Last updated: March 2025
XenAI Limited ("we", "us", "our") operates the CSCS Mock Test app (the "Service"). This Privacy Policy explains how we collect, use, and protect your personal information.
Account Information
When you register, we collect your email address and an optional display name. If you sign in with Google, we receive your email and name from Google's OAuth service.
Usage Data
We collect information about how you use the Service, including quiz results, practice session data, study progress, and feature interactions. This helps us personalise your learning experience.
Payment Information
Payments are processed by Stripe. We do not store your card details. We receive confirmation of successful payments and the plan purchased.
Technical Data
We may collect your IP address, browser type, device information, and cookies to operate and improve the Service.
•
To provide and personalise the Service
•
To track your learning progress and generate analytics
•
To process payments and manage your subscription
•
To send password reset emails and important account notices
•
To improve our question bank and app features
•
To detect and prevent fraud or abuse
We do not sell your personal data. We share data only with:
•
Stripe — for payment processing
•
OpenAI — for AI-powered explanations (question text only, no personal data)
•
Google — if you use Google Sign-In
•
Service providers who assist in operating our platform, under confidentiality agreements
We retain your account data for as long as your account is active. You may delete your account at any time from the Settings page, which permanently removes your data.
We use essential cookies to maintain your session. No third-party advertising cookies are used.
Under UK GDPR you have the right to:
•
Access the personal data we hold about you
•
Request correction of inaccurate data
•
Request deletion of your data
•
Object to processing
•
Data portability
To exercise any right, email us at xenailimited@gmail.com.
We use industry-standard security measures including encrypted connections (HTTPS), hashed passwords, and access controls. No system is 100% secure; please use a strong, unique password.
The Service is not intended for users under 13. We do not knowingly collect data from children.
We may update this policy and will notify you by updating the "Last updated" date. Continued use constitutes acceptance.
XenAI Limited
Email: xenailimited@gmail.com
