Privacy notice

Who we are

CueCurve is run by CueCurve LTD, registered in England and Wales, company number 17542571. Registered office: 71–75 Shelton Street, Covent Garden, London, WC2H 9JQ. We're registered with the Information Commissioner's Office, registration number C2073447.

CueCurve LTD is the controller of the personal information described here. That means we decide how it's used and we're responsible for looking after it. We decide how CueCurve works and what it keeps; your school decides whether to buy a licence and who is on its list.

For anything about your information, email hello@cuecurve.co.uk. We don't have a data protection officer – the law doesn't require one for what we do – so the person responsible for data protection at CueCurve LTD reads that inbox.

If you use the free diagrams without an account

• No account needed: you can use the four free diagrams without an account or giving us your name or email. The only information involved is the short-lived technical kind below.
• No tracking: we don't use advertising or tracking cookies, and we don't build profiles of visitors.
• Server logs: like every website, our hosting provider's servers keep short-lived technical logs of requests, such as the address requested, the time, and the visitor's IP address and browser type. These are used to keep the site running and secure, and are deleted automatically after a short period, set by the provider (about a day for our website host).
• Error reports: if something goes wrong in CueCurve, in your browser or on our servers, a short technical note is recorded and emailed to us so we can fix it: what went wrong, in which part of CueCurve, and on which diagram page. It's a short technical description, not a copy of what you typed or of the diagram's settings, and our servers strip email addresses, ids and numbers from it before it's stored or emailed. Each kind of problem is kept until about 90 days after it was last seen.
• Visit counts: we use Vercel Web Analytics to count visits and popular pages, for visitors and signed-in teachers alike. For each page view it records the page's address (without anything after a question mark), the site you came from, your country, region and town (worked out from your IP address, which isn't kept), and your browser, operating system and type of device. It doesn't use cookies or store anything on your device, and it tells visits apart with a code that changes every day, so it can't follow you from one day to the next. It also counts which parts of CueCurve are used, the same way: which diagram, scenario and exam board are opened; when Present, Draw it, Step by step, the pen, Blank or the shortcuts list is used; changes in View, such as curve colours; how a diagram is shared, copied or printed; how someone signs in; and the buying steps: opening the buy or quote form, asking for a quote, ordering by invoice, and starting, finishing or cancelling a card payment. Each count also says whether a teacher is signed in on that browser. These counts never include names, email addresses, schools or anything typed. If you'd rather not be counted, use the Don't count my visits button further down this page.
• Stopping misuse: when someone searches for a school, asks for or types a sign-in code, starts a Microsoft or Google sign-in, places an order, asks for a quote, adds a teacher, tells us about a school outside the UK or answers "how did you hear about CueCurve", we count how often it happens. We keep the counts against identifiers made from the IP address – and, for sign-in codes, quotes and schools outside the UK, the email address typed; for adding teachers, the school's and lead teacher's internal ids – using a secret key. The counters don't store the original values. Search counts go after a day; the others after two days.

Why we use it (our lawful basis): our legitimate interests in running a website that's secure and reliable, putting problems right, and understanding which parts are used.

If you're a teacher with an account

Where it comes from: from you, when you sign in or buy a licence; from a colleague at your school who names you as lead teacher when buying by card or ordering an invoice; or from your school's lead teacher, if they add you to the school's list. You don't have to give us your email address, but without it you can't have an account.

We keep:

• Your account: your email address, the school or schools you belong to, whether you're a lead teacher, and when your account was created.
• Sign-in details:
  • when you last signed in, and, for each signed-in device, its IP address and browser, which our sign-in system (Supabase) records;
  • the one-time codes we send you (each works for a short while);
  • if you sign in with your Microsoft or Google account: your name, email address and that account's ID, which Microsoft or Google sends us when you sign in. We use them only to sign you in to the right account;
  • a sign-in cookie that keeps you signed in on your device, for up to 400 days unless you sign out;
  • a log of sign-in events, such as codes sent and sessions started, with the email and IP address involved, which our sign-in system keeps and we delete after 90 days.
• Changes made at your school: a record of actions such as adding or removing a teacher, or handing over the lead teacher role. This includes who made each change and when, and it lets us investigate problems and misuse.
• Diagrams you save: if you save a diagram to My library, the name you give it, which diagram it is and how you set it up (what a share link holds), a small picture of it as you left it, and when you saved it. If you choose to keep your pen drawing from Present with it, we keep that drawing too: just the lines you drew, as positions on the diagram. Only you can see them.
• Your Getting started progress: which of the Learn panel's Getting started steps you've done (such as choosing a scenario or presenting), whether you've answered the welcome, which guides you've seen listed, and which department training treasure hunt you chose and which of its tasks you've done, so the ticks follow you to any computer. Only you can see them. It holds nothing you've typed.
• Lessons you make: if you make a lesson from your saved diagrams, its name, which of your saved diagrams are in it and in what order, and when you made or changed it. Only you can see them.
• Your own Draw it orders: if you change the order Draw it draws a diagram in, which diagram it is, the order of its lines, and when you changed it, so your order follows you to any computer. Only you can see them. It holds nothing you've typed.

We don't record which diagrams individual teachers open. (Our hosting provider's short-lived server logs, above, include each file requested, and some files belong to particular diagrams.) We count how many times each paid diagram is opened at each school, per day, without recording which teacher opened it. This shows schools are getting value from CueCurve and helps us decide what to improve. We also note which paid diagram files each school downloads each day, again without recording which teacher, and each school's copy of those files carries a short code for that school. This protects CueCurve from being copied.

Why we use it (our lawful basis):

• Your account and sign-in: our legitimate interest in providing and administering your school's access to CueCurve, including free access, and keeping accounts secure. Your school, not you personally, is our customer, so this is legitimate interests rather than a contract with you.
• Diagrams you save, lessons you make and your own Draw it orders: our legitimate interest in providing the feature you asked for.
• Your Getting started progress: our legitimate interest in helping you learn to use CueCurve.
• The record of changes and the usage counts: our legitimate interests in keeping CueCurve secure and improving it.

If you buy a licence or are the finance contact

We keep:

• The school's details: its name, postcode and official school reference number (from the government's public list of schools, where the school is on it), and the lead teacher's email address. The order keeps that email address as part of the financial record, even if the lead teacher later deletes their account.
• The order and licence: what was bought, the price, how it was paid (card or invoice), and the licence dates.
• Billing details:
  • for invoices, the finance contact's name and email address. If the order needs the lead teacher's confirmation, we keep them with the order request – until the confirmation link expires after 28 days if it isn't confirmed, or for 90 days from the day it was placed if it is. When the lead teacher confirms, we also pass them to our payment provider, Stripe, to send the invoice;
  • card details are entered on Stripe's own page, and we never see or store them. If you pay by card, Stripe also emails you its own receipt, using the email address you give on its payment page.
• How you heard about CueCurve, if you choose to tell us: the answer you click in your welcome email, any others you tick and anything you type. We keep the answers and anything you typed for two years, and use them only to see which ways of reaching teachers work.

If someone at your school names you as the finance contact: we get your name and email address from them. We show them to the lead teacher asked to confirm the order and, if the order needs that confirmation, keep them with the request for the periods above. When the order is confirmed we pass them to Stripe, which sends you the invoice; it carries a link to this notice.

Why we use it:

• The purchase and licence: our legitimate interests in arranging, providing and administering the school's licence – your school, not you, is our customer, so this is legitimate interests rather than a contract with you.
• Financial records: because tax and company law require us to keep them.
• How you heard about CueCurve: our legitimate interest in understanding how schools find us. Answering is optional.

If you ask for a quote

We keep:

• The quote: its reference, the school's name, postcode and official school reference number (where the school is on the government's list), the price and the dates it was given and ends.
• Who asked: your name and email address, which are printed on the quote and used to email it to you.
• Whether it became an order, and whether you asked us not to email you about it again.

Why we use it (our lawful basis): our legitimate interests in honouring the price we quoted and following the quote up. A quote is a step towards a contract with your school, so we may send you one reminder a week before it ends. You can stop it by ticking the box when you ask for the quote, or with the link in any quote email.

If your school is outside the UK

We can only sell to schools in the UK for now. If you tell us about a school outside the UK, we keep its name, its country, its exam board if you give it, your email address and when you told us.

Why we use it (our lawful basis): your consent, given by ticking the box to be emailed when CueCurve is on sale in your country. We use it only for that email and to count how many schools in each country are interested. You can withdraw your consent at any time by emailing hello@cuecurve.co.uk, and we'll delete your details.

If your school has free access

If your school has free access to CueCurve, for example from a free access link, a lead teacher who asks for them – by ticking the box when claiming free access, or on the Your school page – gets an email two weeks before it ends and another after it has ended. They say when it ends, invite the school to buy a licence and ask for feedback. Untick the box, or reply to either to say you'd rather not get them, and we'll stop. We keep the choice against your email address until you change it or your account is deleted.

We may also email the school's lead teachers, and another teacher involved in the arrangement, when we give free access, change its end date or end it early.

If we send you a free access link: we use your email address only to send it. CueCurve doesn't keep it, although our email provider, Resend, keeps the emails it sends and its records of them.

If you claim a free access link: we keep your school's name, postcode and official reference number, and that your account claimed the link. You become the school's lead teacher. Our lawful basis for providing free access is our legitimate interest in running it. Our lawful basis for the two optional emails about buying a licence is your consent, given by ticking the box; you can withdraw it by unticking the box or replying to either email.

Teacher-training courses: if a university or other teacher-training provider has free access for a course, everything on this page that applies to a school applies to that provider, and its tutors and trainee teachers are treated as the school's teachers. The course's lead teacher adds trainees to its list, and we handle their information in the same way.

Emails we send

• To lead teachers: "your licence is ready" (the welcome email); renewal reminders before and after a licence ends; and notices about unpaid invoices.
• To lead teachers: a request to confirm an invoice order someone else at the school placed, naming the finance contact it will go to.
• To teachers: "you've been added to your school".
• To anyone signing in: the sign-in codes.
• To anyone who asks for a quote: the quote, and one reminder a week before it ends unless you've asked us not to.
• To lead teachers of a school on free access: emails when we give free access, change its end date or end it early; and two emails, before and after it ends, that invite the school to buy. We send those two only to lead teachers who asked for them, by ticking the box when claiming free access or on the Your school page, and you can untick it there at any time.
• To teachers at schools outside the UK who asked: an email when CueCurve is on sale in their country.
• To anyone who deletes their account: a confirmation.

Most of these are needed to provide the licence. Some invite a school to buy: the quote reminder, the two emails around the end of free access and the email that schools outside the UK asked for. Quote emails have a stop link, the free-access emails go only to those who ticked a box for them and say how to stop, and you can object to any of them at any time by emailing hello@cuecurve.co.uk. We don't send any other marketing.

If you email or telephone us

When you contact hello@cuecurve.co.uk, we keep your email and our reply so we can help you and keep a record of what was agreed. Emails to us arrive in our business inbox, run by Google Workspace, and a person at CueCurve reads and answers each one. Our lawful basis is our legitimate interest in answering enquiries, putting problems right and keeping a record of what was agreed.

If you report a problem with a diagram: the Report a problem with this diagram box in CueCurve sends us an email, through our email provider, Resend. It holds what you typed, the diagram's link (the same settings a share link carries, never your pen drawings), the size of your browser window and, only if you give it, your email address so we can reply. We don't record who sent it, and nothing is kept in CueCurve itself: the email is handled like any other email to us. Our lawful basis is our legitimate interest in putting problems right.

If you telephone us: calls go to voicemail. Your message, your number and any details you leave are kept for us by our telephone provider, Tamar Telecommunications (Kalnet4u Ltd, a UK company), and we use them to answer your enquiry. We delete the message once we've dealt with it. Our lawful basis is our legitimate interest in handling enquiries and resolving problems.

Who we share information with

We don't sell personal information, and we don't use it for advertising. We share it only with the companies that run parts of CueCurve for us, on the terms explained below the table:

Where a supplier handles personal information for us, its contract with us sets out its duties as our processor and requires it to keep the information secure. Some suppliers also use information for their own purposes, as controllers in their own right: Stripe does, for fraud prevention and to meet financial regulations, under its own privacy notice.

Signing in with Microsoft or Google: if you choose to, your browser goes to Microsoft or Google to sign you in, so they know you've signed in to CueCurve. They aren't our suppliers for this: your account is with them, under their own privacy notices. We ask them only for your name, email address and account ID, to sign you in to the right account. We don't give them any information about you; the sign-in itself is the only thing they see.

• Your school: its lead teachers can see the school's teacher list and orders, so they can manage the licence.
• Transfers outside the UK: several of our suppliers are US companies, so some information is processed outside the UK. These transfers rely on safeguards UK law recognises – the UK's adequacy regulations for the EU, the UK Extension to the EU–US Data Privacy Framework, or the UK Addendum or International Data Transfer Agreement in a supplier's data processing terms. Email hello@cuecurve.co.uk for the safeguard a particular supplier uses and a copy of the relevant terms.
• Required by law: we may also share information if the law requires it, or to protect CueCurve and its users from fraud or misuse.

How long we keep it

Your rights

You have the right to:

• ask for a copy of the personal information we hold about you;
• ask us to correct anything that's wrong;
• ask us to delete your information. We'll do that unless we have to keep it, for example in financial records;
• object to our using your information to invite you to buy – just tell us, and we'll stop;
• object to other uses, or ask us to limit them, in some circumstances;
• ask for information you gave us in a form you can take elsewhere, in some circumstances.

We don't make decisions about you by purely automated means that have legal or similarly significant effects on you.

Deleting your account: if you're a teacher, you can do this yourself at any time with Delete my account, at the foot of Your school in the account menu. While your school has a current licence, its only lead teacher needs to make another teacher a lead teacher before using Delete my account, so the school isn't left without one. If you can't do that, email hello@cuecurve.co.uk and we'll deal with your request. Your school's lead teacher can also remove you from the school's list.

To use any of the other rights, or if you can't sign in, email hello@cuecurve.co.uk. We'll reply within one month.

If you're unhappy with how we've handled your information, email hello@cuecurve.co.uk. We'll acknowledge your complaint within 30 days, look into it, keep you informed and tell you the outcome without undue delay. You also have the right to complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.

Cookies and storage on your device

• Sign-in cookies: set when you sign in, to keep you signed in, for up to 400 days unless you sign out. Strictly necessary. Only our server can read them.
• Presentation preferences: your display choices for presenting diagrams, whether scenarios play step by step, and the exam board, teaching year and diagram you last used, saved in your browser so they're there next time. They never leave your device.
• Temporary form details: if you start filling in the purchase form, what you've typed is kept in your browser until you close the tab, so it isn't lost if you go to pay.
• Your email address, for this tab: after you sign in, your email address is kept in the browser tab, so CueCurve can show who's signed in. It goes when you close the tab or sign out.
• A dismissed renewal notice: if you close a renewal notice, your browser remembers that you did, with your school's id and the date, so it doesn't keep coming back.
• That you've signed in on this browser: a simple "yes", with no email address or account details, so that typing cuecurve.co.uk takes you straight to the diagrams and the top bar's button says Open diagrams. It goes when you sign out.
• A note that this tab reloaded: if CueCurve reloads a tab to pick up a new version, the tab remembers that it did, so it doesn't reload again. It goes when you close the tab.
• That you've asked not to be counted: if you use the button below, your browser remembers it, so our visit counting stays off on this browser.
• That you've asked us not to save your settings: if you use the button below, your browser remembers it, so CueCurve stops saving and using the settings above.

We don't use advertising or tracking cookies. The sign-in cookie, the signed-in email, the reload note and the purchase form's temporary details are needed to sign you in, take your order and keep CueCurve working. The other items only adapt CueCurve to your choices: your display choices and the last exam board, teaching year and diagram you used are saved in your browser for later visits, along with whether scenarios play step by step, a dismissed renewal notice and a note that you've signed in. The law allows settings like these as long as we tell you and you can object. To object, press Don't save my settings below: we then stop saving them and remove the ones already saved. Signing out removes the signed-in note, and clearing this site's data in your browser removes everything.

Visit counting: a small script from Vercel, our hosting provider, reports each page view – the page's address (without anything after a question mark), the site you came from, your rough location and your browser, operating system and type of device – without cookies, telling visits apart with a code made from your browser's request that changes every day. We use the counts only to see how the site is used and improve it. If you'd rather not be counted, press the button: we then don't load the script on this browser. If your browser blocks site storage, the button can't save your choice, so we don't count you at all.

Because of all this, we don't show a cookie banner.

Children

CueCurve is designed for teachers, and accounts are for adult school staff only. We don't ask schools for pupils' names, classes, work or marks, and we don't knowingly collect personal information from children – though anyone opening a free diagram, with or without an account, leaves the short-lived technical information described above.

If a teacher shares a free diagram with their class through a link or QR code, whoever opens it needs no account, and we don't know who they are. The only information involved is the short-lived technical kind described at the top of this notice. Nothing is used to work out who anyone is, build a profile or show adverts.

Security

Information is encrypted while it travels to and from CueCurve, and our database provider encrypts it where it's stored. Only named people at CueCurve LTD can see schools' details, and we record every time a school's page is opened. Our data protection page for schools gives more detail.

Changes to this notice

We'll update this notice when what we do changes, and change the date at the top. If a change matters, we'll email the lead teachers of every school with a current licence, and tell anyone else whose information it affects before it applies.