Privacy Policy

Last updated: 3 September 2026

Fathomly (“Fathomly”, “we”, “us”) is a mobile and web learning app operated by Jake Green in the United Kingdom. This policy explains what personal data we collect, why we collect it, who we share it with, and the rights you have over it. Jake Green is the data controller for the personal data described here.

1. How to contact us

Email j25fts@gmail.com for any privacy question, data request or complaint. We aim to respond within 5 working days and always within one month. Our postal address is at the foot of this page.

2. What we collect

We collect only what the app needs to work:

• Account data — your email address, an encrypted password (or a Google sign-in identifier if you use Google), and the date your account was created.
• Learning data — the topics and video links you add, the paths and lessons generated for you, your answers, scores, streaks, spaced-review history and progress.
• Content you submit — text you type into answers or AI Debate, and voice recordings you make using the microphone, which are converted to text and then discarded.
• Subscription data — whether you are on a free trial or a paid Fathomly Scholar subscription, and the anonymous purchase identifier supplied by Apple and our billing provider. We never see or store your card details.
• Device data — a randomly generated device identifier stored in your device Keychain, used solely to apply free-usage limits fairly and prevent abuse. It is not linked to advertising, is not shared, and does not sync to iCloud or other devices.
• Notification data — if you allow notifications, the push token Apple issues for your device, plus your reminder preferences.
• Technical data — basic error and performance logs (for example, a failed request and its time), used to fix faults.
• Waiting-list email — if you enter your email address on our website to be told when Fathomly launches, we store that address for that purpose only, and delete it once you ask us to or the launch mailing is complete.

We do not collect your name, phone number, postal address, location, contacts, photos or biometric data. We do not use advertising trackers, third-party analytics SDKs, or cross-app tracking, and we do not build advertising profiles.

3. Why we use it, and our legal basis

• To provide the service — creating your account, generating lessons, saving progress across devices, restoring purchases. Legal basis: performance of a contract with you.
• To apply usage limits and prevent abuse — counting free video generations per account and per device. Legal basis: legitimate interests (protecting the service from misuse and controlling costs).
• To send reminders and streak notifications — only if you turn them on. Legal basis: your consent, which you can withdraw at any time in Settings or in iOS Settings.
• To fix faults and improve reliability — error logs and aggregate usage counts. Legal basis: legitimate interests.
• To meet legal duties — for example keeping records relating to purchases and tax. Legal basis: legal obligation.

4. AI processing

Fathomly uses third-party AI models to turn a topic or video into a learning path, to write and mark questions, and to power AI Debate. When you use these features we send the model the minimum needed: the topic or video transcript text, the current question, your answer, and short context about what you have already been taught. We do not send your email address, your password or your device identifier to AI providers.

We use these providers’ business and API services, and we have not opted into any programme that would allow your content to be used to train their models. Where those providers act as processors for us, they do so under their standard data processing terms. AI output can be wrong; see “How we use AI” in Settings for detail. There is no automated decision-making that produces a legal or similarly significant effect on you.

5. Who we share data with

We do not sell your data. We share it only with service providers who help us run Fathomly:

• Supabase — database, authentication and storage hosting (EU region).
• Cloudflare — application hosting and content delivery.
• Lovable AI Gateway and the underlying model providers (including Google and OpenAI) — AI lesson generation, marking, transcription and debate.
• Supadata — retrieving the transcript of a video you paste. It receives the video link or its identifier only; it receives no personal data about you.
• RevenueCat — subscription status management for Apple in-app purchases.
• Apple — payment processing, App Store subscription management and push notification delivery.
• Resend — transactional email such as sign-up confirmation and password reset.

We may also disclose data where the law requires it, or to establish, exercise or defend legal claims.

6. International transfers

Your data is stored in the European Union. Some of our providers process data outside the UK and EEA, including in the United States. Where that happens, we rely on the transfer safeguards offered in those providers’ data processing terms, which are generally the EU Standard Contractual Clauses and the UK International Data Transfer Addendum, together with the providers’ own security measures.

7. How long we keep it

• Account and learning data: for as long as your account exists.
• Voice recordings: transcribed immediately and not stored.
• Video transcripts: used once to build your path and then discarded. We keep only the AI-generated summary of the video’s subject matter.
• Error and performance logs: kept only for as long as our hosting providers retain them under their own standard, short-term log retention periods, and not used to build a profile of you.
• Usage-limit records and the device identifier: kept while needed to apply monthly limits, and no longer than 13 months.
• Waiting-list email addresses: until you unsubscribe or ask us to delete them.
• Purchase records: kept for as long as tax and accounting law requires (in the UK, currently up to 6 years).

When you delete your account we remove your profile, progress, answers, notification data and usage records. A minimal record linking a store purchase to a deleted account is retained so the same subscription cannot be claimed twice, and so we can meet our tax obligations.

8. Your rights

Under UK and EU data protection law you have the right to:

• access a copy of your personal data;
• have inaccurate data corrected;
• have your data erased;
• restrict or object to processing based on legitimate interests;
• receive your data in a portable, machine-readable format;
• withdraw consent (for example, notifications) at any time.

You can delete your account and data yourself at any time in Settings → Delete account, which erases it immediately. For anything else, email j25fts@gmail.com. Exercising these rights is free.

If you are unhappy with how we handle your data you can complain to the UK Information Commissioner’s Office (ico.org.uk, 0303 123 1113), or to your local supervisory authority if you are in the EEA.

9. Security

Data is encrypted in transit (TLS) and at rest by our hosting providers. Passwords are stored only as salted hashes. Access to production data is limited to the operator of Fathomly and protected by multi-factor authentication. Your account data is protected by database row-level security, so no other user can read your account, your progress or your answers. One exception, by design: the AI-generated summary of a public video’s subject matter is stored once and reused for anyone who later adds the same video, so it is not private to you. It contains no personal data. No system is perfectly secure, but if a breach affects your rights we will notify the ICO within 72 hours and tell you directly where required.

10. Children and young people

Fathomly is not intended for children, and we do not knowingly collect data from them. You must be at least 13 years old, or older where the law applicable to you requires a higher minimum age, to create an account. We do not offer parent-managed or child accounts. If you are under 18 you should have permission from a parent or guardian. If you believe an account has been created by someone below the applicable age, email us and we will delete it.

11. Accessibility

We aim to make Fathomly usable by everyone, and we work towards the WCAG 2.2 AA standard and the accessibility requirements of the European Accessibility Act. Fathomly supports the iOS system text-size, bold-text, reduce-motion and VoiceOver settings. If any part of the app or this website is difficult for you to use, email j25fts@gmail.com describing the problem and we will reply within 5 working days and, where we can, provide the information or function in another format.

12. Changes to this policy

We will update this page when our practices change and revise the date at the top. If a change materially affects your rights we will tell you in the app or by email before it takes effect.

Fathomly · Jake Green · 5 Roebuck Pastures, CA5 6EQ, United Kingdom · j25fts@gmail.com