workingPrivacy policy
Who we are
Working (“we”, “us”) is an AI study service for GCSE and A-level students in the UK. Working is operated personally by Ryan Gupta, who is the data controller. For privacy questions, access or deletion requests, contact privacy@useworking.app.
What we collect
| Data | Examples | Where it comes from |
|---|---|---|
| Account | Name, email address, date of birth where requested, a securely hashed password, or your Google account identity if you sign in with Google | You |
| Study content | Your chats, Learn sessions, Tutor sessions, notes and drawings on papers, projects | You, as you use the app |
| Files | PDFs and papers you upload or open, up to your storage limit | You, or a public exam board website you ask us to fetch from |
| Voice | Audio you record for the Tutor to transcribe, and the spoken replies it generates | You |
| Study profile | Your role, learner year, subjects, qualifications, exam boards, learning goals and optional grades; an optional parent or guardian contact | You provide these during onboarding or in Settings |
| Usage | Counts of questions, AI replies, chats and uploads, used for your Activity page and plan limits | Generated as you use the app |
| Billing | Your plan and subscription status. Card details are handled by our payment provider and never reach our servers | Our payment provider |
| Technical | A sign-in session cookie and basic server logs needed to run and secure the service | Your browser |
The marketing website (this page and the landing page) sets no cookies and loads no analytics or advertising trackers.
Why we use it, and our lawful bases
- To provide the service you signed up for (account, chats, files, Tutor, Learn, Activity): performance of a contract.
- To take payment and manage your plan: performance of a contract.
- To keep the service secure and working (sessions, rate limits, abuse prevention): our legitimate interests.
- To send essential account emails such as sign-in and verification: performance of a contract.
- To meet legal obligations such as tax records: legal obligation.
We do not sell your personal data and we do not use it for advertising.
Who processes it for us
| Provider | What for | Data involved |
|---|---|---|
| OpenRouter, and the AI model providers it routes to | Generating answers, Learn steps, practice papers and Tutor guidance | The messages, page images and context needed for each request |
| Fish Audio (via OpenRouter) | Speech for the Tutor and transcription of your voice | Text to be spoken, audio you record |
| Optional “Sign in with Google” | Your Google account identifier, name, email address, verification status and profile picture if Google supplies it; authentication tokens and session records | |
| Resend | Sending account emails | Your email address and the email content |
| Stripe or Dodo Payments | Taking payment and managing subscriptions | Billing details you give them, your account identifier |
| Cloudflare (Workers, SQLite Durable Objects and private R2 storage) | Running the app and storing its database | All data described above |
Our document bucket is configured in the EU and our application database requests a Western Europe location. Cloudflare and the other providers may still process account, network and request data internationally. Their processing locations and contractual safeguards depend on the service used. Contact privacy@useworking.app for information about a particular transfer.
AI and your content
When you ask Working something, the relevant content is sent to an AI model to produce a reply. Completed study profiles also provide the relevant course, goals and self-reported grades to personalise tuition. Parent or guardian contact details and birth dates are excluded from that profile context. Saving a guardian contact does not send an invitation, grant access or share progress. We do not use your content to train our own models. The external AI providers process submitted study content under their own retention and data-use policies; this notice does not promise that every external model has zero retention. Avoid including sensitive personal information in your prompts or papers. AI replies can be wrong: always check against your mark schemes.
Sign in with Google
Google sign-in is optional. With your permission, Working receives your basic Google profile and email identity to authenticate you, create or link your Working account, display your profile and protect sign-in. Better Auth stores the identity link, authentication tokens and session information in our application database. We request basic identity scopes (openid, email and profile), not access to Gmail messages, Google Drive files, contacts or calendars.
We do not sell Google account data, use it to target advertisements or use it to train AI models. Authentication records are processed by our hosting provider to run sign-in and may be accessed by the operator for account support or security. Your study prompts and uploaded content are separately sent to the AI providers when you use those features; a Google login does not itself send your Google mailbox or Drive content to an AI.
You can remove Working from your Google Account connections at any time. Removing Google access does not delete an existing Working account or its stored study content. To delete that data and the associated identity records, contact privacy@useworking.app.
Under-18s
Many of our users are school students. We design the service with the ICO’s Age Appropriate Design Code in mind: high-privacy defaults, no profiling for marketing, no nudges to share more data, and no public profiles. Working accounts are intended for people aged 13 and over. Email/password registration checks the date of birth you provide; this is self-reported and is not identity-document verification. A Google sign-in does not establish your age. If you believe someone under 13 has an account, contact privacy@useworking.app.
How long we keep it
- Account and study content: retained to provide your account until you ask us to delete it. You can remove chats in the app. For account, uploaded-file or Google identity deletion, email privacy@useworking.app from your account address; we may verify ownership before acting. Copies in migration or recovery backups are not instantly removed by deleting a live record and may remain until those backups are retired.
- Sign-in sessions: up to 30 days, or until you sign out.
- Billing records: as long as required by law (normally six years in the UK).
- Technical logs and security records: kept while needed to diagnose incidents, prevent abuse or meet a legal obligation. Expired application sessions, request limits and temporary AI reservations are cleaned daily; provider logs and recovery backups have separate retention settings. Contact us for the current period applying to a particular record.
Your rights
Under UK GDPR you can ask for a copy of your data, ask us to correct or delete it, object to or restrict some uses, and ask for your data in a portable format. Contact privacy@useworking.app. If you are unhappy with how we handle your data you can complain to the Information Commissioner’s Office at ico.org.uk.
Security
Passwords are hashed with scrypt, sessions use secure, HTTP-only cookies, and requests that change data are protected against cross-site request forgery. No system is perfectly secure; tell us at support@useworking.app if you find a problem.
Changes to this policy
We will post any changes here and update the date above. If a change is significant, we will tell you in the app or by email.