Privacy notice — Learning Hub

Last updated: 12 August 2026 · Hanalytic Limited (t/a Moyako), company no. 10576728, England & Wales · info@moyako.com

What we collect — only if you create an account

• Email address and an optional display name — to identify your account. Lawful basis: performance of a contract (UK GDPR Art. 6(1)(b)).
• Account type — student or parent, to show the right features. Basis: contract.
• Family sign-ins — if a parent creates a learner's sign-in, the parent provides that learner's display name, sign-in email and password (stored only as a secure hash, as below), plus the family link between the two accounts. Basis: contract; for children, the creating parent or guardian gives the consent (UK GDPR Art. 8).
• Password — stored only as a secure one-way hash (bcrypt). We never see it.
• Learning data — topic mastery, practice attempts, exam-simulator scores, streaks, chosen subjects and exam boards. Used solely to sync your progress and choose what you practise next — never for advertising or marketing. Basis: contract.
• Learning+ subscription data — your plan status and a Stripe customer/subscription reference. Payments are processed by Stripe (web checkout); we never receive or store card numbers. Basis: contract; tax records are held by the processor.
• Server logs — IP address and timestamps, kept up to 30 days by our host for security and troubleshooting. Basis: legitimate interests (keeping the service safe).

What stays on your device

• All signed-out progress and settings.
• Any postcode you enter for the university-pathways feature — it is used entirely on-device and never sent to us.
• The practice questions themselves — generated on your device.

Parents & family sign-ins

There are two ways a parent can be connected to a learner, with different privacy rules:

• Linked learner (the learner's own account) — linking needs the learner's consent, approved in their own app. Linked parents see aggregate progress only — streak, training score, topics practised, weaker topics — never questions or answers, and can never open the learner's account. Either side can unlink at any time.
• Family sign-in (created by a parent) — a parent or guardian can create and manage sign-ins for up to four learners. Here the parent is the account manager and consent-giver: they set the learner's name, sign-in email and password, can reset that password, and can open that learner's practice from their own sign-in — so for family sign-ins the parent can see that learner's practice, not just aggregates. Returning to the parent side always asks for the parent's password. Learning+ on the parent account also covers its family sign-ins. Unlinking removes the family connection but keeps the learner's account and data intact.

Children

Learning Hub is designed to the UK Age Appropriate Design Code: high-privacy by default, no profiling, data minimisation, and learning data used only to help you on your own dashboard. Younger learners' accounts can be created and managed by a parent or guardian, who acts as the consent-giver for that account (family sign-ins, above). The only measurement is anonymous and aggregated — analytics events carry no user identity, ad-personalisation is permanently off, and a Data Protection Impact Assessment covering under-18 users is on file. Personalised ads are off for everyone and cannot be turned on.

Who we share with

Only service providers acting on our instructions: Hostinger (hosting), Stripe (payments), and — in the mobile apps — Firebase for app infrastructure and the anonymous, aggregated usage measurement described above (advertising-ID collection stays disabled; events are never linked to your identity). We use no advertising or tracking providers. We never sell personal data. Full details: moyako.com/privacy-policy-learning.

Your rights

Under UK GDPR you can access, correct, delete, restrict or object to the use of your data, and receive a copy of it. To delete your account, email info@moyako.com with the subject "Delete my account" — we erase your account and learning data within one month (usually much sooner). Complaints: ico.org.uk.

Retention

Account and learning data: while your account is active, deleted on request or after 24 months of inactivity. Server logs: up to 30 days. On-device data: yours — clear it any time in Settings.

Some providers (Stripe, Google, Apple) may process data outside the UK/EEA under the UK International Data Transfer Addendum or equivalent safeguards. Material changes to this notice are announced here and in-app.