1. Who is responsible
C8T is the public name of this independently operated learning service based in the United Kingdom, not a registered company. Its operator is responsible for account and learning data. Send privacy requests to support@c8t.io. This notice covers the public learning beta and the features actually available to your account.
2. Account and learning data
Registration uses an email address, username, password hash and a declaration of whether you are 16–17 or an adult. C8T does not ask for a date of birth or an identity document in this flow. The service records settings, sessions, learning attempts, answers, progress, notes, to-dos, question reports, security events and activity needed to run and protect the service. Uploaded avatars and messages you choose to send are stored too.
3. What other people can see
Your nickname is not the same as anonymity. Depending on the feature, signed-in members can see your nickname, picture, level, badges and leaderboard entries. Chat messages are shown to participants. A plan owner or authorised manager can see the progress shared through their group. Your notes and individual answers are not shown to other members. The online list shows a broad activity and subject, never the question, answer, score or specific skill. You can hide your name from that list in Settings. New independently registered under-18 accounts start hidden, and parent-managed child accounts are never named there.
4. Why data is used
Accounts and sessions provide access to the requested service. Answers and progress support feedback, scoring and continuity. Security events support abuse prevention and incident investigation. Reports support content correction and an optional reply. The legal bases under UK data-protection law are these. Account, sign-in and learning data, and the emails that send invitations, password-reset links and address checks, are needed to provide the beta you joined (performance of a contract). Security records such as sign-in attempts, network addresses and blocks are kept in the operator's legitimate interest in protecting accounts and the service. Question reports and the review of participation and reliability rely on the operator's legitimate interest in correcting content and improving the beta; you get a reply to a report only if you ask for one. Records of privacy requests are kept where the law requires them (legal obligation).
5. Recipients and location
The application and database use a hosting provider in the United Kingdom. Email uses an email provider in the United Kingdom. Further encrypted copies are kept in the United Kingdom, and only C8T can read them. C8T makes and checks these backups itself. Encrypted copies of support messages are kept in the United Kingdom for 30 days. Messages stay in the support mailbox until they are deleted. The primary application, database, mailbox and the operator-managed backup copies are kept in the United Kingdom. No routine overseas processing of learner answers is configured in this release. Access from another country may involve that country's network providers. If you choose to contact C8T through a separate chat or community service, that service processes your messages under its own terms. Material changes to these arrangements will be explained before they apply. No advertising analytics, payment provider or external AI service receives learner answers through this release.
6. Retention and rights
Account and learning records (your answers, progress, notes and reports) are kept until the account is deleted, at your request or when the service permanently closes. Sign-in sessions end after one day without activity. Minute-by-minute usage records are deleted after 7 days, and expired sign-in, reset and invitation links 7 days after they expire. Security and activity logs are deleted after 90 days, closed question reports 90 days after closing, and network-address blocks 90 days after they end. Server logs are kept for up to 90 days, web-server access logs for 14 days and the database's change log for 30 days. Encrypted backups are kept on the server for 14 days; further encrypted copies in the UK are kept daily for 14 days, then one a week for 8 weeks and one a month for 12 months. Copies of support emails are kept for 30 days. You can ask for access, correction, a copy, deletion, restriction or to object by contacting support@c8t.io. The operator may check your identity before disclosing or changing account data, explain any lawful limit and respond within the period required by applicable law. You can complain to the relevant data-protection authority. Do not send a password with a request.
Return to signup →