Who we are
Bullseye is run by the business below, which is the “controller” of your personal data under UK data protection law (the UK GDPR and the Data Protection Act 2018).
Bullseye Revision. Email: bullseyerevision@gmail.com.
What we collect
| What | Why |
|---|---|
| Your name, email address and Google account ID, when you sign in with Google | To create and secure your account |
| What you create and do in Bullseye: the courses you add, flashcards, notes, mind maps, the scores you give yourself, and your display settings | So the app works and your work is saved across your devices |
| Subscription details from our payment provider, Stripe: your plan, its status and renewal date, a Stripe customer reference and the billing email/country | To give you Pro and manage your subscription. We never see or store card numbers — Stripe handles them |
| If you use them: the first name on a parent pay link, and the progress summary in a parent report | So the person you send the link to can see it |
| Basic technical data (IP address, browser type, request times) in our hosting provider's security logs | To keep the service secure and fix problems |
Our legal bases
- Contract — running your account, your study tools and your subscription.
- Legitimate interests — keeping Bullseye secure, preventing fraud and fixing faults.
- Legal obligation — keeping payment records as tax law requires.
We do not use your data for advertising, we do not sell it, and we do not profile you for marketing.
Young people
Bullseye is built for GCSE and A-Level students, so many of our users are under 18. We apply high-privacy settings by default: there are no ads, no public profiles, and nothing you do is shared with anyone unless you choose to share it (for example by sending a parent report link, which you can turn off at any time). If you're under 13, please ask a parent or guardian before using Bullseye. Only adults can pay for Pro — if you're under 18, ask a parent to pay using the “Ask a parent to pay” link.
Who we share data with
We use a small number of trusted providers who process data on our behalf, under contract:
- Google (Firebase) — sign-in and storing your account and study data.
- Cloudflare — hosting the website and storing course content.
- Stripe — taking payments and managing subscriptions.
Some of these providers may process data outside the UK (for example in the USA). Where they do, the transfer is protected by UK adequacy regulations or the UK International Data Transfer Agreement/Addendum. We only share data with anyone else if the law requires it.
How long we keep it
- Your account and study data — until you ask us to delete your account.
- Payment and invoice records — six years, as UK tax law requires.
- Security logs — a short period, normally no more than 30 days.
Cookies and storage
We only use storage that's strictly necessary: your browser keeps you signed in and remembers your settings (such as theme and colour). We don't use analytics or advertising cookies. Stripe sets its own cookies on its checkout pages to prevent fraud.
Your rights
You can ask us to see, correct, download or delete your data, or object to or restrict how we use it. To delete your account and everything in it, email bullseyerevision@gmail.com from the address you sign in with and we'll do it within 30 days. If you're unhappy with how we've handled your data you can complain to the Information Commissioner's Office at ico.org.uk.
Changes
If we change this policy in a way that matters, we'll tell you in the app or by email before the change takes effect.