Privacy notice
Last updated: 10 November 2026.
This notice covers the ScienceRoyale app and the website.
The short version
- We only collect what we need to run ScienceRoyale. In the app, that's your email address, a username, your date of birth, your course and your games.
- Other players only see your username, your avatar, your rank and your stats. Never your name, email, age or school.
- Every comment is checked before anyone else sees it.
- We never sell your details. We never use them for adverts. There are no ad trackers in the app and no tracking cookies on the website.
- You can delete your account at any time.
Who we are
ScienceRoyale is run by MedRoyale Limited, a company registered in England and Wales (company number 16019849). Our registered office is 124 City Road, London, England, EC1V 2NX.
We are the "controller" of your personal data. This means we decide how it is used, and we are responsible for looking after it. You can contact us about anything in this notice at info@scienceroyale.com.
What we collect in the app and why
| What | Why we use it | Our legal reason (lawful basis) |
|---|---|---|
| Your email address, or your Google or Apple sign-in | To make your account and let you sign in | To provide the app you signed up for (contract) |
| Your date of birth | To check you're 13 or over. You can't use ScienceRoyale if you're under 13 | Our legitimate interest in keeping the app for 13 and over, and our legal duties |
| Your username and avatar | So other players can see who they're playing | To provide the app (contract) |
| Your year group, exam board, course and tier | To show you the right content, and to plan which courses to add | To provide the app (contract) |
| Your games: answers, scores, streaks, badges, rank and review cards | To run matches, leaderboards and review mode | To provide the app (contract) |
| Your comments, likes and replies | To show them to other players | To provide the app (contract) |
| Comments you report | To check the report and remove the comment if it breaks our rules | Our legal duties under the Online Safety Act |
| Your purchases | To give you Premium. Apple or Google take the payment. We never see your card details | To provide the app (contract) |
| A code for your phone, if you allow notifications | To send you reminders and replies to your comments | To provide the app (contract) |
| Crash reports: the app version, the type of phone and what went wrong | To fix problems. They never include your name, email or username | Our legitimate interest in an app that works |
| Usage statistics: your player number, your sign-up answers and what you do in the app, such as games played | To see which parts of the app help and improve it. We send these from our servers, not from your phone. They never include your name or email | Our legitimate interest in improving the app. You can object (see Your rights) |
We don't ask for your name, your school or your address in the app.
What we collect on the website and why
| What | Why we use it | Our legal reason (lawful basis) |
|---|---|---|
| Technical details when you visit, such as your IP address and browser type, kept for a short time by our hosting provider | To run the website and keep it secure | Our legitimate interest in running a safe, working website |
| Visit counts: which pages are viewed, the country, the type of device and browser, and which link or ad brought you to the website | To see how many people visit, which pages help and which ads work | Our legitimate interest in improving the website. This uses Vercel Web Analytics, which does not use cookies and does not store anything that identifies you. Visits are counted using a code that is deleted after 24 hours |
What other players can see
- Your username, your avatar, your weekly rank, your win streak and your stats.
- Your comments and replies, with your username.
- Nothing else. Not your email, your age, your date of birth, your school or your course.
Don't put your full name in your username. A first name is fine.
How we keep comments safe
- Before a comment shows, our own rules and an AI model from OpenAI check it. They look for swearing, insults, sexual content, hate, self-harm and contact details such as phone numbers or social media names.
- If a comment breaks the rules, it isn't posted and we don't keep it.
- If a comment suggests you might be struggling, we show you how to contact Childline.
- You can report any comment. We look at every report within a day. We never tell the writer who reported them.
- OpenAI only sees the words of the comment, not who wrote it. It does not use them to train its models.
If you're under 18
- You need to be 13 or over to use ScienceRoyale. If we find out someone under 13 has an account, we delete it.
- If you're 13 to 17, you can use the app, delete your account and ask us about your data yourself, without asking anyone.
- If a parent needs to approve your purchases (Ask to Buy on iPhone or Family Link on Android), the app waits for them. We don't ask your parent for anything else.
- Reminders: at most one a day, and never between 9pm and 7am.
Our emails
- We only email you about ScienceRoyale: your account, and new features in the app.
- At sign-up, the box "Email me about new features" starts ticked. Untick it and we won't send you feature emails. You'll still get emails about your account, such as sign-in codes.
- We will never tell you to buy anything, or to ask someone to buy it for you.
- Every feature email has an unsubscribe link.
Who we share your details with
We only share your details with the companies that help us run ScienceRoyale. They can only use your details to do this work for us, under a contract with us:
- DigitalOcean (USA) runs our servers.
- MongoDB (USA) stores our database.
- Cloudflare (USA) protects and speeds up the connection between the app and our servers.
- Google Firebase (USA) runs sign-in, notifications, in-app messages and app settings.
- Shorebird (USA) delivers app updates.
- Google and Apple, if you sign in with them, and for app store purchases.
- RevenueCat (USA) keeps track of who has Premium.
- Sentry (USA, data kept in the EU) stores crash reports.
- New Relic (USA) monitors how our servers are running.
- Mixpanel (USA) stores the usage statistics.
- OpenAI (USA) checks comments.
- Brevo (Sendinblue SAS, France) sends our emails.
- Vercel Inc. (USA) hosts the website.
- Google (Google Workspace) runs our email inbox. If you email us, your message is stored there.
We never sell your details, and we never share them for advertising.
Data stored outside the UK
Some of these companies store or access data outside the UK. When they do, they use the safeguards UK law requires, such as the UK International Data Transfer Agreement or Addendum, or the UK Extension to the EU–US Data Privacy Framework.
How long we keep your details
- Your account and your games: until you delete your account.
- Your comments: until you delete them or your account. Comments we remove are deleted.
- Reports: until the account of the person who reported, or of the person who wrote the comment, is deleted.
- Usage statistics: kept to improve the app. When you delete your account, they can no longer be linked to you.
- Crash reports: about 90 days.
- If you tell us why you're deleting your account, we keep the reason, but not who wrote it.
- Emails you send us: up to 2 years, then we delete them.
- Technical details kept by our hosting provider: only for a short time, as set by Vercel.
Your rights
You can ask us to:
- tell you what data we hold about you and give you a copy
- correct it if it's wrong
- delete it (you can also delete your account in the app)
- stop emailing you about new features
- stop using it in a particular way, including the usage statistics
Email info@scienceroyale.com. We'll reply within one month. If you're under 18, you can make these requests yourself, or a parent or carer can help you.
Complaints
If you're unhappy with how we've handled your data, please tell us first so we can put it right. You can also complain to the Information Commissioner's Office (ICO), the UK's data protection regulator: ico.org.uk or 0303 123 1113.
Changes to this notice
If we change this notice, we'll update the date at the top. If a change is important, we'll tell you in the app or by email.