Privacy Policy

Last updated: 11 July 2026

This policy explains what personal data elid collects and how we use it. The data controller is [LEGAL NAME / OPERATOR], contactable at [CONTACT EMAIL].

1. Data we collect

Category	What	Source
Account	Email address; display name and profile photo (if you sign in with Google)	You / Google Sign-In
Content you submit	The exam questions and settings (subject, board, level) you enter	You
Generated content	AI answers and marking produced for you; your recent history and favourites	Generated; stored in your browser and, for share links, in our database
Usage data	Daily request counts, subscription/premium status, streaks	Automatic
Technical	A hashed (irreversible) form of your IP address for rate limiting; reCAPTCHA/App Check signals	Automatic
Payment	Handled by Lemon Squeezy — we receive subscription status, not card details	Lemon Squeezy

2. How we use your data

To provide the service — generate answers, mark responses, and show your history.
To manage accounts, enforce fair-use limits, and prevent abuse and fraud.
To operate paid subscriptions and apply the correct usage tier.
To maintain security and improve reliability.

3. Legal bases

Where UK/EU data-protection law applies, we rely on: performance of a contract (providing elid to you), legitimate interests (security, abuse prevention, service improvement), and consent where required. You can withdraw consent at any time.

4. Who we share it with

We do not sell your personal data. We share it only with service providers who process it on our behalf:

Provider	Purpose	Data involved
OpenAI	Generating answers and marking	The question text and settings you submit
Google Firebase	Authentication, hosting, database	Account and usage data
Google reCAPTCHA / App Check	Bot and abuse prevention	Device/browser signals
Lemon Squeezy	Payments & Merchant of Record	Billing details you provide at checkout

Some of these providers are based outside your country (including the United States). Where required, transfers are protected by appropriate safeguards such as Standard Contractual Clauses. Do not enter sensitive personal information into question fields — it may be sent to OpenAI for processing.

5. Cookies & local storage

elid uses browser storage and cookies that are mainly essential or functional: keeping you signed in, remembering your theme and onboarding preferences, and caching recent answers locally to reduce cost. Google reCAPTCHA may set cookies for abuse prevention. We do not use third-party advertising cookies.

6. Data retention

We keep account and usage data for as long as your account is active. Share links expire automatically after 24 hours. Rate-limit records are short-lived. History stored in your browser stays until you clear it. When you delete your account, we delete or anonymise associated personal data, except where we must keep records (e.g. for tax) via Lemon Squeezy.

7. Your rights

Depending on where you live, you may have the right to access, correct, delete, restrict, or port your data, and to object to certain processing. To exercise any of these, contact [CONTACT EMAIL]. You also have the right to complain to your local data-protection authority [e.g. the UK ICO].

8. Children’s privacy

elid is intended for students aged [16] and over. If you are under 18, a parent or guardian should review this policy and consent on your behalf. We do not knowingly collect data from children below the minimum age; if you believe we have, contact us and we will delete it.

9. Security

We use industry-standard measures including authentication, App Check, hashed IPs, server-side validation, and access controls. No system is perfectly secure, but we work to protect your data.

10. Changes & contact

We may update this policy; the “Last updated” date reflects the latest version. Questions or requests: [CONTACT EMAIL].