Back to home

Privacy Policy

Effective date: April 2026

1. Your privacy matters here

FásCliste is an Irish Leaving Certificate study platform. We use personal data to run the service, save your study work, manage subscriptions, protect accounts, and provide AI-powered study support. We aim to collect only what we need and to explain it in plain language.

FásCliste is the controller for the personal data described in this policy. For privacy requests, contact data@fascliste.com. For general support, contact hello@fascliste.com.

2. Who this policy is for

This policy applies to students, parents or guardians, account holders, visitors, trial users, subscribers, and people who contact us. FásCliste is built for secondary school students, so we treat children's privacy with extra care.

In Ireland, a child is a person under 18 for data protection purposes. If you are under 16, you should use FásCliste only with permission from a parent or guardian.

3. What we collect

Account details

Email address, username or display name, account ID, verification status, role, plan, trial dates, selected subjects, profile settings, and account deletion/reactivation status.

Study activity

Subjects, topics, progress, bookmarks, study plans, notes, uploaded/scanned notes, exam attempts, answers, drafts, feedback, quiz results, flashcards, oral-practice recordings or transcripts, and usage limits.

AI inputs and outputs

Questions, prompts, student answers, generated summaries, predicted papers, tutor responses, oral feedback, and related metadata needed to provide and secure AI-powered study features.

Billing and subscription details

Billing email, plan, subscription status, payment events, invoices, cancellation or renewal status, and Stripe customer/subscription IDs. Stripe handles payment details for paid plans. We do not store full card numbers.

Security and technical data

Session data, device/browser information, hashed IP addresses where used for security/audit logs, rate-limit records, error reports, and bot-protection signals.

Messages and consent records

Contact-form messages, support emails, transactional email delivery records, cookie/analytics choices, optional AI-improvement choices, age/guardian confirmations, and audit records of consent changes.

Please do not add highly sensitive personal information to study answers, notes, oral recordings, contact forms, or AI prompts unless it is genuinely needed for your study task.

4. Why we use your data

Provide the study platform

Contract

To create your account, keep you signed in, show your subjects, save notes and progress, provide quizzes, summaries, practice tools, exam attempts, oral practice, and subscription features.

Generate AI study support

Contract and legitimate interests

To process the answers, prompts, transcripts, or notes you choose to submit so we can generate feedback, explanations, summaries, tutor responses, predicted papers, and revision support.

Manage payment and access

Contract and legal obligation

To process subscriptions through Stripe, keep plan access accurate, prevent duplicate plan purchases, send receipts, handle cancellations, and keep accounting records.

Protect the platform

Legitimate interests

To prevent fraud, abuse, scraping, account misuse, injection attacks, bot activity, payment abuse, and AI cost exhaustion. We try to keep security logs minimal and avoid storing raw personal content in audit logs.

Send service messages

Contract and legitimate interests

To send verification codes, password or email-change codes, trial/subscription messages, receipts, security notices, and important product updates.

Optional analytics and improvement

Consent

To understand aggregate product usage if optional analytics are enabled and you opt in. We do not use children’s data for direct marketing, profiling, or micro-targeting.

5. AI features

FásCliste uses AI to help with summaries, tutor-style explanations, notes, practice, oral feedback, exam feedback, and predicted study papers. AI calls are made server-side. Student answer text is treated as untrusted and private study content.

AI output is a study aid, not an official marking decision. We include the required warning with AI feedback: this content is AI-generated and may contain errors, so you should cross-reference official State Examinations Commission resources and teacher guidance.

We do not use AI for emotion recognition, biometric identification, social scoring, or automated decisions about your legal rights, subscription access, discipline, or final educational outcome. We do not knowingly use children's data for direct marketing, profiling, or micro-targeting.

6. Children and young people

Many Leaving Certificate students are under 18. We use a protective privacy approach: no pre-ticked optional consent boxes, no advertising profiles, no sale of personal data, no AI emotion recognition, and no direct marketing, profiling, or micro-targeting of children.

If you are a parent or guardian and believe a child has created an account without permission, contact data@fascliste.com. We will review the account and take appropriate action.

7. Cookies and similar technologies

We use essential cookies and similar technologies to keep you signed in, protect the service, remember basic preferences, and make account features work. These are necessary for the platform.

If optional analytics are enabled, they are used only where you have opted in. We do not use advertising cookies or third-party tracking cookies to build advertising profiles.

8. Who helps us provide the service

We do not sell your personal data. We use trusted service providers only where needed to run FásCliste, keep accounts secure, process subscriptions, protect against bots, and provide AI study features.

For paid plans, payments are handled by Stripe. Stripe processes payment details and sends us the subscription information needed to manage your access. FásCliste does not store full card details.

  • Supabase for account authentication, database, and private storage.
  • Stripe for paid subscriptions, invoices, billing portal, and payment processing.
  • Anthropic for server-side AI study feedback and learning tools.
  • OpenAI for text-to-speech and oral-practice transcription where those features are used.
  • Cloudflare for bot protection and platform security where enabled.

We may also share information where required by law, to protect users, or to investigate security, fraud, or payment abuse.

9. International transfers

Some providers may process data outside Ireland or the European Economic Area. Where that happens, we rely on appropriate safeguards such as adequacy decisions, Standard Contractual Clauses, data processing agreements, and security controls where required.

10. How long we keep data

  • Account and study records are generally kept while your account is active so you can return to your work.
  • If you request account deletion, the account is first soft-deleted and scheduled for cleanup after 30 days. Some records may be kept where needed for billing, security, fraud prevention, tax, or legal reasons.
  • Payment, invoice, tax, and accounting records may be kept for the period required by Irish law.
  • Security, rate-limit, audit, and error records are kept only as long as reasonably needed for safety, troubleshooting, fraud prevention, and legal compliance.
  • AI prompts, answers, feedback, notes, recordings, and transcripts are kept only where needed to provide your account features, show your history, or respect your saved study records. You can ask us to delete them where no overriding legal reason requires retention.

11. Your rights

Under GDPR, you have rights over your personal data. These rights are not unlimited, but we will explain our response clearly if a limit applies.

  • Access: ask for a copy of the personal data we hold about you.
  • Rectification: ask us to correct inaccurate or incomplete information.
  • Erasure: ask us to delete your personal data where the law allows.
  • Restriction: ask us to limit how we use your data in certain cases.
  • Portability: ask for data you provided to us in a structured, commonly used format.
  • Objection: object to processing based on legitimate interests.
  • Withdraw consent: withdraw optional consent, such as analytics or AI-improvement consent, without affecting earlier lawful processing.
  • Complaint: contact the Irish Data Protection Commission if you are unhappy with how we handle your data.

To use your rights, email data@fascliste.com. We aim to respond within one month.

12. Security

We use technical and organisational measures to protect personal data, including server-side access checks, private storage, hashed IPs where used for audit/security records, rate limiting, payment webhook verification, and careful handling of logs. No online service can promise perfect security, but we take the protection of student data seriously.

13. Complaints

If something feels wrong, please contact us first and we will try to put it right. You also have the right to complain to the Irish Data Protection Commission.

Data Protection Commission, 6 Pembroke Row, Dublin 2, D02 X963, Ireland. Website: dataprotection.ie.

14. Changes to this policy

We may update this policy when the product, law, or our providers change. If a change is important, we will make it clear in the app or by email where appropriate.

See also our Terms of Service.