Ascent

DRAFT — this document requires review by a qualified lawyer before launch.

Privacy Policy

Last updated: 11 July 2026

This Privacy Policy explains how Codexa LTD (“Ascent”, “we”, “us”) collects, uses, and protects your personal data when you use the Ascent platform (“Service”). We are committed to processing your data lawfully, fairly, and transparently in accordance with UK GDPR and the Data Protection Act 2018.

Questions? Contact us at hello@ascentlearning.app.

1. Data We Collect

We collect the following categories of personal data:

  • Account data: your name and email address when you register; your password (stored as a one-way bcrypt hash — never in plain text).
  • Learning data: lesson completions, quiz scores, streaks, XP, enrolled tracks, and learning preferences (seniority, preferred learning time, timezone).
  • Payment data: subscription tier and billing status. Card and payment details are processed exclusively by Stripe, Inc. and never touch our servers. We store only a Stripe customer identifier.
  • Push notification tokens: if you opt in to push notifications, we store a device token to deliver reminders. You can withdraw consent at any time in your account settings.
  • Error monitoring data: we use Sentry to capture anonymous error reports and stack traces. This data may include device type, browser version, and the page where an error occurred. It does not include lesson content or quiz answers.

2. How We Use Your Data

  • To provide and personalise the Service (lawful basis: contract).
  • To process payments and manage your subscription (lawful basis: contract).
  • To send learning reminders and account notifications (lawful basis: legitimate interest / consent for push notifications).
  • To monitor and improve service reliability (lawful basis: legitimate interest).
  • To comply with legal obligations (lawful basis: legal obligation).

3. Cookies & Auth Tokens

The Service uses browser storage to keep you signed in:

  • Access token: a short-lived JSON Web Token stored in localStorage. Expires after 15 minutes.
  • Refresh token: a longer-lived token stored in an httpOnly cookie (not accessible to JavaScript). Used only to obtain a new access token.

We do not use third-party advertising or tracking cookies.

4. Data Retention

We retain your account and learning data for as long as your account is active. If you delete your account, we will delete your personal data within 30 days, except where we are required to retain it for legal or financial compliance purposes.

5. Data Sharing

We do not sell your personal data. We share data only with:

  • Stripe — payment processing (see Stripe's Privacy Policy).
  • Sentry — error monitoring (anonymised error data only).
  • Expo / Apple / Google — if you use the mobile app and opt in to push notifications, a device token is passed to the platform's notification service.
  • Legal or regulatory authorities, where required by law.

6. Your Rights (UK GDPR)

Under UK GDPR, you have the right to:

  • Access the personal data we hold about you.
  • Rectify inaccurate data.
  • Erasure (“right to be forgotten”).
  • Restrict or object to processing.
  • Data portability.
  • Withdraw consent at any time (where processing is based on consent).

To exercise any of these rights, email us at hello@ascentlearning.app. We will respond within 30 days. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

7. Security

We take reasonable technical and organisational measures to protect your data, including encrypted communications (TLS), bcrypt password hashing, and httpOnly session cookies. No method of transmission over the internet is 100% secure; we cannot guarantee absolute security.

8. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or by displaying a notice in the Service. The “Last updated” date at the top of this page reflects the most recent revision.

9. Contact

Codexa LTD, England and Wales. hello@ascentlearning.app