Privacy Policy

1.1 Master UKMLA ("we", "us") operates the Master UKMLA app and website (the "Service"). We are the data controller for the personal data described in this policy. You can contact us at Customerservices@MasterUKMLA.co.uk.

1.2 The Service is intended for users aged 18 or over. We do not knowingly collect personal data from children.

2.1 Account data: your email address, name, and password (passwords are stored only as secure hashes by our authentication provider).

2.2 Your Content: the notes, study plans, actions, habit records, placement logs, flashcards, and topic progress you create.

2.3 Subscription data: your subscription status and history. Payment card details are collected and processed by our payment provider (Base44 Payments) — we never see or store your card number.

2.4 Technical data: standard log and analytics information, such as pages visited and device type.

2.5 Newsletter preference: whether you opted in to receive updates and newsletters.

3.1 We use your data to: provide the Service (creating your account, storing Your Content, tracking your progress); process subscriptions; send you service emails (such as email verification and the dormant-account warning required by our Terms); and, only if you opted in, send you updates and newsletters.

3.2 Legal bases: performance of our contract with you (providing the Service), legitimate interests (security and service improvement), and your consent (newsletter emails).

4.1 We do not read, share, or sell Your Content. It is visible only to you. Aggregate, non-identifying statistics may be used to improve the Service (see Terms clause 5.3).

5.1 We share personal data only with: our hosting and authentication platform; our payment provider (to process subscriptions); and the email delivery services needed to send you service emails. We never sell personal data.

6.1 Your Content is kept for as long as your account exists.

6.2 Dormant accounts: if you have no active subscription and have not logged in for 12 months, we send a warning email; if you do not log in within 30 days, your data and your account are permanently deleted (see Terms clause 9).

6.3 Subscription and payment records are kept for as long as required for accounting and tax purposes.

6.4 You can request deletion of your data sooner by contacting us.

7.1 Under UK data protection law you have the right to: access your personal data; have it rectified; have it erased; restrict or object to its processing; have it ported to another service; and withdraw your newsletter consent at any time (unsubscribe from any email or contact us).

7.2 If you have a concern about how we handle your data, you can complain to the Information Commissioner's Office at ico.org.uk.

8.1 We use reasonable technical and organisational measures to protect your data, and our managed hosting platform provides its own resilience measures. No method of storage is completely secure, so please keep your own backups of important notes (see Terms clause 8).

9.1 We may update this policy. Material changes will be notified to you (by email or in-app) at least 14 days in advance where practical, in line with our Terms.

Questions about this policy or your data: Customerservices@MasterUKMLA.co.uk