Privacy Notice

Who runs Aptly

Aptly is a non-commercial study project built and run by Joao Perracini. It is not a company. There is no paid version, no advertising and nothing for sale.

For anything in this notice — questions, requests about your information, or a complaint — email contactaptly@gmail.com. That address is the way to reach Aptly.

For data protection law, Joao Perracini is the “controller” for the information described here — the person responsible for deciding how it is used.

What Aptly saves

Your account. Your email address, an account ID Aptly generates for you, the name or nickname you chose, and whether you study Economics at SL or HL.

Your work. The questions you add, the answers you write, any source text or data you paste, your revisions of earlier answers, and the practice questions Aptly generates for you.

Feedback and marks. The estimated mark for each answer, the written feedback, strengths and improvements, the mistakes identified, the syllabus topic, and the per-criterion diagnostic breakdown.

Technical records. When things happened, your sign-in session, and small no-content records used to enforce daily usage limits and to stop the same request being processed twice. Aptly's own error logs record which step failed and nothing else — never your work, your email or your account ID.

Some of this is worked out, not typed by you. Your strongest and weakest topics, your repeated mistakes, your Current focus, what to study next, and your estimated performance are all produced by Aptly from the work you have saved. You never enter them — Aptly infers them.

Why Aptly uses it

Most of it is simply what the service is. Aptly needs your email to sign you in, your saved work to show a history, and your feedback and topics to tell you what to practise next. In data protection terms this is processing that is necessary to provide the service you asked for (a contract between you and Aptly).

A smaller part is about keeping Aptly working and safe: enforcing reasonable daily usage limits, preventing abuse, and recording enough to diagnose failures. Aptly relies on its legitimate interests for that. These records contain no schoolwork.

Aptly does not rely on consent for any of this, so there is no consent box to tick and nothing to withdraw. If that ever changes, this notice will say so first.

AI, and what OpenAI receives

Aptly uses OpenAI's models to mark written answers, read handwriting from photos, comment on diagrams, and occasionally write a new practice question.

When you grade an answer, Aptly sends OpenAI the question, your answer, and any source text you pasted. When you attach a photo, it sends the photo. It does not send your name, your email address or your account ID — OpenAI receives the work, not who wrote it.

Aptly sets OpenAI's store option to false on every request, which tells OpenAI not to retain the response. Under OpenAI's current API terms, content sent through the API is not used to train its models by default.

To be straight with you: that does not mean OpenAI keeps nothing. OpenAI runs its own security and abuse-monitoring processes and may hold limited records for a short period under its own policies. Aptly controls what it sends and asks OpenAI not to store it; Aptly cannot control OpenAI's internal security logging.

Because AI writes the feedback, it can be wrong. Treat it as practice, and use your teacher and your official course materials as well.

Photos

Scanning handwriting. Your device shrinks and re-saves the photo before it is uploaded, which strips the original file's metadata — including any location, timestamp and device details. Aptly sends the photo to OpenAI to turn the handwriting into text you can then check and edit. Aptly does not save the photo.

Diagram feedback. The same happens for a diagram photo. It is sent to OpenAI, which returns written observations about your diagram. Aptly saves those written observations with your answer, but not the image. Diagram feedback never changes your estimated mark.

Photos exist only for as long as the request takes. There is no photo library, no storage bucket, and nothing to delete later.

How Aptly personalises your practice

Aptly reads the answers you have saved and works out patterns automatically: which topics you score well on, which you do not, which mistakes keep coming back, what your Current focus should be, and which question to give you next.

This is an automated estimate built from your own work, and it exists for one reason — to help you decide what to revise. It is not an official grade, and it does not affect your school grades, your predicted grades, your university applications, or your access to education in any way.

Aptly does not send these insights to your school, your teachers, your parents or other students. Nothing you write in Aptly is visible to anyone else.

In legal terms this is “profiling”. If you think Aptly has judged something about your work wrongly, email contactaptly@gmail.com — and you can always delete an individual answer from your Learning log, which removes it from every insight Aptly calculates.

Who else is involved

Aptly is built on a small number of providers. They process information on Aptly's instructions and are not allowed to use it for their own purposes.

• Supabase — stores your account and everything you save, and sends the sign-in link to your email address.
• OpenAI — provides the AI that marks answers, reads handwriting and reviews diagrams, as described above.
• Aptly's hosting provider — runs the website and handles requests as you use it.

That is the complete list. There is no analytics service, no advertising network, no tracking pixel and no third party that receives your information for its own reasons. Nothing is sold or shared for advertising.

Processing outside the UK

Some of these providers process information outside the UK — OpenAI in particular is based in the United States, so your work is processed there when it is marked.

Aptly uses these providers under their published data protection terms, which apply the UK's approved safeguards for sending personal information abroad (the UK Addendum to the standard contractual clauses).

How long things are kept

Your account and your work are kept while your account exists. That is deliberate: your Learning log, your progress and your Current focus are all built from your history, so Aptly would stop working as a study tool without it.

When you delete your account, Aptly deletes your account and the work, feedback and practice history attached to it.

Photos are never stored, so there is nothing to keep or delete.

Usage-limit and duplicate-request records hold no schoolwork and are removed automatically after 30 days.

Aptly's providers keep their own backups and security logs on their own schedules, so a copy can persist there for a short period after deletion before it ages out.

Your rights

You can ask Aptly to give you a copy of your information, correct something that is wrong, delete your information, or limit or object to how it is used. Some of these rights apply differently depending on the situation, and Aptly will explain if one does not apply to your request.

You can do two of these yourself right now: delete a single answer from your Learning log, or delete your whole account from Your data.

For anything else, email contactaptly@gmail.com from the address your account uses. Aptly will normally respond within one month.

Complaints

If you are unhappy with how Aptly has handled your information, email contactaptly@gmail.com. Aptly will acknowledge a formal data protection complaint within 30 days, look into it, and tell you the outcome.

You also have the right to complain to the UK's data protection regulator, the Information Commissioner's Office, at ico.org.uk/make-a-complaint. You do not have to contact Aptly first, though it is usually quicker if you do.

Your privacy if you're under 18

Most people using Aptly are school students, so it is built that way by default rather than as an afterthought.

• Your account is private. No other student can see your work, your marks or anything else.
• There are no public profiles, no sharing and no way to make anything visible to others.
• Aptly has no advertising and does not profile you for advertising.
• Your information is never sold.
• Your marks and insights are never sent to your school or your teachers.
• You can email contactaptly@gmail.com to ask anything about your information, and you can delete your account yourself at any time.

You need to be at least 13 to use Aptly. Aptly does not ask for your date of birth and does not try to verify your age — asking students for identity documents would collect far more personal information than a study tool needs. Instead, the protections above apply to everyone who uses Aptly, whatever their age.

Cookies and what Aptly stores on your device

Aptly stores three things on your device, and none of them are for advertising:

• Sign-in cookies, set by Supabase, that keep you logged in as you move between pages.
• Your theme choice, saved only when you use the light/dark toggle.
• The mark total you last picked on Practice, kept for the current browser session so the page remembers it.

All three are needed for the things you have actually asked Aptly to do, so UK rules do not require a cookie banner for them — which is why you have not been shown one. Aptly uses no advertising cookies, no tracking pixels and no analytics service. You can clear any of this through your browser settings at any time.

Keeping your information safe

Aptly's database enforces at the database level that you can only ever read your own rows. Connections to Aptly and its providers are encrypted. Photos are never stored. Anything that writes to your record runs on Aptly's server after checking your sign-in, never in your browser. Error logs are written so they cannot contain your work.

No service can promise perfect security, but Aptly is built so that the smallest useful amount of information exists in the first place.

Changes to this notice

If Aptly changes how it uses your information in a way that matters, this page will be updated and the date at the top will change. If the change is significant — a new provider, a new purpose, or anything that would surprise you — Aptly will tell you in the app or by email before it starts.