Data protection

Privacy Policy

Last updated: 6 June 2026. We take the privacy of young people seriously — here's exactly what we collect and why, in plain terms.

Cadet AI (“the app”, “we”, “us”, “our”) is a study aid for UK Army Cadet Force (ACF) and Combined Cadet Force (CCF) cadets. This app is not an official MOD, ACF, CCF or Cadet Forces product.

Operator / data controller: Cadet AI  ·  Privacy contact: support@cadetai.co.uk

1. Who this app is for (aged 13+)

Cadet AI is for cadets aged 13 and over. You must be at least 13 to create an account: when you sign up we ask your age, and if you are under 13 we do not create an account for you — we ask you to have a parent or guardian help instead. We do not knowingly collect personal data from children under 13; if we learn we have, we will delete it. Parents and guardians can contact us at any time to see, correct, or delete their cadet’s data.

2. What we collect

Only what the app needs to work:

We do not collect your location, contacts, or photos. There are no advertising SDKs and no third-party analytics trackers, and we do not sell your data.

3. Microphone

If you use TANGO’s optional voice feature, the app uses your device microphone to turn your speech into text. Depending on your device, this speech-to-text may be handled by your device’s operating system or its built-in (for example, Google) speech service rather than by us. You are asked for permission first and can decline or revoke it; the rest of the app still works.

4. How we use your data

To create and secure your account; to save and show your training progress, badges, awards and rank; to answer your questions in TANGO; to show leaderboards only if you opt in; and to send the optional daily streak reminder if you turn it on.

Legal basis (UK GDPR): our legitimate interests in providing the study service you chose to use, weighed against your interests as a young person (Article 6(1)(f)); and your consent for optional features such as leaderboards and reminders (Article 6(1)(a)), which you can withdraw at any time in Settings. In the UK, 13 is the minimum age at which a young person can agree to use an online service like this without a parent.

5. Who we share it with

We use a few trusted providers who process data on our behalf: Supabase (secure hosting, database, sign-in, and TANGO chat history); Google (only if you choose “Continue with Google”, to sign you in); and OpenAI (your TANGO messages are sent to OpenAI’s API to generate a reply and saved as your chat history — messages sent through the API are not used to train OpenAI’s models; please don’t type sensitive personal information into TANGO). We never share your data with anyone else, and we never sell it.

International transfers. Some providers process data outside the UK (for example, OpenAI in the US). Where data leaves the UK we rely on the UK International Data Transfer Addendum to the EU Standard Contractual Clauses (or an equivalent safeguard, or transfer to a country the UK recognises as adequate) so your information keeps an equivalent level of protection.

6. Leaderboards

Leaderboards are off by default. If you turn on “Appear on leaderboards” in Settings, your display name, unit/school, and XP can be shown to other cadets. You can turn this off at any time and we will stop including you.

7. How long we keep it

We keep your account and progress data while your account exists. Your TANGO chat history is kept until you delete it or delete your account. If you ask us to delete your account, we delete your personal data (we may keep minimal records where the law requires).

8. Your rights & deleting your data

Under UK GDPR you can ask us to access, correct, delete your account and all its data, restrict, object to, or export your data — including via the in-app “Delete my account” option, or by emailing us. We will respond within one month. A parent or guardian can make a request on a cadet’s behalf. You can also complain to the UK Information Commissioner’s Office (ICO) at ico.org.uk.

9. Security

Your data is sent over encrypted connections (HTTPS) and stored by our hosting provider (Supabase), which encrypts data at rest, with access controls limiting who can see it. No system is perfectly secure, but we take reasonable steps to protect your information and will act promptly if we become aware of a personal-data breach.

10. Changes to this policy

If we change this policy we will update the date above and, for significant changes, notify you in the app.

11. Contact

Questions, requests, or concerns: support@cadetai.co.uk.