01Who controls your data
Noetra is the controller for personal data collected through the service, except where another provider acts as an independent controller for its own services, such as Stripe for payment processing. For questions about your data, contact us at support@noetra.app.
02Data we collect
We collect the data needed to run a serious admissions test preparation product:
- account data, such as name, email, password credentials and verification status;
- onboarding data, such as test route, country, school stage, entry cycle, course interests, target score and preparation stage;
- practice data, such as selected modules, answers, flags, timings, scores, topic performance and worked-solution activity;
- school workspace data, where a school invites you, such as membership, class, assignments, assignment status, live answered-question count, remaining time and school-provided tool access;
- question-help messages, if you use the in-product “ask about this question” feature, so we can respond to what you asked and keep a de-identified copy to review and improve the feature;
- Writing Task essays, if you request written feedback on a TARA Writing Task: the essay you submit is sent to our servers and stored with your account alongside the feedback report, so you can return to both;
- billing data, such as Stripe customer, checkout session, payment, product and price identifiers, plan status and country used for pricing;
- technical and analytics data, such as device, browser, pages viewed, interaction events, approximate location from IP, errors and security logs;
- support and email data, such as messages you send us and transactional emails we send to you;
- email consent data, such as which categories of Noetra email you have asked for, when you asked for them and where you did so.
We do not store your full payment card number.
03Why we use it
We use personal data for the following purposes and lawful bases:
| Purpose | Typical data | Lawful basis |
|---|---|---|
| Creating and securing your account | Name, email, credentials, verification and security logs | Contract and legitimate interests |
| Delivering practice, scoring and progress tracking | Onboarding profile, answers, timings, scores and module choices | Contract |
| Operating a school workspace | School membership, classes, assignments, completion, scores, timing and school-provided access controls | Contract and legitimate interests; the school may have its own lawful basis and responsibilities |
| Billing, entitlement and fraud prevention | Stripe customer, checkout session and payment records, plan identifiers, country signals | Contract, legal obligation and legitimate interests |
| Transactional email | Email address, account security links and delivery status | Contract and legitimate interests |
| Progress reports, key-date reminders and product news | Email address, consent record and delivery status | Consent |
| Product analytics and improvement | Usage events, feature interactions, approximate location and device data, and, when you are signed in, your account identifier, name and email | Legitimate interests, and consent where required |
| Providing and improving in-product question help | The question you asked about and your messages, processed to generate a reply and kept in de-identified form to review and improve the feature | Contract, and legitimate interests |
| Providing Writing Task feedback | The essay you submit, processed to generate a feedback report and stored with your account alongside that report | Contract |
04Marketing email
We send progress reports, key-date reminders and product news only if you have asked us to. You can turn each of these on or off in Options, or use the unsubscribe link in any such email. We keep a record of what you agreed to and when. Account and service emails, such as sign-in, email verification, purchase confirmations and access expiry notices, are sent because you have an account with us and are not affected by these settings.
07International transfers
Some providers may process data outside the UK. Where this happens, we rely on appropriate transfer safeguards or provider terms designed to protect personal data, such as adequacy decisions, standard contractual clauses or equivalent arrangements.
08How long we keep data
We keep account and practice data while your account is active and for a reasonable period afterwards in case you return or need support. Billing, tax, fraud-prevention and legal records may be kept for longer where required. We delete or anonymise data when it is no longer needed for the purpose it was collected for. Question-help conversations are kept in de-identified form, not linked back to your account, so we can review and improve the feature. Writing Task essays submitted for feedback are different: they stay linked to your account, stored alongside the feedback report, so you can return to them. School assignment recipient lists and privileged audit events may be retained after an assignment closes so completion records and administrative changes remain explainable.
09Your rights
Depending on your location and the lawful basis involved, you may have rights to access, correct, erase, restrict, object to or receive a copy of your personal data. You may also have the right to withdraw consent where processing depends on consent.
To exercise these rights, contact us at support@noetra.app. You can also complain to the UK Information Commissioner's Office at ico.org.uk/make-a-complaint.
10Students and younger users
Noetra is aimed at admissions test applicants, many of whom are 16 or older. If you are under 18, you should use Noetra with a parent or guardian's awareness, especially for paid purchases. We do not knowingly target the service at children under 13.
11Changes
We will update this policy when our data use changes materially. If a change is important, we will take reasonable steps to bring it to your attention.