Privacy information

How data supports the Iteredia learning experience.

This page describes the product’s current data flows in plain language. The educational organisation that provisions access should provide its applicable legal notices and contact route.

Data used by the service

Teacher and administrator accounts use a name and email. Student practice accounts use a class code, name, email and password. The service records course membership, assignments, answers, outcomes, response times, sessions and progress needed to provide the learning experience.

Authentication and security

Authentication uses opaque, HttpOnly cookies. Passwords are stored as derived hashes rather than plain text. The application applies origin validation, rate limiting and secure response headers.

Hosting and retention

Production application hosting is provided through Vercel and production database hosting through Supabase. Results and historical snapshots remain available until an authorised teacher or administrator uses the relevant archive or permanent-deletion controls.

Access and requests

Students should contact their teacher or educational organisation about their account or learning records. Teachers should use the administrator that provisioned their account. A final public controller identity and direct privacy contact must be confirmed before wider commercial release.

Need account help?

Use the access route associated with your role and contact the teacher or administrator who provided it.

Student practiceTeacher sign in