Privacy Notice

Last updated: 16 October 2026

Who is responsible

Skychup, based in the United Kingdom, runs Skychup Demystified and is the data controller for the personal data described here. We decide why and how that data is used.

What we collect and why

• Learning progress and settings (lessons done, XP, saved models, units). These are kept in your own browser's storage to provide the Service. Legal basis: performance of our contract with you.
• Text you type into the AI planning helper. This is sent to our AI provider to create your plan and is not used to identify you. Legal basis: contract performance.
• Purchase reference (a transaction ID saved in your browser) so we can confirm full access with Paddle. Legal basis: contract performance.
• Technical data (IP address, browser and device type, basic request logs) collected by our hosting provider for security, fraud prevention and keeping the Service working. Legal basis: legitimate interests.
• Support messages, if you contact us, so we can answer them. Legal basis: legitimate interests.

We don't create accounts, we don't run advertising trackers, and we don't sell personal data.

Who we share it with

• Paddle.com, our Merchant of Record, which handles the sale, payments, tax and invoicing. Paddle collects your payment and billing details directly under its own privacy policy.
• Service providers for hosting and the AI planning helper, who process data only on our instructions.
• Professional advisers, such as lawyers and accountants, when needed.
• Authorities, where the law requires it.

International transfers

Some providers may process data outside the UK. Where they do, we rely on adequacy decisions or standard contractual clauses (including the UK addendum) to protect it.

How long we keep it

Data in your browser stays until you clear it or use Settings → Reset. Server logs are kept only as long as needed for security, normally no more than 30 days. Purchase records are kept by Paddle as the law requires. When we no longer need data, we delete or anonymise it.

Your rights

Under UK GDPR you can ask to access, correct or delete your data, restrict or object to its use, receive it in a portable form, and withdraw consent where we rely on it. We reply within one month. You can also complain to the Information Commissioner's Office (ico.org.uk).

Security

We use appropriate technical and organisational measures, including encrypted connections (HTTPS) and limited access to systems.

Cookies and storage

We use only essential browser storage to remember your progress, settings and purchase. We don't use analytics or marketing cookies. Paddle's checkout may set its own essential cookies when you pay. You can clear storage at any time in your browser settings.