Privacy Policy

1. Information We Collect

When you create an account and use the Neurogenetics Institute platform, we collect the following personal data:

• Account information — your name and email address, used to create and manage your account.
• Assessment results — your responses and results from our learning assessments.
• Practice data — your activity in the Neurogenetics Academy, including quiz answers, scores, progress and streaks.
• Payment metadata — limited billing details processed by our payment provider (we do not store full card numbers).

We also collect limited automatically generated information when you visit our website, such as IP address, browser type and device information, which is needed to operate and secure the service.

2. Why We Collect Your Data

We use your personal data solely to provide the educational service you signed up for — running the Neurogenetics Academy, saving your assessment and practice progress, managing your subscription, communicating with you about your account, and keeping the platform secure. We do not use your data to train external models, and we never sell it.

3. Who We Share Your Data With

We share your data only with the trusted providers that power the service, and only the minimum each one needs:

• Supabase — handles authentication and securely stores your account and learning data.
• Stripe — processes subscription payments and billing.
• Cloudflare — hosts the website and protects it from abuse.
• Web3Forms — delivers messages sent through our contact, open-day and assessment forms to our team inbox.
• Google Fonts — serves the typefaces used across the site.

No one else. We do not sell, rent or trade your personal information, and we never share it with advertisers. Data is only disclosed if required to do so by law.

4. Data Retention

We keep your personal data for as long as your account is active. If you delete your account, your data is removed within 30 days. Limited information may be retained for longer where we are legally required to do so (for example, financial records relating to payments).

5. Users Under 16

If you are under 16, you must have your parent/guardian's permission to use this service. Parents can request data deletion on behalf of their child by emailing the address in Section 8.

• Little Explorers (ages 5–11): our children's practice area asks a parent or guardian to confirm consent before any progress is saved, in line with UK GDPR Article 8 and the ICO Children's Code. Progress is stored on the device first; it only reaches our servers if a parent links the account for reports.
• We apply data minimisation for children — we collect only what is needed to adapt difficulty and show parents progress, never behavioural advertising, never tracking pixels, and no data is sold or shared for marketing.
• Parents can ask for a copy or deletion of their child's data at any time via [email protected].

6. Your GDPR Rights

Under the UK GDPR and EU GDPR, you have the right to:

• Access — request a copy of the personal data we hold about you.
• Rectification — ask us to correct anything that is inaccurate or incomplete.
• Erasure — request that we delete your personal data.
• Portability — receive your data in a structured, machine-readable format so you can reuse it elsewhere.

To exercise any of these rights, email the address below. We will respond within one month.

7. Cookies

This site uses essential cookies and browser storage — the minimum needed to keep you signed in and remember your preferences — plus Google Analytics, which collects anonymous usage data (pages visited, approximate region, device type) to help us understand how the site is used. Analytics data is aggregated and never used to identify individual learners. We do not run third-party advertising cookies. A small number of trusted providers listed above (such as our fonts and form delivery service) may set technical cookies or receive your IP address when their components load. You can control or clear cookies at any time through your browser settings, and you can review Google’s data practices at policies.google.com/technologies/partner-sites.

8. Contact & Data Requests

For any privacy questions or to make a data request (access, correction, deletion or portability), email [email protected] or use our contact page.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date.