Privacy notice

This notice explains how Codeseq Ltd (“we”) uses personal data in UCAT Me, an invite-only UCAT progress tracker. It is written for UK GDPR.

Who is responsible

The data controller is Codeseq Ltd. Questions or requests: hello@codeseq.co.uk.

What we store

• Account email and password (password stored hashed by our auth provider)
• Display name and score targets you set
• Practice records: dates, VR / DM / QR scores, SJT band, optional percent and percentile, “what went well” / “what to improve”, source, badges
• A login session so you stay signed in

We do not run ads, sell data, or send marketing.

Why we use it

To provide the tracker you were invited to use (contract / legitimate interests for a private, invite-only app). We do not use the data for profiling or automated decisions beyond showing your own graphs and badges.

Who processes it

• Supabase — database and login, hosted in the EU (eu-west-2)
• Vercel — hosts the website. Some processing may take place outside the UK

Cookies

We only use strictly necessary cookies so you can stay logged in. They are set by Supabase Auth (names like sb-wvyjwduybgdghdohkyzv-auth-token). There are no analytics, advertising, or optional cookies, so there is no cookie consent banner.

How long we keep it

While the account exists. If you want an account removed, email us or ask the person who invited you (they can delete the user in Admin / Supabase).

Family accounts

This is an invite-only family app. Accounts are created by the person who runs it, not by public sign-up.

Your rights

You can ask for a copy of your data, a correction, or deletion, and you can complain to the Information Commissioner’s Office. Email hello@codeseq.co.uk first and we will help.

This page is not legal advice.