Privacy notice — Learning Hub

Last updated: 3 September 2026 · Hanalytic Limited (t/a Moyako), company no. 10576728, England & Wales · info@moyako.com

What we collect — only if you create an account

• Email address and an optional display name — to identify your account. Lawful basis: performance of a contract (UK GDPR Art. 6(1)(b)).
• Account type — student or parent, to show the right features. Basis: contract.
• Family sign-ins — if a parent creates a learner's sign-in, the parent provides that learner's display name, sign-in email and password (stored only as a secure hash, as below), plus the family link between the two accounts. Basis: contract; for children, the creating parent or guardian gives the consent (UK GDPR Art. 8).
• Password — stored only as a secure one-way hash (bcrypt). We never see it.
• Learning data — topic mastery, practice attempts, exam-simulator scores, streaks, chosen subjects and exam boards. Used solely to sync your progress and choose what you practise next — never for advertising or marketing. Basis: contract.
• Learning+ subscription data — your plan status and a Stripe customer/subscription reference. Payments are processed by Stripe (web checkout); we never receive or store card numbers. Basis: contract; tax records are held by the processor.
• Server logs — IP address and timestamps, kept up to 30 days by our host for security and troubleshooting. Basis: legitimate interests (keeping the service safe).

What stays on your device

• All signed-out progress and settings.
• Any postcode you enter for the university-pathways feature — it is used entirely on-device and never sent to us.
• The practice questions themselves — generated on your device.

Usage statistics — mobile apps only

The iOS and Android apps count, anonymously, which screens are seen, which features are used (for example starting a practice session or submitting an exam simulation) and whether practice reminders are switched on or opened, through Google Firebase Analytics. These counts carry no user ID, no advertising ID, no free text and nothing from your learning content, and are never joined across apps, devices or sessions — they tell us how many people used a screen, never who. Screen and feature names come from a fixed list built into the app; nothing else can be sent.

• On by default, and yours to switch off at any time: Settings → Privacy & data → Anonymous usage statistics → Off. The change takes effect immediately on that device.
• Nothing on the web — learning.moyako.com in a browser sends no usage statistics at all.
• Lawful basis: legitimate interests (understanding which parts of the app are used, so we can improve it) — the counts are anonymous.

Parents & family sign-ins

There are two ways a parent can be connected to a learner, with different privacy rules:

• Linked learner (the learner's own account) — linking needs the learner's consent, approved in their own app. Linked parents see aggregate progress only — streak, training score, topics practised, weaker topics — never questions or answers, and can never open the learner's account. Either side can unlink at any time.
• Family sign-in (created by a parent) — a parent or guardian can create and manage sign-ins for up to four learners. Here the parent is the account manager and consent-giver: they set the learner's name, sign-in email and password, can reset that password, and can open that learner's practice from their own sign-in — so for family sign-ins the parent can see that learner's practice, not just aggregates. Returning to the parent side always asks for the parent's password. Learning+ on the parent account also covers its family sign-ins. Unlinking removes the family connection but keeps the learner's account and data intact.

Children

Learning Hub is designed to the UK Age Appropriate Design Code: high-privacy by default, no profiling, data minimisation, and learning data used only to help you on your own dashboard. Younger learners' accounts can be created and managed by a parent or guardian, who acts as the consent-giver for that account (family sign-ins, above). The only measurement is the anonymous, aggregated usage statistics described above — events carry no user identity, the switch to turn them off is in Settings, ad-personalisation is permanently off, and a Data Protection Impact Assessment covering under-18 users is on file. Personalised ads are off for everyone and cannot be turned on.

Who we share with

Only service providers acting on our instructions: Hostinger (hosting), Stripe (payments), and — in the mobile apps — Firebase for app infrastructure and the anonymous usage statistics described under Usage statistics above (advertising-ID collection stays disabled; events are never linked to your identity). We use no advertising or tracking providers. We never sell personal data. Full details: moyako.com/privacy-policy-learning.

Your rights

Under UK GDPR you can access, correct, delete, restrict or object to the use of your data, and receive a copy of it. To delete your account, email info@moyako.com with the subject "Delete my account" — we erase your account and learning data within one month (usually much sooner). Complaints: ico.org.uk.

Retention

Account and learning data: while your account is active, deleted on request or after 24 months of inactivity. Server logs: up to 30 days. On-device data: yours — clear it any time in Settings.

Some providers (Stripe, Google, Apple) may process data outside the UK/EEA under the UK International Data Transfer Addendum or equivalent safeguards. Material changes to this notice are announced here and in-app.