Legal
Privacy Policy
Last updated 26 September 2026
The short version
- We collect only what an account needs: your email, a password, and optionally your name.
- If you're signed in, your quiz results are saved to your account so they appear on all your devices. If you're not, they stay in your browser.
- No ads, no tracking cookies, no third-party trackers. We never sell your data.
- We count page views to see whether anyone is using the site — as totals only, with nothing that identifies you.
- You can ask us to delete your account at any time.
Who we are
BioCentral IB (biocentral-ib.com) is an independent IB Biology study site. In this policy, "we" and "us" mean BioCentral IB. You can reach us about anything in this policy at [email protected].
What we collect
When you create an account
- Your email address — to sign you in, confirm your account and reset your password.
- Your password — stored by our sign-in provider in scrambled (hashed) form. Nobody at BioCentral IB can see it.
- Your name, if you choose to give it.
- Your country, if you choose to give it — so we know where our students are. It's the country you pick; we don't work it out from your connection.
- Your quiz results — see below.
- Whether you're a student or a teacher, and which plan you're on — so we show you the right features.
Your quiz results
For each lesson quiz you finish, we save your score, the answers you chose and which questions you got wrong, so the app can show your results and let you re-practise what you missed.
- Signed in: these results are saved to your account, so they appear on every device you sign in on. When you log out, they're removed from that device's browser and stay in your account.
- Not signed in: they're saved only in your browser on the device you're using, and aren't sent to us. Clearing your browser's data for this site deletes them. If you later sign in on that device, they're added to your account.
What stays on your device
Your answers on a paper you're partway through sitting, and the name you type when sitting a paper, are saved only in your browser on the device you're using. They aren't sent to us.
To keep you signed in, your browser also stores a sign-in token for our site. We don't use cookies for tracking or advertising.
Counting visits
To know whether the site is being used, each page adds 1 to a counter on our own server. We store only the date, which page it was, and the country the request came from — as totals, never as a list of visits. We don't store your IP address, your browser, where you came from, or anything else, and nothing links a count to you or to an account. On the first page of a visit we also count where you came from — only the name of the website or app (for example google.com or Instagram), or "direct" if your browser doesn't say — again as a total, never the full address. A few steps towards paying are counted the same way — opening the Upgrade screen, copying your payment code, the pricing page's "How to pay" button — again only as totals. There's no cookie: your browser remembers only, for as long as the tab is open, that it has already been counted once this session.
Technical information
Like almost every website, our hosting and sign-in providers automatically record your IP address, your browser type and the pages you request. We use this only to keep the site running, secure it, and stop abuse — for example, to limit how fast one address can download lesson content.
What we don't do
- We don't show ads.
- We don't use third-party analytics, advertising or tracking pixels, and we set no tracking cookies.
- We don't sell, rent or trade your personal information.
- We don't send marketing emails. The only emails we send are the ones your account needs: confirming your address and resetting your password.
Who handles your data for us
We use a small number of service providers. Each handles only what it needs to do its job for us.
| Provider | What they do | What they see |
|---|---|---|
| Supabase | Stores accounts and saved quiz results, and handles sign-in. Servers in Singapore. | Your account details, quiz results, IP address |
| Cloudflare | Hosts the website and protects it from attacks and abuse. | IP address, browser type, pages requested |
| Resend | Sends account emails (confirmation, password reset). | Your email address and the email's content |
| jsDelivr | Delivers a code library the site needs to sign you in. | IP address when your browser downloads it |
| Google Fonts | Supplies the typefaces used on revision slides. | IP address when your browser loads a slide deck |
Because these providers operate internationally, your information may be processed in countries other than your own, including Singapore and the United States.
When you pay for Pro by Whish, the payment goes through your own Whish account, under Whish's own terms. From the transfer we see what Whish shows any recipient: the sender's name and phone number, the amount, the date and the note — which should contain your payment code. We use this only to match the payment to your account, and we keep a record of each activation (amount, method, the note and the pass's end date) for our accounts and for refunds. We never see card or bank details.
If you tap "I've sent the payment" on the Upgrade screen, we record that against your account, with the pass you chose and the time, so we know which transfer to look for.
How long we keep it
We keep your account information for as long as you have an account. When you ask us to delete your account, we delete your account information and your saved quiz results. Our providers keep technical logs for limited periods for security reasons, then delete them.
Your rights
Wherever you live, you can ask us to:
- tell you what personal information we hold about you and give you a copy;
- correct anything that's wrong;
- delete your account and the information attached to it, including your saved quiz results.
Email [email protected] from the address on your account, and we'll respond within 30 days. You also have the right to complain to the data protection authority where you live.
Students and age
BioCentral IB is built for secondary-school students and their teachers. You must be at least 13 to create an account. If you're under 16, or under the age at which you can consent to data processing where you live, please get a parent's or guardian's permission first. If we learn that a child under 13 has created an account, we'll delete it.
Teachers and students
At the moment, teachers can't see students' accounts, progress or results. A paper code a teacher shares contains only the questions and settings for that paper — no personal information about the teacher or anyone else. If that ever changes, we'll update this policy first.
How we protect your information
The whole site is served over encrypted HTTPS. Passwords are stored in hashed form, and our database only lets each signed-in person read their own account. No system is perfectly secure, but we take reasonable measures to protect what you trust us with.
Changes to this policy
If we change how we handle your information, we'll update this page and change the date at the top. If the change is significant, we'll tell account holders by email before it takes effect.
Contact
Questions or requests: [email protected].