Privacy Policy

Last updated: 2026-07-22

This is a first draft provided for reference and has not yet been reviewed by legal counsel — do not rely on it as final legal advice.

1. Who we are

Paprixis operated by Yomayusa Ltd, a company registered in England and Wales with its registered office in London, United Kingdom (“Yomayusa”, “we”, “us”, “our”). This policy explains what personal data we collect through Paprix, why, and what rights you have over it.

2. Data we collect

  • Account data: email address, display name, hashed password (or OAuth identity if you sign in with Google/Microsoft).
  • Exam content: the questions, courses, and student rosters you create or upload.
  • Usage data: exam/variation counts, subscription tier, login timestamps.
  • Billing data: handled entirely by our payment processor, Paddle. We store only your Paddle customer ID and subscription status — never full card numbers.
  • Technical data: IP address, user agent, and structured activity logs kept for security and abuse prevention.

3. How we use your data

  • To provide and improve the Paprix service.
  • To send transactional emails (account verification, password reset, billing receipts).
  • To enforce fair-use limits and detect abuse.
  • To comply with legal obligations.

We do not sell your data. We do not use your exam content to train machine-learning models.

4. Data retention

Account data is retained while your account is active. On deletion, personal identifiers are anonymised immediately and any remaining records purged within 30 days. Billing records are retained for 7 years for legal/tax compliance. Uploaded files are deleted from storage as soon as the associated exam or account is deleted.

5. Third-party processors

  • Cloudflare R2 — file storage.
  • Paddle — payment processing (PCI-DSS compliant).
  • Neon — PostgreSQL database hosting.
  • OpenAI — parsing pasted/uploaded exam text into structured questions.

6. International transfers

As a UK company, we apply UK GDPR standards to all personal data we process, including when our processors operate outside the UK/EEA — in those cases we rely on Standard Contractual Clauses or equivalent safeguards.

7. Your rights

You have the right to:

  • Access a copy of your data (Settings → Export your data).
  • Correct inaccurate data (Settings → Profile).
  • Delete your account and personal data (Settings → Danger Zone).
  • Object to processing or request restriction — email us.
  • Lodge a complaint with the UK Information Commissioner's Office (ICO).

8. Changes to this policy

We will notify you by email of material changes. Continued use of Paprix after the effective date constitutes acceptance of the revised policy.

9. Contact

For privacy queries, email support@paprix.app or write to Yomayusa Ltd, London, United Kingdom.