Privacy Notice

MYP Science is operated by IB Science Hub. IB Science Hub is the data controller for the personal data described in this notice — meaning we decide how and why your data is processed.

• Account data — email address, username and login credentials, used to create and secure your account (legal basis: contract performance).
• Learning progress — quiz answers, scores, XP, streaks, diagnostic results and activity history, used to provide the service and personalise your study plan (legal basis: contract performance).
• Usage and device data — IP address, browser type and basic telemetry, used for security, fraud prevention and product improvement (legal basis: legitimate interests).
• Support messages — if you contact us, we keep the correspondence to help you (legal basis: legitimate interests).

Payment details (card numbers etc.) are collected and processed directly by Paddle, our Merchant of Record — we never see or store your card details.

• Service providers — hosting, database and analytics providers that process data on our behalf under contract.
• Paddle (Merchant of Record) — for the sale of subscriptions and passes, subscription management, payments, tax compliance and invoicing.
• Professional advisers — legal and accounting advisers where needed.
• Authorities — where required by law.

We do not sell your personal data, and students cannot see each other's profiles.

Some of our service providers process data outside the UK/EEA. Where this happens, we rely on appropriate safeguards such as adequacy decisions or standard contractual clauses.

We keep your data for as long as your account is active and as needed to provide the service. When data is no longer needed, it is deleted or anonymised. You can ask us to delete your account at any time.

Depending on where you live, you may have the right to access, correct, delete, restrict or port your personal data, to object to processing, and to withdraw consent. You also have the right to complain to your local data protection authority. We respond to requests within one month.

We use appropriate technical and organisational measures — including encryption in transit, access controls and row-level security in our database — to protect your data.

We use essential cookies and local storage to keep you signed in and remember your progress. We do not use advertising or marketing cookies.

For any privacy question or to exercise your rights, contact us via the support details shown at checkout or on your Paddle receipt.