Privacy Policy

This policy explains how Arda Future Limited(“Theorio”, “we”, “us”) collects, uses, and protects your personal data when you use theorio.co.uk or the Theorio application.

We are the data controller for the personal data we process about you. We comply with the United Kingdom General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Data controller: Arda Future Limited
UK Company Number: 17133300
Registered office: 24 Bishops Close, Richmond, London TW10 7DF, United Kingdom
Privacy contact: info@theorio.co.uk

We collect and process the following categories of data:

Under UK GDPR Article 6, we rely on the following legal bases:

• Contract (Art. 6(1)(b)) — to provide the account, quiz functionality, adaptive learning engine, and paid subscription if you choose one.
• Legitimate interest (Art. 6(1)(f)) — to detect and diagnose errors, to personalise your learning path based on past performance, and to maintain the security of our systems.
• Consent (Art. 6(1)(a)) — for optional analytics cookies. You can withdraw consent at any time through the cookie banner.
• Legal obligation (Art. 6(1)(c)) — to retain payment and tax records for the period required by UK law.

We share personal data with the following processors. Each is bound by a data processing agreement.

• Supabase — authentication, database hosting, and row-level security. UK/EU region.
• Anthropic — large language model (Claude) used to generate multilingual explanations and personalised coaching text. Processes in the United States.
• Stripe — payment processing and subscription management. Processes in the European Union and the United States.
• Sentry — application error monitoring. Receives error messages, stack traces, and account identifier only when errors occur.
• Google Analytics — anonymised usage analytics, only if you give cookie consent. Not currently active in production.

Some of our processors are located in the United States (including Anthropic and, in certain cases, Stripe and Sentry). Transfers of personal data from the UK to the US are protected by the UK International Data Transfer Agreement (IDTA) or the UK Addendum to the EU Standard Contractual Clauses, as approved by the UK Information Commissioner's Office.

You can request more information about the specific safeguards in place by emailing info@theorio.co.uk.

We retain your account and associated usage data for as long as your account is active. If you request deletion of your account, we permanently erase your personal data within 30 days of receiving the request, except where we are required to retain specific records (for example, payment records) by UK tax and accounting law.

Error logs held by Sentry are retained for up to 90 days and then deleted.

Under UK GDPR you have the following rights in relation to your personal data:

• Access (Art. 15) — request a copy of the data we hold about you.
• Rectification (Art. 16) — correct inaccurate or incomplete data.
• Erasure (Art. 17) — request deletion of your data.
• Restriction (Art. 18) — limit how we process your data.
• Portability (Art. 20) — receive your data in a common format.
• Objection (Art. 21) — object to processing based on legitimate interest.
• Automated decision-making (Art. 22) — we do not subject you to decisions made solely by automated means that produce legal or similarly significant effects.

To exercise any of these rights, email info@theorio.co.uk. We will respond within one month.

We use two categories of cookies:

• Functional cookies — set by Supabase to keep you logged in. These are necessary for the service to work and are set without consent under the PECR “strictly necessary” exemption.
• Analytics cookies — set by Google Analytics (when active) only after you give consent via the cookie banner. You can withdraw consent at any time by clearing your browser storage for this site.

Theorio is intended for users aged 16 and over. We do not knowingly collect personal data from anyone under 16. If you believe we have inadvertently collected data from a child under 16, please email info@theorio.co.uk and we will delete it.

We may update this policy from time to time. When we do, we will change the effective date at the top and, where changes are material, notify account holders by email.

If you are not satisfied with how we have handled your personal data, you have the right to complain to the UK Information Commissioner's Office:

Information Commissioner's Office
Wycliffe House, Water Lane
Wilmslow, Cheshire, SK9 5AF
ico.org.uk