Privacy Policy - SkillStak

Last Updated: 2 November 2025

1. Introduction

This Privacy Policy explains how SkillStak ("we", "us", or "our") collects, uses, and protects your personal information when you use our flashcard learning platform.

We are committed to protecting your privacy and being transparent about our data practices. SkillStak is operated from the United Kingdom and complies with UK data protection laws, including the UK GDPR.

2. Information We Collect

2.1 Information You Provide

When you use SkillStak, we collect information you provide directly:

Account Information: Email address, username, and password (stored securely)
Profile Information: Optional display name and preferences
Flashcard Content: The flashcards, card packs, and study materials you create
Communications: Messages you send to us for support or feedback

2.2 Automatically Collected Information

When you use our service, we automatically collect:

Usage Data: Pages visited, features used, study sessions, and learning progress
Device Information: Browser type, operating system, IP address, and device identifiers
Cookies and Similar Technologies: Information stored in cookies to maintain your session and preferences

2.3 Information We Do Not Collect

We do not:

Collect payment information (as the service is currently free)
Track your location beyond general region derived from IP address
Access your device's contacts, camera, or other features without permission

3. How We Use Your Information

We use your information to:

Provide Our Service: Create your account, store your flashcards, and enable studying features
Improve SkillStak: Analyze usage patterns to enhance our platform and develop new features
Communicate With You: Send service updates, respond to inquiries, and provide support
Ensure Security: Detect and prevent fraud, abuse, and security incidents
Comply With Legal Obligations: Meet regulatory requirements and enforce our Terms of Service

3.1 Legal Basis for Processing (UK GDPR)

We process your personal data based on:

Contract Performance: To provide the services you've requested
Legitimate Interests: To improve our service, ensure security, and communicate with you
Consent: Where you've given specific consent for certain processing activities
Legal Obligation: Where required by law

4. Data Sharing and Disclosure

4.1 Service Providers

We may share your information with trusted third-party service providers who help us operate SkillStak:

Hosting Providers: To store and serve your data
Analytics Services: To understand how our platform is used (anonymized where possible)
Email Services: To send service communications

These providers are contractually obligated to protect your data and use it only for specified purposes.

4.2 We Do Not Sell Your Data

We do not sell, rent, or trade your personal information to third parties for their marketing purposes.

4.3 Legal Requirements

We may disclose your information if required by law, court order, or to:

Comply with legal processes
Protect our rights, property, or safety
Prevent fraud or security threats
Enforce our Terms of Service

4.4 Business Transfers

If SkillStak is involved in a merger, acquisition, or sale of assets, your information may be transferred. We will notify you of any such change and your choices regarding your data.

5. Data Retention

We retain your information for as long as:

Your account is active
Needed to provide our services
Required by law or for legitimate business purposes

When you delete your account, we will delete or anonymize your personal information within 90 days, except where we must retain certain data for legal compliance.

6. Your Rights and Choices

Under UK data protection laws, you have the following rights:

6.1 Access and Portability

Access: Request a copy of your personal data
Data Portability: Receive your flashcard data in a portable format

6.2 Correction and Deletion

Correction: Update or correct your personal information
Deletion: Request deletion of your account and data (subject to legal retention requirements)

6.3 Control and Objection

Restrict Processing: Limit how we use your data
Object: Object to processing based on legitimate interests
Withdraw Consent: Withdraw consent for specific processing activities

6.4 Exercising Your Rights

To exercise these rights, contact us at [email protected]. We will respond within 30 days.

7. Data Security

We implement appropriate technical and organizational measures to protect your data:

Encryption: Data is encrypted in transit and at rest
Access Controls: Restricted access to personal data on a need-to-know basis
Regular Security Reviews: Ongoing assessment of our security practices
Secure Infrastructure: Using reputable cloud service providers with strong security measures

However, no system is completely secure. While we strive to protect your data, we cannot guarantee absolute security.

8. Cookies and Tracking Technologies

8.1 What We Use

We use cookies and similar technologies for:

Essential Cookies: Required for authentication and core functionality
Preference Cookies: To remember your settings and choices
Analytics Cookies: To understand how you use SkillStak (anonymized where possible)

8.2 Your Choices

You can control cookies through your browser settings. However, disabling certain cookies may affect your ability to use some features.

8.3 Do Not Track

We currently do not respond to "Do Not Track" signals as there is no industry standard for compliance.

9. Children's Privacy

SkillStak is available to users aged 13 and above. We do not knowingly collect personal information from children under 13.

If you are under 18, please ensure you have parental or guardian consent before using SkillStak.

If we learn that we have collected information from a child under 13, we will delete it promptly. Please contact us if you believe we may have such information.

10. International Data Transfers

Your data is primarily processed and stored in the United Kingdom. If we transfer data outside the UK, we ensure appropriate safeguards are in place, such as:

Standard contractual clauses approved by the UK Information Commissioner's Office
Data processing agreements with service providers
Adequacy decisions where applicable

11. Third-Party Links

SkillStak may contain links to third-party websites or services. We are not responsible for their privacy practices. We encourage you to review the privacy policies of any third-party sites you visit.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Changes will be posted with an updated "Last Updated" date.

For material changes, we will:

Notify you via email or through the service
Provide a prominent notice on our platform
Give you the opportunity to review changes before they take effect

Your continued use of SkillStak after changes become effective constitutes acceptance of the updated Privacy Policy.

13. Contact Information

13.1 General Inquiries

For questions about this Privacy Policy or our data practices:

Email: [email protected]

We aim to respond to all inquiries within 5 business days.

13.2 Data Protection Officer

For specific data protection concerns or to exercise your rights, you can contact our Data Protection Officer at the email address above.

13.3 Supervisory Authority

You have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) if you believe we have not handled your data appropriately:

Website: https://ico.org.uk/
Telephone: 0303 123 1113

14. Additional Information for UK Users

As a UK-based service, we comply with the UK GDPR and Data Protection Act 2018. We are committed to:

Processing your data fairly, lawfully, and transparently
Collecting data only for specified, explicit purposes
Minimizing data collection to what is necessary
Keeping your data accurate and up to date
Retaining data only as long as necessary
Processing data securely and confidentially

Thank you for trusting SkillStak with your learning journey. Your privacy matters to us.