Last updated: 28 July 2026
Vector ("the app", "we", "us") is a GCSE Maths revision app built around the AQA 8300 specification. This policy explains what information the app collects, why, and how it's kept safe. It applies to the Vector iOS app and any associated web version.
Vector is operated by an individual developer, Catherine Royle ("we", "us"), not a registered company. For the purposes of UK GDPR, we are the data controller for the personal data described in this policy. Our service providers (Google Firebase, RevenueCat) act as data processors on our behalf, under their own standard data processing terms.
Vector is designed for GCSE students, who are typically 14–16 years old. You must be at least 13 years old to create an account. If you are under 18, we recommend reviewing this policy together with a parent or guardian before creating an account. The app does not currently verify age at sign-up — if we become aware an account belongs to a child under 13, we will delete it.
A parent or guardian can request the deletion of their child's account and data at any time by contacting us using the details at the bottom of this page — you don't need access to the account itself to make this request.
You can use Vector fully without signing in. In that case, your practice history, streaks, and settings are stored only on your device (using local storage) and are never sent to us or anyone else. We do not collect device advertising identifiers (like Apple's IDFA) or any other identifier for this local-only mode.
Creating an account lets your progress follow you across devices. Signing up (by email/password, Google, or Sign in with Apple) shares with us:
We never see or store your password directly — sign-in is handled by Firebase Authentication (Google), which stores it securely on our behalf.
Your email address is visible to the app's operator (for account support and administration) via our backend systems. We do not sell or share it with third parties for marketing.
Once signed in, the following syncs to our database so it's available on your other devices:
This data is stored in Google Cloud Firestore under your account, and only your signed-in account can read or write it.
The scratch pad lets you write out working by hand, which the app can recognise as text to help mark your answer. This handwriting recognition runs entirely on your device using Google's ML Kit — your handwriting strokes are never sent to us or to Google's servers for this feature.
If you subscribe to Vector Premium, payment is handled entirely by the Apple App Store — we never see or store your card details. We use RevenueCat to manage subscription status (e.g. whether your trial or subscription is active), which receives your purchase receipt from Apple and an account identifier, but not your payment details.
Under UK GDPR, we rely on the following legal bases:
We do not use advertising networks, and we do not currently use any third-party analytics or tracking SDKs in the app. We do not use cookies or similar tracking technologies.
We periodically review our third-party providers' own privacy practices. If a change by one of them would significantly affect how your data is handled, we'll update this policy and highlight the change.
Google Cloud (which powers Firebase and Firestore) may process and store your data on servers outside the UK, including in the United States. Google has certified under the UK Extension to the EU-US Data Privacy Framework — the UK government-recognised mechanism specifically covering transfers of UK personal data to the US — and applies Standard Contractual Clauses for transfers not covered by that certification.
We keep your account and progress data for as long as your account exists. You can permanently delete your account and all synced data at any time from Profile → Sign out / Delete account in the app.
Deletion removes your data from the app's active systems immediately — it will no longer appear anywhere in the app or be readable by us. Per Google's own terms for Firebase, residual copies may persist in Google's backend infrastructure for up to 180 days as part of their standard deletion process, after which they are permanently removed. Deletion cannot be undone.
Under UK GDPR, you (or a parent/guardian on your behalf) have the right to:
To exercise any of these rights, contact us using the details below.
We may email you or show an in-app notice about critical account or service matters (e.g. security notices, changes to this policy). We will not send marketing emails without your separate consent.
If we become aware of a data breach affecting your personal data, we will notify you and, where legally required, the Information Commissioner's Office (ICO), without undue delay and within 72 hours of becoming aware of it where feasible.
Your data is protected by Firebase's security infrastructure, and access to your synced progress data is restricted to your own signed-in account only.
If this policy changes, we'll update the "Last updated" date above. Continued use of the app after a change means you accept the updated policy.
See also our Terms of Service, which cover accounts, subscriptions, and acceptable use.
If you have questions about this policy or your data, or want to exercise any of the rights above, contact:
Catherine Royle
vectormathsapp@gmail.com