypted transport, managed infrastructure, and limited operational access to protect data. No internet service can guarantee perfect security, but we design Jurica to minimise unnecessary collection and exposure.

12. Changes

We may update this policy as Jurica changes. The effective date above shows when the policy was last revised. Material changes will be posted here and, where appropriate, sent to active users.