Privacy
notice.

§ 01What we collect

• Your email address (for sign-in)
• A display name (for personalisation)
• Your study progress: which questions you've answered, your spaced-repetition cards, mastery percentages, XP, badges, streaks
• Submitted essays (passed to our AI grader temporarily; not stored beyond the response)

§ 02Where it lives

• Account data: Supabase (EU-hosted Postgres), protected by Row Level Security
• Progress: your device's localStorage AND your Supabase row, kept in sync when signed in
• Essay grading: the essay text is sent to OpenAI's API for grading and is NOT retained by us beyond the immediate response. OpenAI's data handling is governed by their privacy policy.

§ 03What we don't do

• No tracking pixels
• No third-party analytics (no Google Analytics, no Facebook Pixel, no anything)
• No ads
• No selling your data
• No emailing you marketing material (we may email service notices: account confirmation, password reset)

§ 04Cookies

• Supabase sets a session cookie when you sign in. That's the only cookie we set.
• We use localStorage for progress, theme preference, and your "I've seen the cookie notice" acknowledgement.

§ 05Your rights (UK GDPR)

• Right to access: request a copy of your data via hello@vofti.com.
• Right to erasure: delete your account from the dossier; we'll wipe your data within 30 days.
• Right to portability: use the dossier's "export progress" feature for a portable backup code.
• Right to complain: contact the UK ICO (ico.org.uk) if you're unhappy with how we handle your data.

§ 06Children

Vofti is intended for A-Level students (typically 16–18). If you're under 13, please don't use the service. If you're 13–15 we'd prefer parental awareness (we don't enforce this, but it's the right framing).

ContactHow to reach us

hello@vofti.com