Privacy Policy

Last updated: 20 March 2026

SmartCert ("we", "us", or "our") operates the website smartcert.ie and provides AI-powered study tools for Leaving Certificate students. We are based in Ireland and comply with the General Data Protection Regulation (GDPR) and the Irish Data Protection Act 2018.

1. Data Controller

SmartCert is the data controller for personal data collected through this service. If you have questions about your data, contact us at contact@smartcert.ie.

2. What Data We Collect

We collect the following personal data:

• Account information: name, email address, phone number, and profile picture (provided during signup)
• Payment information: processed securely by Stripe. We store your Stripe customer ID and subscription status but never your card details directly.
• Chat data: questions you ask our AI chatbot and the responses generated. Conversation history is stored securely in our database (Firebase Firestore) and linked to your account so you can access past conversations.
• Notebook entries: responses you choose to save to your notebook are stored in our database.
• Usage data: we use Google Analytics to collect anonymous usage statistics (pages visited, session duration, etc.).

3. Legal Basis for Processing

We process your data based on:

• Contract performance: to provide the SmartCert service you signed up for
• Legitimate interest: to improve our service and prevent abuse
• Consent: for optional analytics and marketing (where applicable)

4. How We Use Your Data

• To create and manage your account
• To process your subscription payments via Stripe
• To provide AI-powered study responses tailored to the Leaving Cert biology syllabus
• To store notebook entries you choose to save
• To improve our service through anonymous analytics

5. Third-Party Services

We use the following third-party services that may process your data:

• Firebase (Google): authentication, database, and hosting — Firebase Privacy
• Google Vertex AI: to generate AI responses to your questions
• Stripe: to process subscription payments — Stripe Privacy
• Google Analytics: anonymous usage analytics — Google Privacy

6. Data Retention

• Account data is retained for as long as your account is active.
• Notebook entries are retained until you delete them.
• Chat conversation history is retained for as long as your account is active. You can delete individual conversations at any time.
• If you delete your account, we will delete your personal data within 30 days.

7. Your Rights Under GDPR

As a data subject in the EU/EEA, you have the right to:

• Access: request a copy of the personal data we hold about you
• Rectification: correct any inaccurate personal data
• Erasure: request deletion of your personal data ("right to be forgotten")
• Restriction: restrict how we process your data
• Portability: receive your data in a portable format
• Objection: object to processing based on legitimate interest

To exercise any of these rights, contact us at contact@smartcert.ie. We will respond within 30 days.

8. Data Security

We use industry-standard security measures including Firebase Authentication, HTTPS encryption, and Stripe's PCI-compliant payment processing. However, no method of transmission over the internet is 100% secure.

9. Children's Privacy

SmartCert is designed for Leaving Certificate students (typically aged 16–18). We do not knowingly collect data from children under 16 without parental consent. If you believe a child under 16 has provided us with personal data, please contact us.

10. Cookies

We use essential cookies and localStorage for authentication and user preferences (such as dark mode). Google Analytics may set additional cookies for anonymous usage tracking.

11. Changes to This Policy

We may update this privacy policy from time to time. We will notify users of significant changes by posting the updated policy on this page with a revised date.

12. Contact

For any privacy-related queries, contact us at:
Email: contact@smartcert.ie

13. Complaints

If you are not satisfied with our response, you have the right to lodge a complaint with the Irish Data Protection Commission (DPC) at www.dataprotection.ie.