Privacy Policy
Last updated July 2026
This policy explains what personal data Arrival Academy collects, why, and your rights over it. The data controller is [Arrival Academy Ltd], [Registered office address]. For any privacy request, email hello@arrivalacademy.com.
What we collect
- Account details — your name, email, password (stored encrypted), nationality, and optionally your first language and destination university.
- From your education agent — when an agent issues you an access code they record your name and nationality so the code can be prepared for you.
- Learning activity — your progress through lessons, quiz results, and course completion, so we can save your place and issue your certificate.
- AI study assistant — the messages you send to the assistant, which are processed to generate a reply.
- Essential technical data — a login (session) cookie, and basic security and operational logs.
Why we use it, and our lawful basis
- To provide the course, save your progress and issue certificates — to perform our contract with you.
- To personalise your pronunciation practice using your first language — on this basis and with your choice to provide it.
- To keep the service secure and prevent misuse, and to run our business — our legitimate interests.
- To meet legal, tax and accounting obligations — to comply with the law.
Who we share it with
We do not sell your personal data. We share it only with the service providers that run the platform for us, under contract and only as needed:
- Supabase — secure database, sign-in and file storage.
- Bunny Stream — delivers the course videos.
- Resend — sends transactional emails (e.g. account notices).
- Vercel — hosts the website.
- Anthropic — powers the AI study assistant; your messages to it are processed to produce answers.
- Your education agent — if you redeemed their code, they can see that it was redeemed, for their own records.
Some providers may process data outside the UK/EEA. Where they do, appropriate safeguards (such as UK/EU approved contractual clauses) are in place.
How long we keep it
We keep your personal data while your account is active. You can delete your account at any time from your account page: it enters a 30-day grace period (so you can change your mind), after which your personal data is permanently erased — your progress, certificates and details are removed.
Where the law requires us to keep a record of a transaction (for example, for tax and accounting), we retain only anonymised records that no longer identify you.
Your rights
Under UK/EU data protection law you have the right to:
- access the personal data we hold about you;
- correct anything that is inaccurate;
- have your data erased (you can do this yourself from your account page);
- restrict or object to certain processing;
- receive your data in a portable format;
- withdraw any consent you have given.
To exercise any of these, email hello@arrivalacademy.com. You also have the right to complain to the UK Information Commissioner's Office (ico.org.uk).
Cookies
We use only essential cookies — the one that keeps you signed in. We do not use advertising or third-party tracking cookies.
Younger students
The service is intended for students preparing for UK study. If you are under 18, please use it with a parent or guardian's agreement.
Changes to this policy
We may update this policy from time to time; the date at the top shows when it last changed. Significant changes will be brought to your attention.