Privacy Policy

1 Who we are

RADevo is an educational revision quiz platform operated by Ash Radford, trading as RADevo ("we", "us", "our"). RADevo is based in England, United Kingdom.

For the purposes of UK data protection law, RADevo acts as a data processor on behalf of schools (who are the data controllers) in relation to student data. RADevo acts as a data controller in relation to data collected directly from schools and account holders.

Contact us at: info@radevo.co.uk

2 What data we collect

We collect only the data necessary to provide the RADevo platform. This includes:

• Google account email address — used to authenticate users and identify whether they are a teacher or student. We do not have access to passwords.
• Display name — a name chosen by the student (not necessarily their real name) shown on their dashboard and leaderboard.
• Quiz scores and activity data — which questions were answered, whether they were correct, timestamps, and percentage scores. This is the core educational data the platform is built around.
• Profile preferences — avatar selection, streak data, points accumulated. These are cosmetic and motivational features.
• Class membership — which class or classes a student belongs to, as assigned or selected within the platform.

We do not collect names, addresses, dates of birth, photographs, or any special category personal data as defined under UK GDPR.

3 How we use data

Data is used solely for the following purposes:

• Authenticating users and displaying their personalised dashboard
• Recording quiz activity so teachers can monitor progress and identify areas for improvement
• Generating class leaderboards and progress statistics visible to teachers and the individual student
• Sending homework reminder emails where enabled by the teacher
• AI-powered analysis of class performance (where the school has subscribed to this feature) — this analysis uses aggregated class data, not individual student identifiers

4 Legal basis for processing

Where RADevo acts as a data processor, processing is carried out under the instructions of the school (data controller) under a Data Processing Agreement.

Where RADevo acts as a data controller (e.g. in relation to school account holders and billing contacts), the legal basis is:

• Contract — processing necessary to deliver the service agreed with the school
• Legitimate interests — for platform security, fraud prevention, and service improvement

5 Where data is stored

RADevo runs on Google's infrastructure. Data is stored in:

• Google Sheets — quiz scores, student profiles, homework and assignment records. Each school's data is stored in a separate, dedicated Google Sheet accessible only to RADevo and the school's authorised teacher accounts.
• Google Apps Script — the application logic that processes requests and serves the platform.

Google's data centres are located within the European Economic Area and/or the United Kingdom. Google LLC acts as a sub-processor under Google's standard data processing terms.

For schools subscribing to AI-powered features, quiz and class performance data is processed by Anthropic, Inc. (the provider of the Claude AI model) via their API. This processing is subject to Anthropic's data processing terms. No student names or email addresses are sent to the AI — only anonymised question, score, and topic data.

6 Data retention

Student quiz data and profiles are retained for the duration of the school's active subscription plus a period of up to 12 months after the subscription ends, to allow for continuity if a school renews.

Data collected during a free trial that does not convert to a paid subscription is retained for up to 30 days after the trial ends, after which it may be deleted.

Schools may request deletion of their data at any time by contacting info@radevo.co.uk. Deletion requests will be fulfilled within 30 days.

7 Data sharing

We do not sell, rent, or share personal data with third parties for commercial purposes. Data may be shared with:

• Google LLC — as the infrastructure and storage provider (sub-processor)
• Anthropic, Inc. — for AI-powered analysis features only, and only where the school has subscribed to this feature
• The school's authorised teachers — who can view their own students' quiz scores and progress within the platform

No data is shared with other schools, third-party advertisers, or marketing companies.

8 Your rights

Under UK GDPR, individuals have the right to:

• Access the personal data we hold about them
• Request correction of inaccurate data
• Request deletion of their data ("right to be forgotten")
• Object to or restrict processing
• Data portability

For students, these rights should in the first instance be exercised through the school (as data controller). Schools may then contact RADevo to fulfil the request. Direct requests can also be made to info@radevo.co.uk.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk if you believe your data has been mishandled.

9 Cookies

RADevo uses session storage (a browser feature similar to cookies, but cleared when the browser tab is closed) to maintain login state within a session. No persistent tracking cookies are used. No third-party advertising or analytics cookies are set.

10 Security

Access to student data is restricted to authorised teacher accounts at each school and to RADevo administrators. All data is transmitted over HTTPS. Google's infrastructure includes encryption at rest and in transit.

In the event of a data breach that is likely to result in risk to individuals, RADevo will notify the affected school within 72 hours of becoming aware, in accordance with UK GDPR obligations.

11 Changes to this policy

We may update this privacy policy from time to time. Schools will be notified of any material changes by email. The current version will always be available at radevo.co.uk/privacy.