Privacy Policy

1. Introduction

Beam ("we", "our", or "us") is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal data when you use our application and services.

This policy is issued in accordance with the General Data Protection Regulation (Regulation (EU) 2016/679) ("GDPR") and the Maltese Data Protection Act (Chapter 586 of the Laws of Malta). For the purposes of data protection law, we are the data controller of your personal information.

2. Data Controller

The data controller responsible for your personal data is:

If you have any questions about this policy or wish to exercise your data protection rights, please contact us using the details above.

3. What Personal Data We Collect

We may collect and process the following categories of personal data about you:

• Account Information: Your name, email address, and year group when you create an account.
• Study Data: Your study progress, quiz results, topic completions, exam dates, target grades, and revision activity within the application.
• Usage Data: Information about how you interact with our application, including features used, session duration, and pages visited.
• Device Information: Technical data about the device you use to access our services, including browser type, operating system, and IP address.
• Payment Information: If you subscribe to a premium plan, we process payment data through our third-party payment processor (Stripe). We do not store your full credit card details.
• Communication Data: Any messages, feedback, or support requests you send to us.

4. How We Use Your Data

We process your personal data for the following purposes and on the following legal bases:

5. How We Share Your Data

We do not sell, trade, or rent your personal data to third parties. We may share your data only in the following circumstances:

• Service Providers: We use trusted third-party providers to help us deliver our services, including:
  • Base44 (infrastructure and hosting provider)
  • Stripe (payment processing)
  These providers are contractually bound to process your data only on our instructions and in compliance with GDPR.
• Legal Requirements: We may disclose your data if required to do so by law, or in response to valid legal requests by public authorities in Malta or the European Union.
• Business Transfers: In the event of a merger, acquisition, or sale of assets, your data may be transferred as part of that transaction, subject to appropriate safeguards.

6. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. Specifically:

• Account data: Retained while your account is active and for a reasonable period after account deletion to comply with legal obligations.
• Study data: Retained while your account is active to provide you with continuous progress tracking and personalised learning.
• Payment records: Retained for at least 6 years as required by Maltese tax and accounting laws.

You may request deletion of your account and associated data at any time by contacting us.

7. Data Storage & International Transfers

Your data is stored on secure servers located within the European Economic Area (EEA). If we ever need to transfer data outside the EEA, we will ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission, to protect your privacy rights.

8. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit (TLS/SSL) and at rest
• Secure authentication mechanisms
• Regular security assessments
• Access controls limiting data access to authorised personnel only

9. Your Data Protection Rights

Under the GDPR and Maltese data protection law, you have the following rights:

• Right of Access: You can request a copy of the personal data we hold about you.
• Right to Rectification: You can ask us to correct any inaccurate or incomplete data.
• Right to Erasure ("Right to be Forgotten"): You can request that we delete your personal data in certain circumstances.
• Right to Restriction of Processing: You can ask us to limit how we use your data in certain circumstances.
• Right to Data Portability: You can request a copy of your data in a structured, machine-readable format and have it transferred to another controller.
• Right to Object: You can object to processing based on legitimate interests, including direct marketing.
• Right to Withdraw Consent: Where we rely on your consent, you can withdraw it at any time.

To exercise any of these rights, please contact us at info.beamedu@gmail.com. We will respond within one month as required by law.

You also have the right to lodge a complaint with the Office of the Information and Data Protection Commissioner (IDPC) in Malta. You can contact the IDPC at:

10. Cookies & Similar Technologies

Our application uses essential cookies and similar technologies that are necessary for the proper functioning of the service, such as maintaining your login session. We do not use non-essential tracking cookies or advertising cookies.

You can configure your browser to refuse cookies; however, this may affect the functionality of our application.

11. Children's Privacy

Our service is designed for secondary school students (Year 9–11). We are committed to protecting the privacy of children. We do not knowingly collect personal data from children under the age of 13 without verifiable parental consent. If you believe a child under 13 has provided us with personal data without parental consent, please contact us and we will promptly delete such information.

12. Third-Party Links

Our application may contain links to third-party websites or services. We are not responsible for the privacy practices of those third parties. We encourage you to review the privacy policies of any external services you interact with.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal obligations. We will notify you of any material changes by posting the updated policy on this page and, where appropriate, by email. We encourage you to review this policy periodically.

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: