Privacy Policy

This policy explains what personal data CLIP (clipguide.org) collects, why, and the rights you have over it under UK data protection law (UK GDPR and the Data Protection Act 2018). CLIP is the data controller for the personal data described here. Contact: support@clipguide.org.

1. What we collect

• Account data — your name, email address, password (stored as a secure hash, never in plain text) and training stage.
• Study data — quiz answers and scores, simulator attempts, flashcard ratings, streaks, checklists and planner content you create.
• Payment data — when paid subscriptions launch, payments will be handled by a payment processor (e.g. Stripe); we will store your subscription status and order reference, never your card number.
• Technical data — authentication tokens and the basic server logs generated by hosting the Service.

2. Why we use it (lawful bases)

• To provide the Service (contract): running your account, saving your progress and premium access.
• To send service emails (contract / legitimate interests): welcome emails, password and security notifications, payment receipts, and a weekly progress summary. You can turn the progress summary off at any time in Settings; security notifications cannot be opted out of.
• To keep the Service safe (legitimate interests): abuse prevention and debugging.

We do not sell your data, and we do not use it for third-party advertising.

3. Who processes it for us

We use a small number of service providers to run CLIP:

• Supabase — database and authentication (account and study data).
• Vercel — website hosting.
• Resend — sending transactional email.
• Stripe (when payments launch) — payment processing.

These providers may store data outside the UK; where they do, transfers are protected by standard contractual clauses or equivalent safeguards.

4. How long we keep it

• Account and study data — for as long as your account exists.
• If you delete your account, your profile and study data are deleted. Payment records may be retained longer where required for tax and accounting law.

5. Your rights

Under UK GDPR you can ask us to:

• provide a copy of the personal data we hold about you (access);
• correct inaccurate data (rectification);
• delete your data (erasure);
• restrict or object to certain processing;
• provide your data in a portable format.

Email support@clipguide.orgfrom your account address and we will respond within one month. If you are unhappy with how we handle your data, you have the right to complain to the Information Commissioner's Office (ico.org.uk).

6. Cookies and local storage

CLIP uses only what is necessary to run the Service: authentication tokens (to keep you signed in) and local storage for caching your study data in your browser. We use Vercel Web Analytics for aggregate, cookieless page-view statistics — it does not identify you or track you across sites. We do not use advertising or cross-site tracking cookies, so no cookie consent banner is required.

7. Children

The Service is intended for optometry students and qualified professionals and is not directed at children. You must be at least 16 to create an account.

8. Changes to this policy

If we make material changes — for example when payments launch — we will update this page and notify you by email or in-app notice.