← Back to home

Privacy Policy

Last updated: 29 March 2026

tmua.study (“we”, “us”, “our”) is a TMUA practice platform operated by Henrik Singh. This privacy policy explains what data we collect, why we collect it, and how we handle it.

We take privacy seriously, especially given that many of our users are under 18. We collect only what we need to run the platform, and we don’t sell or share your personal data with third parties for marketing purposes.

What we collect

Account information. When you create an account, we collect your name, email address, and authentication data. This is handled by our authentication provider, Clerk. If you sign up with Google, we receive your name and email from Google — we don’t receive or store your Google password.

Usage data. When you use the platform, we record which questions you answer, your responses, your scores, and timestamps. This is necessary to provide core features: tracking your accuracy by topic, showing your progress, saving your mistakes for review, and estimating your TMUA score.

School information. If you join through a school, we record which school you’re linked to. Teachers at your school can see your name, email address, your accuracy by topic, your estimated score, and your practice activity. They cannot see your password or any data unrelated to your TMUA preparation.

Payment information. If you purchase Premium, payment is processed by Stripe. We do not see, store, or have access to your full card number. Stripe handles all payment data in accordance with PCI DSS standards. We receive confirmation that payment was successful, along with a Stripe customer ID that links to your account.

Analytics data. We use PostHog to collect anonymous usage analytics — page views, feature usage, and general engagement patterns. This helps us improve the platform. PostHog data is aggregated and does not identify individual users. You can opt out of analytics by enabling “Do Not Track” in your browser.

Why we collect it

We collect data for these purposes only:

  • To provide the service. Tracking your answers, scores, and progress is the core function of the platform.
  • To improve question quality. Aggregated accuracy data helps us identify questions that are too easy, too hard, or potentially flawed.
  • To enable school features. Teachers need to see student progress to support TMUA preparation effectively.
  • To process payments. Stripe needs minimal information to handle transactions.
  • To improve the platform. Anonymous analytics help us understand which features are used and where the experience can be better.

Who can see your data

  • You can see all your own data — your answers, scores, topics, and progress.
  • Your school’s teachers (if you’ve joined a school) can see your name, email address, accuracy by topic, estimated score, practice activity, and assignment completion. They cannot see your password, payment information, or data from other platforms.
  • Us (the tmua.study team) can access data for the purposes of providing support, investigating reported issues, and improving the platform. We do not routinely review individual student data.
  • No one else. We do not sell, rent, or share your personal data with third parties for their own purposes.

Third-party services

We use the following third-party services, each with their own privacy policies:

All data is stored in the UK or EU (Firebase europe-west2 London region, Vercel London edge).

Data retention

We keep your data for as long as your account exists. If you delete your account, we delete your personal data within 30 days. Aggregated, anonymised data (such as question accuracy statistics) may be retained indefinitely as it cannot be linked back to you.

Your rights

Under UK GDPR, you have the right to:

  • Access your personal data — request a copy of everything we hold about you.
  • Rectify inaccurate data — ask us to correct anything that’s wrong.
  • Delete your data — ask us to delete your account and all associated data.
  • Export your data — receive your data in a portable format.
  • Object to processing — opt out of analytics by enabling Do Not Track.

To exercise any of these rights, email us at hello@tmua.study. We’ll respond within 30 days.

Users under 18

Most of our users are 16–18 years old. We do not knowingly collect data from children under 13. Users aged 13–17 may use the platform; in the UK, users aged 13 and over can consent to data processing for online services under UK GDPR (Article 8, UK implementation sets the age at 13).

We do not serve advertising, we do not build marketing profiles, and we do not share data with social media platforms.

Cookies

We use strictly necessary cookies for authentication (keeping you logged in) and basic functionality. We do not use advertising cookies or third-party tracking cookies. PostHog analytics uses a first-party cookie for session tracking, which you can opt out of via Do Not Track.

Changes to this policy

If we make material changes to this policy, we’ll update the “last updated” date and, where appropriate, notify users via email or an in-app notice.

Contact

For any privacy questions or requests, contact us at:

Email: hello@tmua.study

tmua.study is operated by Henrik Singh, Unit 160120, PO Box 7169, Poole, BH15 9EL, United Kingdom.