← Back to home

Privacy Notice

Last updated: 1 August 2026

1. Who we are

This Privacy Notice is issued by Prestige Science Prep ("we", "us", "our"), which operates the Prestige Science Prep website and study application (the "Service"). For the personal data we collect about users of the Service, Prestige Science Prep acts as the data controller.

2. Personal data we collect

  • Account data: name, email address, password (stored hashed), profile preferences, selected board / qualification / subjects.
  • Authentication data: sign-in tokens, sessions, and provider identifiers if you sign in with a third-party provider (for example, Google).
  • Usage data: the boards, subjects, topics, and resource types you select; revision notes, topic questions, mock papers, lesson plans, and classroom activities you generate; remaining credit balance and credit ledger; timestamps and event logs.
  • Device and technical data: IP address, browser type, device identifiers, language, and similar telemetry needed to operate the Service securely and to detect abuse.
  • Support data: messages and attachments you send to us when requesting support.
  • Payment data:
    • For card, wallet, and international purchases, payment is processed by our reseller Paddle, who acts as the Merchant of Record. Paddle collects the payment details (card number, billing address, tax information) directly under its own privacy policy. We receive only a transaction reference, the amount, the plan purchased, your customer ID at Paddle, and status updates.
    • For Easypaisa and bank transfers, we receive the transaction reference (TID) you enter, the payment method, the amount, and the screenshot of the payment confirmation you upload. We do not collect or store your card, wallet PIN, or banking credentials.

3. Why we use your data and our legal basis

  • To provide the Service (create your account, generate materials, allocate and deduct credits, deliver downloads and exports) — performance of contract.
  • To bill and fulfil purchases (route payments to Paddle or verify manual payments, credit your account) — performance of contract and legal obligation.
  • To secure the Service, detect fraud and abuse, enforce our Terms — legitimate interests.
  • To improve and debug the Service (aggregate analytics, error logs, quality reviews of AI outputs) — legitimate interests.
  • To respond to support requests — performance of contract / legitimate interests.
  • To send service notices (account, billing, security) — performance of contract / legal obligation.
  • To send marketing, where applicable — consent, which you can withdraw at any time.
  • To comply with law and respond to lawful requests — legal obligation.

4. Who we share your data with

  • Service providers / sub-processors that host, store, monitor, or transmit data on our behalf — including cloud hosting and database, authentication, error tracking and analytics, and AI model providers used to generate revision notes, mock papers, lesson plans, and classroom activities. These providers act on our instructions under appropriate contracts.
  • Merchant of Record (Paddle) — for card, wallet, and international purchases, we share the details needed to complete the sale, manage subscriptions and one-off purchases, process payments, handle refunds, calculate and remit sales tax/VAT, and issue invoices. Paddle processes this data as an independent controller under its own privacy policy.
  • Local payment providers (Easypaisa and our bank) — when you send a payment directly, your provider processes the transaction under its own privacy policy. We only receive the reference and confirmation you choose to share with us.
  • Professional advisers (legal, accounting) where reasonably necessary.
  • Authorities where required by law, court order, or to protect rights, safety, or property.

We do not sell your personal data.

5. International transfers

Some of our service providers and Paddle operate outside your country, including in the European Economic Area, the United Kingdom, and the United States. Where personal data is transferred across borders, we (and Paddle, for its own processing) rely on appropriate safeguards such as Standard Contractual Clauses, adequacy decisions, or equivalent mechanisms.

6. How long we keep data

We keep account and usage data for as long as your account is active and for a reasonable period afterwards to handle disputes, comply with law, and protect our legal interests. Transaction records (including records held by Paddle) are kept as long as required by tax and accounting law. We delete or anonymise data when it is no longer needed.

7. Your rights

Subject to your local law, you may have the right to access, correct, delete, restrict or object to processing of your personal data, to data portability, and to withdraw consent at any time. Users in the UK/EEA also have the right to lodge a complaint with their supervisory authority. We aim to respond to verified requests within one month.

To exercise any of these rights, contact us through the in-app support channel. For data held by Paddle in connection with a card purchase, you can also contact Paddle directly.

8. Security

We use appropriate technical and organisational measures to protect personal data, including encryption in transit, access controls, audit logging, and row-level security on user data. Payments made by card are handled by Paddle in a PCI-DSS-compliant environment and never touch our servers. No method of transmission or storage is completely secure, however, and we cannot guarantee absolute security.

9. Cookies and similar technologies

We use a small number of cookies and similar technologies that are essential to operate the Service (for example, to keep you signed in and to protect against abuse). Paddle also sets cookies on its checkout pages to process payments and prevent fraud. Where we use analytics or marketing cookies, we will ask for your consent and you will be able to manage your preferences.

10. Children

The Service is intended for students of school and college age and for teachers. If you are below the age of digital consent in your country, you may only use the Service with the involvement of a parent or legal guardian.

11. Changes to this notice

We may update this Privacy Notice from time to time. Material changes will be communicated through the Service or by email.

12. Contact

For any privacy questions or requests, contact Prestige Science Prep through the in-app support channel.

See also: Terms & Conditions · Refund Policy