Legal
Privacy Policy
This policy explains what personal data Adjuvare collects, why, and your rights over it. The data controller is Moriah Ogunbiyi, trading as Adjuvare, of [ADDRESS], United Kingdom — contact hello@adjuvare.app.
1. What we collect
- Account data — your email address and a securely hashed password (we never see the password itself).
- Study data — which questions you've answered, your results, flags, and streaks, so your progress follows you across devices.
- Subscription data — your plan status and Stripe customer reference. Card details are collected and held by Stripe; they never touch our servers.
- Tutor questions — the questions you type to Counsel, which are processed to generate an answer.
- Usage analytics — pageviews and feature usage events (PostHog, EU-hosted), and error reports, used to fix bugs and improve the Service.
- Technical data — IP address and basic device information in server logs, used for security and rate-limiting.
2. Why we process it (lawful bases)
- To provide the Service you signed up for (contract): accounts, progress sync, subscriptions, the tutor.
- To run and improve the Service (legitimate interests): analytics, debugging, abuse prevention and rate-limiting.
- To meet legal obligations: tax and accounting records of payments.
We do not sell your data, and we do not use it for third-party advertising.
3. Who processes data for us
We use a small number of service providers, each bound by data-processing terms:
- Supabase (database & authentication — hosted in Frankfurt, EU)
- Stripe (payments)
- Vercel (website hosting / CDN)
- Railway (API hosting)
- Anthropic (AI processing for the Counsel tutor — your tutor questions and the retrieved case summaries are sent to Anthropic's API to generate answers; under Anthropic's commercial terms, API data is not used to train its models)
- PostHog (analytics — EU-hosted)
- Cloudflare (domain, DNS and email forwarding)
Some of these providers are based in the United States. Where data leaves the UK, it is protected by recognised safeguards such as the UK Extension to the EU–US Data Privacy Framework or standard contractual clauses.
4. How long we keep it
Account and study data are kept while your account exists, and deleted within 30 days of account deletion. Payment records are kept for 6 years as required by UK tax law. Analytics data is retained per PostHog's standard retention and is pseudonymous.
5. Cookies and local storage
Adjuvare uses no advertising cookies. We use your browser's local storage for essential functions (your sign-in session and offline copy of your progress), and PostHog sets a first-party identifier so we can count usage accurately. The app also caches question content on your device so it works offline.
6. Your rights
Under UK GDPR you can ask us to access, correct, delete, or export your personal data, and you can object to or restrict certain processing. Email hello@adjuvare.app and we will respond within one month. To delete your account and its data, email us from the account's address — deletion is permanent.
If you are unhappy with how we handle your data, you can complain to the UK Information Commissioner's Office (ico.org.uk), though we'd appreciate the chance to resolve it first.
7. Children
The Service is intended for people preparing for a professional legal examination and is not directed at children under 16.
8. Changes
We will post any changes to this policy here and, for material changes, notify you by email or in the app. The version published at adjuvare.app/privacy is the current one.