Privacy Notice

Azate is a study app for GCSE and A-Level students. It is run by [REGISTERED COMPANY NAME — to be confirmed], a company registered in England and Wales with company number [COMPANY NUMBER — to be confirmed], registered office [REGISTERED OFFICE ADDRESS — to be confirmed].

In data protection language we are the controller for the information described here — we decide what is collected and why, so we are the ones responsible for it.

We are registered with the Information Commissioner’s Office under registration number [ICO REGISTRATION NUMBER — to be confirmed]. Questions about anything in this notice go to our Privacy Lead at privacy@azate.com.

• Students who have an Azate account. You must be 13 or over — see section 10.
• Parents and guardians, if you contact us about your child’s account.
• Visitors to the site who have not signed up.

Things you give us

• Account — your name, email address and password. The password is handled by Google Firebase Authentication; we never see it.
• Your studies — study level, year group, subjects, exam boards, target grades, exam dates, and where you heard about us.
• Your age declaration — that you are 13 or over.
• Things that affect how you learn — you can optionally tell us about a condition such as dyslexia or ADHD. This is health information, which the law treats as especially sensitive, so we only collect it if you explicitly agree and we only use it in the one way described in section 5. You can withdraw that agreement or delete what you told us at any time in Settings.
• Your work — tutor conversations, notes, flashcards, quizzes, your timetable, and any documents or photos you upload.
• Your voice, if you use voice input. We do not store the audio.

Things created as you use Azate

• Study streaks, focus-timer sessions and progress records.
• Technical records needed to run the service securely — sign-in events, rate-limit counters and error reports.

What we do not collect

• No advertising or marketing trackers. There are none on the site.
• No location data.
• No card or bank details. Azate is free during the beta.
• No tracking of you before you sign up.
• We do not sell your information, and we never will. There is no advertising business here to sell it to.

UK data protection law requires us to have a specific legal reason for each thing we do. Here is the whole list.

Where we rely on legitimate interests we have weighed our interest against your privacy and concluded it does not override your rights. You can object to that processing — see section 9.

What gets sent, and where

• Tutor chat — your message and the recent history of that conversation go to OpenAI so it can answer.
• Documents and images you upload — sent to OpenAI so the tutor can read them and answer questions about them. The uploaded copy at OpenAI is set to expire after 7 days.
• Voice input — your audio goes to OpenAI to be understood and answered. We do not keep a recording.
• Notes, flashcards and quizzes — the content you ask us to generate from is sent to OpenAI to generate it.

Your work is not used for training

We do not use your work to train AI models, and neither does OpenAI. We send every request with storage switched off, so OpenAI does not retain your conversations as part of its service. We will not change this without telling you first and having a proper legal basis for it.

Messages are checked for safety before the tutor answers

Your message, and anything the tutor is about to say back, passes through an automated safety check. This is done by software, not by a person — nobody at Azate reads your conversations. If the check finds something concerning the tutor will not answer and you will see a message instead. We keep a count of how often this happens so we know the check is working, but we do not keep a copy of what was said.

Adapting to how you learn

If you told us about a condition that affects how you learn, and you have turned the setting on, we adjust how the tutor explains things. The tutor is never told the name of any condition. That information never appears in statistics and is never shown to anyone else.

The tutor can be wrong

AI generates plausible text; it does not know things. Answers, marks and feedback can be wrong, and none of it is an official grade. Check anything that matters against your own materials or your teacher.

Each of these is a processor: contractually bound to act only on our instructions, to keep your information secure, and not to use it for their own purposes.

We would also disclose information if the law required it, or if it were genuinely necessary to protect someone from serious harm. That has not happened.

Azate is offered in the United Kingdom, but several of the companies in section 6 process data in the United States. When information leaves the UK we rely on the safeguards UK law recognises — either the UK Extension to the EU-US Data Privacy Framework where the company is certified under it, or the UK’s International Data Transfer Agreement together with an assessment of the risks.

You can ask us for details of the safeguards that apply to a particular company at privacy@azate.com.

When you delete your account we remove your account record, everything under it, your uploaded files, and the copies held by our AI provider. Backups age out on their own cycle rather than being edited, which is normal practice; nothing is restored from them into live use.

These are your rights under UK data protection law:

• See what we hold and get a copy of it.
• Correct anything that is wrong.
• Delete it. For children this is treated as close to absolute.
• Take it elsewhere in a machine-readable format.
• Restrict or object to what we do with it, including anything based on our legitimate interests.
• Withdraw consent at any time, without it being difficult. That does not undo what was done while consent was in place.

We answer within one month. It is free. You do not need a parent to ask on your behalf — these are your rights and you can use them yourself.

We do not make decisions about you purely by machine that have a legal or similarly significant effect on you.

Azate is for people aged 13 and over. We do not offer it to under-13s and we do not have a way for a parent to consent on a younger child’s behalf. We ask you to confirm your age when you sign up.

If we find out an account belongs to someone under 13 we suspend it, contact the address on the account, and delete the data unless there is a good reason to keep it briefly.

Because most of our users are children, we have committed to:

• Collecting the least we can to make the product work.
• Setting things to the more private option by default, and never nudging you toward giving up privacy.
• No advertising, no tracking, no selling data, ever.
• Writing notices like this one so they can actually be read.
• Never sharing your work with other students.

If you are a parent or guardian with a question about your child’s account, email privacy@azate.com.

Azate stores a small amount of information on your device. Every item, what it is for, how long it lasts and how to switch it off is listed in the Cookie and Device Storage Policy. You can change your choices there at any time.

Everything travels over an encrypted connection and is encrypted where it is stored. Every request to our servers is checked against your sign-in, and the database rules only ever let an account reach its own data. Access to production systems is limited to the people who need it, and administrative access is logged.

No system is perfectly secure, and we are not going to claim otherwise. If a breach happens that puts you at risk we will tell you, and we will report it to the ICO within 72 hours where the law requires it.

This notice is version 2026-08-19.privacy.2, in effect from 19 August 2026. Every version has a fixed date — it does not silently re-date itself.

If we change something that matters we will tell you by email or in the app before it takes effect, in language you can understand, and we will ask you to agree again where your agreement is what we were relying on. We keep previous versions so you can see what changed.

For anything about this notice or your information, email our Privacy Lead at privacy@azate.com. For everything else, support@azate.co.uk.

If you are unhappy with us

Come to us first. Email privacy@azate.com with the word “complaint” in the subject. We will acknowledge it within 30 days and respond properly as soon as we can. This is a right you have under the Data (Use and Access) Act 2025, not a courtesy.

If we do not sort it out, you can complain to the Information Commissioner's Office, the UK’s data protection regulator, on 0303 123 1113. You can go to them at any point — you do not have to come to us first if you would rather not.