Privacy Policy

Last updated: 27 October 2026

1. Introduction and Data Controller

Kvanta ("we", "us", "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use and safeguard your personal information when you use our newsletter service and Kvanta Prep, our free assessment practice area, in accordance with the UK GDPR and the Data Protection Act 2018.

Data controller: Kvanta (formerly FinanceSimply). Registered entity details (legal name, company number and registered office) are being finalised and will be added here once confirmed. Privacy contact and correspondence address available on request at support@kvanta.app. We will provide a geographic address within 5 working days of any request. Privacy contact: support@kvanta.app.

We are not required to appoint a statutory Data Protection Officer under UK GDPR Art. 37. All privacy queries should go to support@kvanta.app.

2. Information We Collect

We collect and process the following categories of personal data:

Email address, when you subscribe to the free or premium newsletter.
Name, optional, if you choose to provide it.
Account credentials, for premium subscribers, an Argon2id password hash (we never store your password in plain text).
Stripe customer ID, a reference issued by Stripe. We do not store card numbers, expiry dates or CVC codes; these are handled directly by Stripe.
IP address and request metadata, used for rate limiting, fraud and abuse prevention and server security.
Signup details, the page you signed up on, the site that sent you there (reduced to its name, for example google.com), any campaign tags on the link you followed, and when you confirmed you are 18 or over. We use these to see which pages and channels bring readers. They are never shared with advertisers or anyone else.
Email delivery events from Resend, opens, clicks, bounces, spam complaints and deliverability signals relayed to us by our email provider.
Session cookies, login tokens and password-reset / unsubscribe tokens, used to keep you signed in, to authenticate sensitive actions and to process unsubscribe requests.
Kvanta Prep account data, only if you create a free Kvanta Prep account: your email address, when you confirmed you are 18 or over, and the signup details already described above (the page you signed up on, where you came from and any campaign tags).
Kvanta Prep results, only while you are signed in: for each practice you complete, which practice and mode, when you started and finished, your answers (including your choices in games and questionnaires, and trial-by-trial game data such as reaction times), your score, and for each question whether you were right, how long you took, the skills it tests and the type of mistake. For games that measure timing we also store your screen size, whether it is a touch screen, your screen refresh rate and your browser's timer precision, because they affect timing results. See Section 10A.
Kvanta Prep goals, only if you are signed in and tell us: the kind of role you are preparing for (placement, spring week, internship or graduate role) and the firm you are applying to, either chosen from our list or typed in if it is not there (up to 80 characters).
Kvanta Roles saved roles and alert settings, only if you are signed in and use them: the roles you save, the stage you give each one (saved, applied, assessment, interview, offer, rejected or withdrawn), any private note you type (up to 2,000 characters), the date you say you applied, whether you want a reminder before it closes, the role types and sectors you want alerts for, and whether you have switched on the daily email summary (with the time you did so and the time we last sent one). The roles themselves are public listings taken from firms' own careers pages and are not about you.
Kvanta Prep practice tracker, only while you are signed in: for each of the six practice areas on your Prep dashboard, how many questions you have answered and how many you got right. We store the counts, not your answers, plus a random reference and the time of each update for 30 days so that a retried update is not counted twice. If you use "Delete my Prep data", we also keep the time you did so for 30 days, and these references stay until their 30 days end, so that an update sent late from another device cannot bring deleted counts back.
Kvanta Prep feedback data, only if you ask for written feedback: the audio of that one answer (briefly) or the text you typed, a transcript with word timings, measures of how you delivered the answer (length, pace, filler words, pauses, numbers you quoted), the feedback itself, and a record of the request. What you say or type in an answer can include personal details about you or about other people if you put them there. Please do not. See Section 10A.
Kvanta Prep problem reports, only if you report a problem with a question or with feedback: the practice and question, the version and random seed that produced it, your reason, any note you type (up to 1,000 characters), the page you were on, a one-way hash of your IP address, and your account if you were signed in.
Kvanta Prep anonymous counts: when anyone starts or finishes a practice, a daily total for that practice goes up by one. The total carries no account, cookie or other identifier.
Notification address, only if you allow notifications for feedback: the address, encryption keys and browser type that your browser gives us so we can send a notification.

Email tracking: our emails contain a 1x1 tracking pixel and tagged links, provided by Resend, which record opens and clicks. You can disable image loading in your email client to prevent the pixel firing; disabling tracking does not affect newsletter delivery.

3. How We Use Your Information and Lawful Bases (UK GDPR Art. 6)

We process your data for the following purposes, relying on the lawful bases below:

Sending the free daily newsletter, consent (Art. 6(1)(a)) and, where applicable, PECR reg. 22 soft opt-in for existing customers.
Processing premium subscription payments and providing the paid service, performance of a contract (Art. 6(1)(b)).
Rate-limiting, IP logging, fraud prevention and site security, legitimate interests (Art. 6(1)(f)). Our interest is keeping the service available, secure and free from abuse.
Measuring how our emails are opened and clicked, so we can see what readers find useful and improve the newsletter. Our emails contain a small tracking image and tracked links. We rely on the statistical-purposes exception under PECR and on our legitimate interests under UK GDPR Art. 6(1)(f). We can’t currently exclude individual readers from this tracking. If you’d rather we didn’t track you, email support@kvanta.app and we’ll unsubscribe you.
Responding to legal requests, tax filings and accounting, legal obligation (Art. 6(1)(c)), in particular HMRC record-keeping requirements.
Creating your Kvanta Prep account, signing you in with a code, saving your results and showing your history, performance of a contract (Art. 6(1)(b)).
Saving the role and firm you are preparing for and using them, with your practice tracker counts, to order your practice programme, performance of a contract (Art. 6(1)(b)). Counting the firm names people type in, without any account details, to decide which firms to add next, legitimate interests (Art. 6(1)(f)).
Saving the roles you choose, showing your application tracker and sending the alerts and closing-date reminders you switch on, performance of a contract (Art. 6(1)(b)). Alerts are sent as notifications only if you turn them on and have allowed notifications in the app.
Sending the Kvanta Roles daily email summary, consent (Art. 6(1)(a)), given when you tick "Email me a daily summary" in the Alerts tab. It is separate from the newsletter and does not subscribe you to it. You can withdraw it at any time with the unsubscribe link in every email or by unticking the box. Withdrawing does not affect emails already sent.
Turning an answer you submit into written feedback (processing the audio or typed text you choose to send, producing a transcript, sending the text to our processor Cloudflare to be marked, and keeping the result so you can read it), consent (Art. 6(1)(a)). You give it by pressing "Get feedback" after reading what will happen, and in the video interview practice you also tick a box the first time you do this on a device. You can withdraw it at any time by deleting the review (Section 10A). Withdrawing does not affect processing done before. We do not ask for special category data (for example health, ethnicity or religion) and ask you not to include it. If you include it anyway, we rely on your explicit consent given when you press "Get feedback" (Art. 9(2)(a)).
Showing how your score compares with other Kvanta users, legitimate interests (Art. 6(1)(f)). Your latest result in each practice's timed (real) mode is combined with others into percentile tables, shown only when at least 30 people are in a table.
Checking that questions and scoring work, and fixing reported problems, legitimate interests (Art. 6(1)(f)), using problem reports and the per-question data in your results.
Limiting how many feedback requests an account can make each day, legitimate interests (Art. 6(1)(f)), to keep the service available to everyone.
Sending a notification when your feedback is ready, consent (Art. 6(1)(a)), given when you allow notifications in your browser. You can turn them off in your browser at any time.

We do not carry out solely automated decision-making or profiling that produces legal or similarly significant effects about you (UK GDPR Art. 22).

Kvanta Prep produces automated feedback and automated practice scores. They are for your own practice. We do not use them to decide anything about you, they are not shared with any employer or assessment provider, and they are not used to decide whether you can use Kvanta. The only automatic decision is a daily limit on feedback requests (Section 10A).

4. Processors and Recipients

We share personal data with the following processors strictly to provide the service. Where a processor is based outside the UK, the transfer mechanism is set out in Section 6.

Resend, transactional and newsletter email delivery, bounce and engagement event reporting (United States).
Stripe, payment processing, subscription billing and customer portal (United States / United Kingdom).
Groq, large language model inference used to draft and summarise editorial copy. Receives newsroom content only; does not receive subscriber personal data (United States).
Ollama, self-hosted large language model used for editorial drafting. Runs on our own infrastructure; no third-party access.
Redis, session store and rate-limit counters (self-hosted).
Cloudflare Turnstile, a check on the Ask Kai page that confirms a request comes from a person rather than an automated script. It is subject to the Turnstile Privacy Addendum (United States).
Postgres, primary application database storing subscriber records and operational data (self-hosted).
Oracle Cloud Infrastructure (Oracle), hosting of our servers, database and backups, in London (United Kingdom).
Cloudflare, Inc., for Kvanta Prep only: marking the text of answers you ask for feedback on (Cloudflare Workers AI), and DNS hosting for kvanta.app (United States, and see Sections 6 and 10A).
Google, typefaces (Google Fonts) on our pages and in the app, and Google Analytics if you accept analytics cookies (United States).
Browser push services (Google, Apple or Mozilla, depending on your browser), delivering a "feedback ready" notification if you allow notifications.

For Kvanta Prep, speech is turned into text on our own server (whisper.cpp). The text of an answer you ask for feedback on is then marked by an AI model run for us by Cloudflare, Inc., which acts as our processor (Section 10A, "Who marks your answer"). If Cloudflare cannot be used for a request, a model run on our own server (llama.cpp, or Ollama) marks it instead. Resend delivers the sign-in email. If you allow notifications, your browser's push service delivers a notification that says only that your feedback is ready. Cloudflare also hosts the DNS records for kvanta.app. That is a lookup service only: website traffic, including your audio, does not pass through Cloudflare. Our Prep pages and the app load typefaces from Google Fonts, and the Prep pages load Google Analytics only if you accept analytics cookies (Section 8).

5. Data Retention

Active subscribers: retained indefinitely for as long as you remain subscribed.
Unsubscribed email addresses (suppression list): retained indefinitely while the business continues to operate, on the basis of legitimate interests, so that we do not accidentally re-add you and so we can demonstrate PECR reg. 22 compliance.
Login, password-reset and unsubscribe tokens: 24 hours, or until used, whichever is sooner.
IP rate-limit and security logs: 7 days.
Resend delivery events: up to 12 months.
Stripe payment and subscription records: 6 years, to comply with HMRC and Companies Act record-keeping obligations.
Kvanta app and Kvanta Prep sign-in codes and links (shorter than the 24 hours above): valid for 30 minutes and stored only as one-way hashes. Used and expired ones of any kind are deleted automatically about two days after they expire.
Kvanta Prep audio: held in the server's memory only while it waits for its turn (usually minutes, and anything older than 90 minutes is removed automatically) and deleted as soon as it has been converted for transcription. It is never written to our database.
Kvanta Prep feedback reviews (the transcript, any typed answer, the quotes, delivery measures such as pace, filler words with their times, pauses and numbers you quoted, the ratings and tips, any partial feedback saved while marking is running, and the record that you asked): deleted automatically 30 days after you ask for feedback. The whole record is deleted, not just the text. You can delete a review yourself earlier. A review you delete is cleared at once, and the bare record that you made a request is removed the night after the end of that UK day (it is kept until then so that the daily limit stays accurate).
Text sent to Cloudflare to be marked: we do not control this copy and cannot delete it. Cloudflare's published terms do not say how long, if at all, it keeps the text of a request after answering it. See Section 10A.
Kvanta Prep results: until you delete them or we close your account. You can delete any single result in the app. We do not delete inactive accounts automatically.
Kvanta Prep goals (role and firm) and practice tracker counts: until you change them, use "Delete my Prep data", or we close your account.
Kvanta Roles saved roles, notes and alert settings: until you remove them, use "Delete my Roles data" in the app, or close your account. A record that an alert, reminder or email summary was sent is kept with them so the same one is not sent twice, and is deleted with them.
Kvanta Prep problem reports (reason, note, page, question, a one-way hash of your IP address, and your account link if you were signed in): deleted 12 months after the report was resolved, or 12 months after it was sent if it was never resolved. If you were signed in, the report is unlinked from your account when you use "Delete my Prep data" or we close your account, but the report itself and the IP hash stay until that period ends.
Kvanta Prep anonymous start and finish totals: 400 days.
Notification address: until you turn notifications off, or your browser tells us the address has expired.
Backups: our nightly database backups are kept on our server for up to 31 days, and only the server administrator account can read them. Anything you delete, including Prep results and reviews, can remain in backups for up to 31 days after you delete it, and is not restored to the live service.

6. International Transfers

Some of our processors (notably Resend, Stripe and Groq) are based outside the United Kingdom. Where the destination country is not covered by a UK adequacy decision, transfers rely on the UK International Data Transfer Agreement (IDTA) or the EU Standard Contractual Clauses together with the UK Addendum, as required by Chapter V of the UK GDPR. Copies of the relevant safeguards are available on request to support@kvanta.app.

Kvanta Prep. Our servers, database and backups are in the United Kingdom (Oracle Cloud, London). Two parts of Kvanta Prep involve other countries. First, when you ask for feedback, the text of your answer is sent to Cloudflare, Inc., a United States company, which runs the AI model on its global network with the help of sub-processors. Cloudflare does not tell its customers in which country a given request is processed, and the operators it lists for this service include companies in the United States and in England, so we treat every request as a transfer to the United States. Our agreement with Cloudflare includes its data processing addendum. The addendum provides for the EU standard contractual clauses together with the Information Commissioner's UK Addendum, and Cloudflare states that it is certified under the UK Extension to the EU-US Data Privacy Framework (the UK-US data bridge). Second, Resend (sign-in email), Google (typefaces, and analytics if you accept cookies) and your browser's push service (notifications) are United States companies or operate from the United States.

7. Your Rights (UK GDPR)

You have the following rights in relation to your personal data:

Access, request a copy of the personal data we hold about you.
Rectification, ask us to correct inaccurate or incomplete data.
Erasure, ask us to delete your data, subject to limited legal exceptions.
Restriction, ask us to pause processing while a query is resolved.
Portability, receive your data in a structured, commonly used, machine-readable format, or ask us to transmit it to another controller.
Objection, object to processing based on legitimate interests, including any profiling.
Withdraw consent, where processing is based on consent, you may withdraw it at any time; every email also includes a one-click unsubscribe link.

To exercise any of these rights, email support@kvanta.app. We aim to respond within 30 days.

For Kvanta Prep, you can delete a feedback review, a single result, or all your Prep data yourself in the Prep area (Section 10A). To get a copy of your Prep data, to ask us to correct it, or to delete something the buttons do not cover (for example closing your account), email support@kvanta.app. You can object to your results being used in score comparisons (Section 3); deleting your results takes them out of the comparison tables at the next nightly rebuild. We cannot delete text that Cloudflare may hold (Section 10A).

You also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) at https://ico.org.uk/make-a-complaint/ or on 0303 123 1113.

8. Cookies and Similar Technologies

We use three categories of cookies and similar technologies:

Strictly necessary cookies, session cookie (keeps you logged in), CSRF token (protects against cross-site request forgery) and a theme preference cookie (remembers your dark / light mode). These are always set because the site cannot function without them and are exempt from consent under PECR reg. 6(4).
Analytics cookies, Google Analytics 4, loaded only after you click "Accept" on the cookie banner. If you click "Reject", no GA4 script is loaded and no analytics cookies are set. Your choice is remembered in a first-party cookie (fs_consent) for 6 months.
Advertising cookies, Meta pixel, loaded only after you click "Accept" on the cookie banner. We use the Meta (Facebook) pixel to measure the performance of our ads and to build audiences for future campaigns. If you click "Reject", the pixel is not loaded and no advertising cookies (such as _fbp) are set.

You can change your choice at any time via the Change cookie preferences link (also available in the page footer). Withdrawing consent removes the GA4 cookies and stops the Meta pixel loading on your next page load.

Kvanta Prep also stores information on your device, because practice and recordings have to live somewhere before you choose to save them. This is a database called kvanta-prep in your browser (results waiting to upload, your last five video recordings, audio waiting to be sent for feedback, your skill record, eye-tracking timelines for your last 12 answers, and your settings), a few entries in local storage (names starting kp_ or kpac_, for preferences and drafts, kpdel_queue, a list of identifiers of deletions waiting to be sent to our server, kvanta_nonce, which lets the app pick up a sign-in, and entries starting kvanta_prep_ for the role and firm you chose and your practice tracker counts), and cached app files. It is used only to provide the practice you ask for and is never used for tracking. "Delete my Prep data" clears the database and the kp_, kpac_ and kvanta_prep_ entries, and removes kpdel_queue once the deletion has reached our server. You can clear all of it by clearing site data for kvanta.app in your browser.

Our Prep pages (kvanta.app/prep) load Google Analytics only after you click "Accept", like the rest of the site. They do not load the Meta pixel. The Prep screens inside the Kvanta app load neither.

9. Data Security

We implement industry-standard security measures including encrypted HTTPS connections, Argon2id password hashing, secure database storage, regular security updates and restricted internal access to subscriber data. If a personal data breach occurs that is likely to result in a risk to your rights and freedoms, we will notify the ICO within 72 hours and notify affected users without undue delay where the risk is high, in accordance with UK GDPR Arts. 33–34.

10. Children's Privacy

UK law sets the age of consent for information society services at 13 (DPA 2018 s.9). We set a higher minimum of 18 because our content concerns personal finance. Everyone who signs up confirms they are 18 or over, and we record when they did. Our service is not intended for anyone under 18 and we do not knowingly collect data from under-18s. If you believe someone under 18 has signed up, email us and we will delete their data. Section 10A explains how this applies to Kvanta Prep, including practice without an account.

10A. Kvanta Prep (practice tests, games and interview feedback)

Kvanta Prep is our free practice area for assessments used in graduate and internship applications. It runs at kvanta.app/prep and inside the Kvanta app. It is practice only. It is independent of every employer and test publisher, and nothing in it is used to assess you for a job.

Practising without an account

You can practise without signing in. Your answers, scores, recordings and settings are kept in your own browser storage and are not sent to us. When you start or finish a practice, your device tells us the name of the practice and the word "start" or "complete", and we add one to a daily total. That message carries no account, cookie or other identifier. As with every page on our site, your IP address reaches our server when your device connects, and we use it only for rate limiting and security (Section 3). Nothing from practice without an account is sent to Cloudflare or to any other AI service.

If you later sign in, results already saved in that browser from practice without an account are uploaded to your new account straight away. Results saved while a different account was signed in on that device are only uploaded if you say yes. If you do not want earlier results uploaded, use "Delete my Prep data" in the Prep area before you sign in.

With a free account

An account lets you keep results across devices and ask for written feedback. Accounts are for people aged 18 or over. You confirm this by ticking a box when you sign up, and we record when you did. We do not check your age in any other way. We sign you in with a six digit code, or a link, that we email you. Both work for 30 minutes.

While you are signed in, every result you complete is uploaded to your account automatically. What we store is listed in Section 2. Memos, in-tray replies and exercise notes you write stay on your device unless you ask for feedback on them. The lawful basis is performance of a contract (UK GDPR Art. 6(1)(b)): you ask us to keep your results and we do.

Signing up through Kvanta Prep creates an account only. We do not send you the daily newsletter unless you tick the optional box, which is unticked by default, or subscribe separately. A ticked box only takes effect after you have proved the address is yours with the code or link, and it can only turn the newsletter on, never off. If you did not tick it you can still do so later in the Kvanta app. We use your email address for sign-in codes, and for the newsletter only if you opted in.

Written feedback on your answers

Feedback is optional and every request is your choice: you press "Get feedback" for that answer. You need a signed-in account. There are two routes.

Spoken answers (video interview, presentation and day-in-life practice). Your video is recorded on your device and is never sent to us. The last five video recordings stay on your device so you can watch them back, and you can delete them there. Only if you ask for feedback, the audio of that one answer is sent to our server.
Typed answers (case study memo and the daily question). Only if you ask for feedback, the text you typed is sent to our server.

In the video interview practice you tick a box the first time you do this on a device (once for audio and once for typed text), and the app remembers that on the device only. The other exercises explain what will happen next to the button.

What happens next. Audio waits in a RAM-backed temporary store on our server (the server has no swap file, so it does not reach disk) until its turn, which is usually a few minutes. It is converted and then turned into text on our own server with whisper.cpp, and each audio file is deleted as soon as that step finishes. It is never written to our database. We only process the first five and a half minutes of audio, and the limit per upload is 10 MB. The transcript, or the text you typed, is then marked against a written marking guide by an AI language model. That marking step is run for us by Cloudflare, as described next. Our code checks that every quote shown in your feedback appears in your own words.

Who marks your answer

To mark your answer we send Cloudflare, Inc. the text of that answer, split into numbered sentences, together with the interview question and our marking guide, over an encrypted connection. Cloudflare runs an AI model for us (currently Google's open Gemma 4 model, hosted by Cloudflare) and sends the marks back. Cloudflare acts as our processor.

What we send. Text only: the question, our marking guide, and your answer as text. We never send audio or video.
What we do not send. Your name, email address, account number, IP address, device details or any of your other results. Before sending, we pass the text of your answer through best-effort automatic redaction: email addresses, phone numbers, links, postcodes, National Insurance and similar ID numbers, long number sequences and dates of birth that follow a phrase such as "born on" are replaced with placeholders such as [email] or [phone], and a name given in a phrase such as "my name is" is replaced with [name]. Names cannot be reliably removed, and the redaction can miss other details, so names, places, employers and anything else you say or type are otherwise sent as they are. Please do not put personal details about yourself or other people in an answer.
What Cloudflare's terms say. Cloudflare's published terms say that it does not use customer content, which includes the text we send and the marks it returns, to train the AI models on its Workers AI service or to improve its own or other companies' services unless it has explicit consent, and that it does not make customer content available to its other customers. Its data processing addendum, which forms part of its standard terms with us, limits it to processing the data to provide the service, and not for marketing or advertising.
What Cloudflare's terms do not say. Cloudflare does not publish how long, if at all, it keeps the text of a request after it has answered, whether it logs it, or in which country a request is processed. Its list of sub-processors for this service currently names CoreWeave (United States) and Nebius (England), and is at cloudflare.com/gdpr/subprocessors. We therefore do not promise that the text is not stored or logged at Cloudflare, that it is deleted, or that it stays in the United Kingdom. We cannot delete anything Cloudflare may hold, and because we send no identifier with the text, Cloudflare could not find yours if we asked. See Section 6 for the transfer safeguards.
If you would rather not. Do not press "Get feedback". All the practice, scores and history work without it.
If Cloudflare is unavailable. If a request to Cloudflare fails, or we reach a spending limit we set, that part of the marking is done on our own server instead (llama.cpp, or Ollama if that is not available) and nothing is sent to Cloudflare for it. One answer can be marked partly by each.

What we keep. The transcript with word timings (or your typed text), measures of how you delivered the answer (length, pace, filler words and when they occurred, pauses over two seconds, time to your first full sentence, how often you said "I" or "we", and any numbers you quoted), the feedback (a summary, which points you covered with the words that show it, and tips), which question it was, when, and how long it took. While marking is running, the parts finished so far are saved in the same record so you can see them as they arrive. We do not keep audio.

How long. We delete the whole review, including the transcript or typed text, the quotes, the delivery measures, the ratings and tips, 30 days after you ask. The nightly clean-up runs shortly after 03:40 UK time, so it happens on the 30th or 31st day. You can delete a review yourself at any time (see "Deleting your data" below). Copies can remain in our backups for up to 31 days more. None of this reaches text already sent to Cloudflare.

What the feedback is. It is information for you to practise with. It rates structure and evidence against a marking guide that we wrote, not an employer's. It can be wrong: the transcript can contain mistakes, and the model can misjudge or miss things. It does not measure or infer emotion, confidence, personality, health or fit, and it never judges whether an investment idea or a recommendation is good. No employer or other third party sees it. The 1 to 5 competency levels are not shown to you at present. We do not use your audio, transcripts or typed answers to train or fine-tune any model. We do not read your answers in running the service. As with any stored data, the people who administer our server could technically access it.

Daily limit. To keep the service available to everyone, each account can currently make 10 feedback requests a day (the day resets at midnight UK time) and have two in progress at once. We may change these numbers. A request that fails on our side is not counted. Deleting a review does not give the request back. This is an automatic limit and it is the only automated decision we make about your use of Kvanta Prep.

Notifications. If feedback is slow, you can ask us to send a notification when it is ready. We store the address, keys and browser type your browser gives us, and send "Your answer feedback is ready" with a link to the review. The notification contains none of your answer. It goes through your browser provider's push service and to every device on which you have allowed notifications for your account.

Eye and head tracking ("camera habits")

If you leave this on, a face-tracking model runs inside your browser, on your device, while you record. The model file (about 7 MB) is downloaded from our own site the first time and cached. Camera frames and the full face mesh are processed in memory and discarded. They are never uploaded. A short timeline of where you looked (camera, screen, away down, away to the side, away up, or unknown) and the moments you looked away are saved on your device for your last 12 answers, so you can look back at them, and you can remove them by clearing site data. The tool reports facts only, such as "you looked down for 7 seconds", and counts tab or window switches. It does not identify you and does not infer emotion, confidence or attention. You can turn it off with one tap, and the choice is remembered on your device.

The results of the eye and head tracking (the share of time looking at the camera, the look-aways and the tab or window switches) stay on your device. They are not part of the result we receive when you are signed in. The result does record whether eye tracking was off or could not run for an answer, and our server does not store that.

Games and questionnaires

When you are signed in, we store your raw answers and the numbers worked out from them (Section 2). Reports describe what a measure means and how you played. They do not say whether a result is good or bad, they do not infer health conditions, and they are shown only to you. They are not shared with employers or anyone else. Timing-based numbers are not compared with other people because they depend on your device.

Comparing your score with other users

Where a practice shows how your score compares with other Kvanta users, it uses tables built overnight from each signed-in person's latest result in the timed (real) mode. A table is only shown once at least 30 people are in it. The comparison is with other Kvanta users, is not an official score and does not predict any employer's result.

Reporting a problem

The report button sends what we describe in Section 2. You do not need an account to use it. Please do not put personal details in the note.

Deleting your data

Delete a review. Every feedback panel (video interview, presentation, day in the life, case study) has a "Delete this review" button. It asks you to confirm, then clears the transcript, typed text, delivery measures, feedback and ratings from our server straight away and removes the audio waiting on your device. Your recording on your device is not affected. The bare record that a request was made stays until the end of that UK day because it counts towards your daily limit, and is then deleted. If we cannot reach our server when you press the button, the review is removed on your device at once and the deletion is kept as a note (an identifier only) and retried each time you open Prep.
Delete one result. In the Prep area, each result in your history, and each result screen, has a "Delete" button. It removes that result from your device, and from your account if you are signed in, together with any written feedback on it. It does not change your skill record on your device. A result from another device that is listed on your account can be deleted the same way. If we cannot reach our server, the same retry applies.
Delete my Prep data. In the Prep area this removes every Prep result and every feedback review, including the bare records, from your account, and everything Prep stores on that device: the kvanta-prep database (results, recordings, audio waiting to be sent, your skill record, eye-tracking timelines, review notes and settings) and the kp_ and kpac_ entries in local storage. It does not close your Kvanta account, change a newsletter subscription or remove notification settings. If you reported problems while signed in, the link to your account is removed but the reports themselves stay (Section 5).
Close your account. Email support@kvanta.app. Closing your account deletes your Prep results and reviews with it.
What deleting does not reach. Copies in our backups (up to 31 days), and any copy of the text that Cloudflare may hold (see "Who marks your answer").
Your other rights are in Section 7. To get a copy of your Prep data, email us.

Age

Accounts and feedback are for people aged 18 or over (Section 10). If you are under 18 you should not create an account or ask for feedback. Practice without an account stores nothing about you on our servers beyond the anonymous totals and the technical data described in Section 3, and sends nothing to Cloudflare.

10B. Kvanta Roles (niche-firm roles, tracker and alerts)

Kvanta Roles lists spring weeks, internships, placements and graduate roles taken from the public careers pages of UK firms. You can browse it without an account. If you sign in you can save roles, track each application, and ask for a notification when a new matching role appears or a saved role is about to close.

We store only what you give us: the roles you save, their stages, your private notes, the date you applied, your reminder choice and your alert settings. We do not share them with any employer, and a firm never learns that you saved or viewed one of its roles. When you press "Apply on firm site" you leave Kvanta and the firm's own privacy policy applies. Kvanta does not take applications.

You can remove a saved role at any time, and "Delete my Roles data" in the Alerts tab deletes all your saved roles, notes and alert settings at once. Notifications use the same notification address described in Section 2 and can be turned off in the app. If you tick "Email me a daily summary" we email your account address at most once a day, only when there is something new for you, through our email provider Resend (Section 4). Every email has a one-click unsubscribe link, and we delete the record that you ticked the box when you untick it, unsubscribe, delete your Roles data or close your account.

11. Changes to This Policy

We may update this policy from time to time. We will notify subscribers of significant changes via email and publish a dated changelog at the foot of this page.

12. Contact Us

For privacy questions or to exercise your rights, email us at:

support@kvanta.app

13. Changelog

27 October 2026: Added Section 10B for Kvanta Roles: what we store when you save roles, keep notes or turn on alerts or the daily email summary, how long we keep it, and how to delete it.

22 October 2026: Added Section 10A for Kvanta Prep, our free assessment practice area. It explains what we store with a free account (including that results upload automatically while you are signed in); that video stays on your device; that audio or typed text is sent only when you ask for feedback; that the audio is turned into text on our own server and the text is then marked by an AI model run for us by Cloudflare, with our own server as a fallback; what Cloudflare's terms do and do not tell us about how it handles that text; what we keep and for how long (feedback reviews, including transcripts and typed text, are deleted 30 days after you ask); that eye tracking stays on your device; how to delete your data and what that does not reach; the daily feedback limit; notifications; and the extra data stored on your device. We also named our hosting provider (Oracle, London), added Cloudflare, Google and browser push services to the list of processors, added retention periods for sign-in codes, backups and problem reports, and set out the international transfers that Kvanta Prep involves.

27 July 2026 — FinanceSimply was renamed to Kvanta and the site moved to kvanta.app. This is a change of trading name only: the same people operate the same service, and no ownership, control or processing of your data changed. Contact addresses previously at financesimply.co.uk now route to support@kvanta.app.