Last updated: 12 September 2026
LastMind ("LastMind", "we", "us" or "our") is an online learning platform designed to help people learn and retain knowledge through personalised learning, retrieval practice and spaced repetition.
This Privacy Policy explains what personal information we collect, why we use it, how we protect it, who we share it with and the choices and rights available to you.
LastMind is intended for people aged 13 and over. When you create an account we ask for your date of birth and do not allow an account to be created if it shows you are under 13.
Because LastMind may be used by children and young people, we take particular care to explain our use of personal information clearly and to design our service with privacy in mind.
LastMind is operated by Lawrence Wood, as an individual. LastMind is not currently operated through a registered company - operating as an individual does not change your rights under this policy, and Lawrence Wood is the data controller responsible for your personal information.
For privacy questions or requests, contact:
Email: lastmindadmin@gmail.com
We will update this section if the legal structure or contact details of LastMind change.
The information we collect depends on how you use LastMind.
Information you provide when creating an account
When you create an account, we ask for:
We do not collect gender as part of registration.
Passwords are stored using our authentication provider’s own secure hashing mechanisms - LastMind’s own code never reads or stores a readable password.
Learning information
When you use LastMind, we collect information about your learning activity, including:
Some of this information is generated by LastMind from your activity rather than directly provided by you.
Information generated by our learning system
LastMind uses your learning activity to generate information about your learning. For example, our systems may estimate:
This allows LastMind to personalise the learning experience rather than giving every learner the same sequence of material.
Information you provide in answers and notes
Some LastMind activities let you enter free-text answers, and you can write your own notes on a lesson or edit notes that LastMind automatically prepares for you from lesson content you have already studied. We may process this text to determine whether an answer demonstrates the required knowledge, identify misconceptions or errors, and provide appropriate learning activities.
You should avoid including unnecessary personal information about yourself or other people in free-text answers or notes.
We use personal information for purposes including:
Providing LastMind
We use your information to:
Improving personalisation
We use information about your previous learning performance to improve the selection, timing and difficulty of learning activities, including how many spaced recall checks a concept needs and when they appear. For example, LastMind may use information about whether you successfully remembered something after a previous retrieval attempt to help determine when and how that information should be tested again.
Improving LastMind
We may analyse learning and usage information to understand how LastMind works and improve its learning systems, algorithms, content and user experience.
Where information is retained for research, development or statistical purposes after an account is deleted, it is retained only in a genuinely anonymised, aggregated form that cannot reasonably be linked back to you - see “How long we keep information” and “Deleting your account” below.
Communications
We may use your email address to:
You can opt out of optional marketing communications. Some messages necessary to operate your account, such as password-reset messages, may still be sent when you have opted out of marketing.
Data protection law requires us to have a valid legal reason ("lawful basis") for each way we use your personal information. Our lawful bases are:
Personalisation is an important part of LastMind. Our systems analyse information about your learning activity to determine things such as what you are likely to know, what you may have forgotten, what you may find difficult and what learning activity should come next - including how many short recall checks you need after learning something, and when they should appear, based on how well you have remembered similar things before.
This is a form of profiling because automated processing is used to assess aspects of your learning behaviour and personalise the service. The purpose of this profiling is to provide and improve your learning experience. It is not intended to make decisions about your employment, education admission, credit, insurance or other matters outside LastMind.
We will take appropriate measures to ensure that profiling is used fairly, transparently and in the best interests of child users, and will review the accuracy and appropriateness of our learning models.
LastMind uses artificial intelligence to support parts of the service. AI may be used to:
We currently use Anthropic as our AI service provider.
Automated filters are applied to free-text answers and notes before they are sent to Anthropic, on every request, not just some of them. These filters are intended to detect and remove common types of personal information - for example, email addresses, phone numbers, postal addresses and card numbers, which have a recognisable pattern, and personal information introduced by common phrases such as “my name is…”, “I live at…” or “my teacher…”.
These filters are automated and pattern-based, not a human review - like any automated filter, they may occasionally miss an unusual form of personal information, so you should still avoid including unnecessary personal information about yourself or others in free-text answers or notes.
Anthropic’s own data retention terms mean that content sent to it is automatically deleted from Anthropic’s own systems within 30 days of being sent (and associated request logs within 7 days), and is not used to train Anthropic’s models. This happens on Anthropic’s own schedule, independently of LastMind - Anthropic deletes its own copies regardless of whether you have separately deleted your LastMind account.
AI-generated content may not always be accurate. AI-written explanations, questions, mark schemes and feedback are a tool to support your learning, not a guaranteed or official assessment. We do not guarantee that an AI-generated mark, grade or piece of feedback is correct, or that it reflects the mark or grade you would receive in a real exam or from a qualified teacher or examiner.
If you purchase a paid LastMind subscription, payments are processed by Stripe. Payment card details are entered directly into Stripe’s payment systems - LastMind does not receive or store your full payment card details.
We may receive information such as:
Stripe may retain some information for a period after your account or subscription ends, including to meet tax, accounting and anti-fraud obligations it is subject to as a payment provider, and processes information in accordance with its own privacy documentation.
We may share personal information with service providers that help us operate LastMind. Our current service providers include:
These providers should only receive information necessary for the services they provide to LastMind, subject to the arrangements and configurations we have in place. We do not currently sell personal information, and we do not currently upload customer lists to advertising platforms for advertising purposes.
Supabase stores your account and learning data in the United Kingdom (London). Render, our backend hosting provider, processes requests in Frankfurt, Germany, within the European Economic Area - the UK government’s own adequacy decision for the EEA already covers this without needing additional safeguards. Cloudflare operates a global network and may handle website traffic and security functions at whichever of its data centres is nearest to you, which may be outside the UK or EEA, as part of its standard content-delivery service. Anthropic is based in the United States.
Where personal information is transferred to the United States, we rely on the UK-US Data Bridge (the UK Extension to the EU-US Data Privacy Framework) for providers certified under it, and otherwise on the UK Addendum to the EU Standard Contractual Clauses - both recognised by the UK government and the Information Commissioner’s Office as providing an appropriate safeguard for this kind of transfer. Our service providers’ own data processing agreements set out the specific safeguard that applies to each of them.
We keep personal information for as long as reasonably necessary for the purposes for which it is being processed. For example:
If you delete your account, we delete your personal learning data rather than keeping a version of it linked, or reasonably re-linkable, to you. We may keep genuinely aggregated, statistical information (for example, an average across many students) that does not identify you.
You can delete your LastMind account yourself, from your account settings. When you do, we:
Deleting your account does not cancel any paid subscription - please cancel this separately first, using “Manage Subscription”, which opens Stripe’s own billing portal where you can cancel yourself.
Some information may still need to be retained for legal, financial, security or other legitimate purposes, as described above.
Depending on the circumstances, you may have rights including:
You can exercise your rights by contacting lastmindadmin@gmail.com. We may need to verify your identity before completing certain requests in order to protect your information.
You also have the right to complain to the UK’s Information Commissioner’s Office (ICO) if you believe your personal information has been handled unlawfully.
LastMind is intended for users aged 13 and over and may be used by children and young people.
When you create an account, we ask for your date of birth and use it to check you meet this minimum age. A simple tick-box confirmation on its own is not something we consider a strong enough check, in line with current UK regulatory guidance on age assurance, so we ask for an actual date of birth instead and will not create an account that indicates you are under 13.
We aim to provide privacy information that is clear and understandable to younger users, and apply privacy protections appropriate to services likely to be accessed by children, including consideration of the UK’s Children’s Code.
Our service does not currently require users to provide their precise location, and we do not currently provide behavioural advertising based on LastMind user profiles.
We will review our age-assurance approach and the level of certainty required in light of the risks associated with our processing.
LastMind does not use cookies. We use your browser’s own local storage only for things that are strictly necessary to run the service: keeping you signed in, remembering your subscription status, your colour theme preference, and recovering an answer you were part-way through typing if your browser reloads.
None of this is used for advertising, and none of it is shared with or used to track you across other websites. Because of this, we do not currently need to show you a cookie consent banner. We will add analytics or advertising technologies, and a consent banner, only if this ever changes, and will update this section first.
We take reasonable technical and organisational measures to protect personal information against unauthorised access, loss, misuse, alteration or disclosure. These include restricting access to your data to your own account, rate-limiting to reduce the impact of abuse, database-level access controls, and encrypted connections between your device and our servers.
Passwords are never read or stored by LastMind’s own systems - creating, checking and resetting a password is handled entirely by our authentication provider.
No internet-based service can guarantee absolute security.
We may update this Privacy Policy when LastMind’s services, data processing or legal requirements change. If we introduce new types of processing that materially affect users’ privacy, we will provide appropriate information before or when the new processing begins. The date at the beginning of this policy shows when it was most recently updated.
For questions about this Privacy Policy or your personal information, contact:
Email: lastmindadmin@gmail.com
LastMind: Lawrence Wood