Privacy Policy
Plain English. No data sold, ever.
This policy covers the ileva website (ileva.uk) and all three apps: LearnIT, GridIT and the Marking Assistant. It explains what personal data is collected, why, how long it is kept, and how to get it removed.
Last updated 1 September 2026.
1. Who is responsible
ileva is run by a single UK teacher operating as a sole trader. For the website and for teacher accounts, ileva is the data controller. Contact: hello@ileva.uk.
Where a school uses an app with its own pupils or exam candidates, the school is the data controller and ileva acts as a data processor on the school's instructions. Schools may request a data processing agreement by email.
2. Signing in with Google
All three apps use Google Sign-In so you do not need another password. When you sign in, Google shares a limited profile with the app: your name, email address, profile picture and a Google account identifier.
That is all that is requested. ileva does not request access to your Gmail, Drive, Calendar, Contacts or any other Google service, and cannot read them. ileva never receives your Google password.
You can revoke the apps' access at any time from your Google account's security settings, under third-party access.
3. What each app stores
LearnIT
Your name and email from Google sign-in, plus the learning data the app exists to show you: time spent in Learn IT and Watch IT, flashcard confidence ratings, questions answered and accuracy, EXP and weekly targets, microbytes earned and spent, and arcade game scores. Teachers linked to a class can see the progress of pupils in that class.
GridIT
Your name and email from Google sign-in, plus the work you create: sitemaps, wireframes, page designs, and any text or images you add to a project. Your projects are private to your account and, where applicable, visible to your teacher.
Marking Assistant
The teacher's name and email from Google sign-in, plus the marking data entered by the teacher: candidate names, candidate numbers, class names, target grades, marks per criterion, written comments, page references and notes. This data is entered by the school about its own candidates and is held on the school's behalf.
4. Why, and on what legal basis
- To provide the app — signing you in, saving your work and progress, showing your markbook. Basis: contract, or the school's public task.
- To keep it working — diagnosing faults, preventing abuse, keeping backups. Basis: legitimate interests.
- To reply to you — answering emails and contact-form messages. Basis: legitimate interests.
There is no advertising, no profiling, no automated decision-making and no tracking across other websites.
5. Who else sees it
Personal data is never sold, rented or shared for marketing. It is shared only with the service providers needed to run the apps — hosting and database providers, and Google for sign-in — each acting under contract on ileva's instructions. It may also be disclosed where the law requires it.
Data is stored on servers in the UK or European Economic Area. Where a provider processes data outside that area, appropriate safeguards such as the UK International Data Transfer Addendum are used.
6. Cookies and local storage
The website uses no advertising or analytics cookies. The apps use strictly necessary cookies and browser local storage to keep you signed in and remember settings such as your chosen unit or panel sizes. These cannot be turned off without breaking sign-in, and are not used to track you elsewhere.
7. How long it is kept
Account and progress data is kept while the account is in use, and deleted within 12 months of an account becoming inactive or a school ending its use of an app. Marking data is kept for as long as the school needs it for awarding and moderation, then deleted on the school's instruction. Emails are kept for up to two years. Backups are overwritten on a rolling basis.
8. Children's data
LearnIT and GridIT are used by pupils, usually through a school. Accounts are created by or with the school, and the school is responsible for informing pupils and parents and for obtaining any consent required. Only the data needed for learning is collected — never more.
9. Your rights
Under UK GDPR you can ask for a copy of your data, ask for it to be corrected or deleted, object to or restrict its use, or ask for it to be transferred elsewhere. Email hello@ileva.uk and you will get a reply within one month. Pupils and parents should contact the school first, as the school controls that data.
If you are unhappy with the response, you can complain to the Information Commissioner's Office at ico.org.uk.
10. Security
All traffic is encrypted in transit over HTTPS. Access to live data is limited to the one person who runs ileva, and only for support and maintenance. Sign-in is delegated to Google, so no passwords are stored.
11. Changes
If this policy changes materially, the date above will be updated and, where the change affects you, you will be told in the app or by email.