Privacy Notice

What We Collect

When you sign in, we collect your email address so we can send a one-time login code and maintain your account session. We also assign the verified account a random, stable external user ID. It is not a password and helps keep an approved learning-platform link stable if an email is later changed.

When you complete a mock exam, we store the score summary, Paper, year, grade, completion time, submission date, your answer to each question, the correct answer, and a snapshot of the question, options, topic, difficulty, diagram, and any available explanation.

If you choose to receive TMUA prep tips, course updates, and offers, we also store that opt-in choice and the consent version shown at sign-in.

How We Use It

Your email is used for login, account access, security checks, essential service messages, and matching your connected Tangent student account. We do not use login emails for marketing unless you separately opt in.

Mock result history is used to show past scores, build a mistake book, track progress, and support teaching. Optional update emails are used only for prep resources, product or course announcements, and relevant offers. Every marketing email includes an unsubscribe link.

Tangent Learning Data Sync

TMUA Mock and the Tangent learning platform are connected learning services. When your verified TMUA Mock email matches a Tangent student email after trimming spaces and converting letters to lowercase, synchronization is enabled by default. The first successful match is fixed to that Tangent student ID so a later email edit or reuse cannot silently move your history to another student.

For each completed mock, we send the stable external user ID, verified email, attempt ID, year, Paper, mode and submission time. For wrong or unanswered questions we also send the stable question ID, question and option snapshot, any available explanation or image, your answer, the correct answer, knowledge topics, topic, difficulty and source label. We do not send passwords, login codes, session cookies or marketing preferences.

If no Tangent student has that email yet, the attempt remains queued and can be matched after the corresponding student account is created. Older attempts that never recorded question-level results are marked as unavailable and are not reconstructed as individual mistakes. Requests are authenticated server-to-server, and failed deliveries are retained for retry and reconciliation instead of being discarded.

Session Cookies

We use HttpOnly cookies to keep you signed in and to verify login codes. These cookies are used only for authentication and security and are not sent to Tangent.

Retention

Login code data expires after 10 minutes. Session cookies expire after 30 days. Verified account records, account-link identifiers, mock results and pending synchronization records are retained while your learning account exists, unless deletion is required or agreed. Delivery and server logs may be retained for security, reconciliation, debugging and abuse prevention.

Your Choices

You can sign out at any time. In Tangent, a student can ask for learning sync to be disabled, and an authorized teacher or administrator can review an account link, disable sync for an individual student, or unlink an incorrect association. Unlinking does not automatically transfer records to another student. To request deletion, correction, export, restriction, or help with an incorrect link, contact the operator listed in your service agreement or school onboarding materials.

Marketing consent is separate from essential account and learning-data processing. You can withdraw it through the unsubscribe link in any marketing email.

Students Under 18 and Mainland China

If you are under 18, review this notice with a parent or legal guardian before using the connected learning services. Where applicable law, school policy, or the service agreement requires guardian authorization or separate consent for a minor, the parent, guardian, school, or operator responsible for onboarding must provide or record it before use. A parent or guardian may contact the operator to exercise applicable rights or raise a concern about a child’s account or cross-site learning data.