Charta

Privacy

Last updated 7 October 2026

This describes what Charta Learning actually stores, why, and who else touches it. It is written from the application itself rather than from a template, so if something here is not in the list, it is not collected.

Who is responsible

Charta Learning is operated by Sets and Social Limited, a company registered in England and Wales, number 16932988, at 14 Alison Drive, Camberley, Surrey, GU15 2DY, which is the data controller for the information described here. Questions about any of it: admin@charta-learning.com.

What is collected, and why

WhatWhy
Your email address It identifies the account, and it is where a password reset or an address-verification message goes.
Your password, hashed So you can sign in. It is stored only as a hash and is never held in a form anyone can read back, including us.
If you sign in with Google or Apple: the provider’s identifier for your account there, and the email address it confirms So the same sign-in reaches the same account next time. We keep no token, name or photo from the provider. An account made this way has no password unless you ask for a link to set one.
Exam date and study hours per week The study plan is built backwards from your exam date across the hours you say you have.
Every question you answer — which one, whether you were right, how long you took, and when This is the product. The skill estimates, the plan, the review schedule and the exam-day forecast are all derived from this record and nothing else.
Mock exam sittings To score them and show the timing analysis afterwards. Scores are also compared, as a group, so a result can say what share of learners it beat. That is shown only once at least 30 learners have sat a paper of the same length, and nobody else ever sees your score or learns that you sat one.
Sessions One record per active sign-in, so a session can be expired.
Two-factor details, if you enable it The shared secret is encrypted at rest and the recovery codes are hashed, so neither can be read out of a database copy.
Billing records, if you buy a subscription or lifetime access Stripe customer, subscription, checkout and payment identifiers, and invoice numbers, amounts and status, so the app knows what you are entitled to and can show you a receipt.
Purchase records, if you buy in the iPhone app Apple’s transaction identifiers for the purchase, which plan it was, when it renews or ends, and whether it was refunded, so the app knows what you are entitled to. Apple takes the payment; we never see your Apple ID, name or payment details.
Purchase records, if you buy in the Android app Google Play’s purchase token and order number, which plan it was, when it renews or ends, and whether it was refunded, so the app knows what you are entitled to. Google takes the payment; we never see your Google account, name or payment details.
A notification token, if you turn on notifications in the iPhone app Apple issues it for your phone so that reminders can be sent to it. It is deleted when you sign out on that phone, when Apple reports it no longer works, or with your account.
Questions you report So a flagged question can be reviewed and fixed.
Questions you ask the tutor, and its answers, if you are on a paid plan and use it To count them against your monthly allowance, to let a follow-up question continue the conversation, and so that an answer you report can be read by a reviewer.
Your written answers to Level III essay questions, and the marks and feedback they were given To mark them, to show you your marks and your past answers, to count them against your marking allowance, and so that a mark you dispute can be read by a reviewer.
Why you got a question wrong, if you say The reason you tap after a wrong answer, so your home screen can show which kinds of mistake you make most.
Which formula cards you marked as known or not, and when To bring each card back when it is due and put the ones you missed first.
Your reminder email settings and time zone, and which reminders were sent when To send a reminder at your local hour, never twice in a day, and never once you have turned it off. Reminders go only to a confirmed address, and every one has a one-click link to stop it.
Your invite code, who invited you if you signed up through a friend’s link, and any free access an invite earned you To give the extra free practice an invite brings, and to reward the person who sent it once you have paid. They see how many people signed up through their link and how many paid, and nothing else: not your email address, and nothing you study.
If you use study buddies: the nickname you choose, whether you show your exam date and allow nudges, who you have asked or accepted, and which nudges were sent on which day To let up to three people you agree with see that you are studying. Once you both accept, a buddy can see your nickname, your current streak, whether you have met today’s goal, which of the last seven days you studied on, and your exam date only if you switched that on. They never see your email address, answers, scores, topics, mock results or payments. A nudge is a fixed message with your nickname in it. If you report a buddy, we keep the nickname you reported, your chosen reason and the date, to review it. Ending a buddy link, or removing all your buddies in Settings, takes that access away at once, and deleting your account erases all of it.
Whether you saw the upgrade screen, for which feature, and whether you started a checkout So we can see, in totals across everyone, where people stop on the way to paying. Nothing about it is sent to anyone else.
If you ask to hear about another exam: the email address you give (or your account’s, if you ask from Settings), the exam you typed, where you asked, and when To email you once, when we prepare for that exam, and to see in totals which exams people want. A confirmation goes out when you ask, with a link that removes your request. Nothing else is sent. This is not joined to an account, except that deleting your account removes it.
If you ask for the free formula sheet: the email address you give, the level you chose, whether you said yes to further emails, and when the link was sent and first opened, and how many follow-ups have been sent To send you the sheet, which is what you asked for. Further emails only if you ticked the box that says so; that yes is separate and optional, and means two emails over the following week (a study tip, then the free trial), each with a link that removes your address. We stop sooner if you make an account. This is not an account and is not joined to one.

Page loads are counted, not visitors. When someone who is not signed in opens the home, plans or about page, or a page of the syllabus, free tools or blog, a daily total for that section goes up by one. No cookie is set for this and nothing that could identify the visitor is kept: the total is the whole record. There is no third-party analytics or advertising script anywhere in the service.

Where you came from. If you follow a link we or a partner published, its address may carry short tags saying where the link was (a source, a medium, a campaign, and sometimes a creator's or partner's code). The pages hand those tags on to our own links so they are still on the address when you reach the app. Nothing is stored in your browser to do this. If you sign up, the tags are saved once on your account, so we can count how many people each channel brought and what that cost. A load of a page through a tagged link is also added to a daily total for that source, with nothing that identifies the visitor. The tags say where a link came from, not who you are, and they are deleted with your account. If you pay using a promotion code that a creator or partner gave out, we note which code, so that they can be credited for the sale. That note is deleted with your account too.

Card details never reach this service. Payment is taken on Stripe's own hosted page; the application only ever sees identifiers and amounts.

Who else handles it

There is no advertising, no analytics service, no tracking pixel and no third-party script of any kind on the page. Nothing about your studying is sold, nothing is shared beyond the list above, and we do not use any of it to train a model.

Cookies

One. A session cookie is set when you sign in, lasts 30 days, is marked HttpOnly so scripts cannot read it, Secure so it only travels over HTTPS, and SameSite=Lax so it is not sent on cross-site requests. There are no advertising or analytics cookies, so there is nothing here to consent to.

How long it is kept

Account and study data are kept while the account exists. Questions to the tutor and its answers are deleted after 90 days; one you have reported is kept until a reviewer has dealt with it. Written answers to essay questions, with their marks, are part of your study record and are kept while the account exists. Billing records are kept for as long as tax law requires them, which in the UK is six years. Expired sessions, used password-reset tokens and spent two-factor challenges are discarded. A formula-sheet request is kept until you remove it with the link in the email, or for two years after the sheet was last sent to you, whichever comes first. A request to hear about another exam is kept until we have told you it is ready, until you remove it with the link in the email, or for two years, whichever comes first. To give the free trial only once, we keep a one-way fingerprint of your email address (with any “+tag” and, for Gmail, any dots, ignored) and the date the trial began. It is not linked to your account, it cannot be turned back into your address, and it is kept after the account is deleted so that signing up again does not start a second trial. The same is true of a founding place: the free access we offer a limited number of early learners in return for feedback is given once for each address, so we keep the same kind of fingerprint and the date, and nothing else, after the account is deleted. If you tell us what you think and agree that we may publish it, we keep your words, the name or initials and city you gave, and the wording you agreed to, until you withdraw it in Settings or delete your account, when they are deleted. Nothing is published until we have approved it, and where you had free access it says so beside your comment.

Your rights

Under UK GDPR you can ask for a copy of your data, ask for it to be corrected, ask for it to be deleted, ask for it in a portable form, or object to how it is used. Email admin@charta-learning.com and we will act within one month.

You can delete your account yourself, from Settings, without asking anyone. It removes the account, your answers, your skill estimates, your study plans, your mock exams, your written answers and your questions to the tutor immediately and for good — there is no copy kept and nothing to undo it with. Two things are held back: a live subscription has to be cancelled first, so the account is not deleted out from under a payment that is still running, and an account that has reviewed questions in our bank is handled by hand instead, because those review decisions are records about the questions rather than about you.

Reports you filed about a question stay, with your name taken off them: they are about the question, other candidates are still being served it, and a report that vanishes takes a genuine problem with it. Tutor answers you reported do not stay: the question in them is in your own words, so they go with the account.

If you think we have handled your data badly, you can complain to the Information Commissioner's Office at ico.org.uk.

Security

Passwords are hashed, two-factor secrets are encrypted at rest and recovery codes are hashed. The session cookie cannot be read by JavaScript. Access to the administrative tools is restricted to an operator role that has no access to learner data, with one exception you choose: a tutor answer you report reaches the reviewers with its question, and a mark you dispute reaches them with your written answer, in both cases without your name or email.

Changes

If this changes materially, the date at the top changes and anyone with an account is told by email.