Privacy Policy

This Privacy Policy explains how MOJITAX LIMITED ("MojiTax", "we", "us", "our") collects, uses, shares and protects personal data when you use our website at mojitax.co.uk, our learning platform at lms.mojitax.co.uk, the MojiTax mobile app for iOS and Android (the "App"), and any related services (together, the "Services"). It applies to all visitors, learners, and prospective customers.

MojiTax is a UK-registered company. Our registered office is 11 Bishops Close, Erdington, Birmingham B23 7AY, United Kingdom. We are the data controller for personal data processed through the Services.

1. Personal data we collect

Category	Examples	Source
Account data	Name, email address, password (stored as a secure hash), country	You, when you sign up
Payment data	Transaction amount, currency, payment status	Stripe (we do not store full card numbers)
Course data	Courses enrolled in, progress, assessment results, downloads, study plans, and the study preferences you give us (such as your qualification goal, the papers you are taking, and when you plan to sit them)	You, through use of the Services
Communication data	Messages to our support team, questions to your Consultant, email engagement	You
Assistant chat data	Messages you send to @moji, our AI assistant, the replies it gives you, and — if you chat without signing in — the name and email address you give us before chatting	You, through the chat window
Technical data	IP address, browser type, device, pages visited, timestamps	Automatically, via your browser
Marketing data	Preferences, consent status, advertising engagement	You, and Google Ads / Google Analytics
Mobile app data	Push notification token and device platform (iOS or Android), where you have allowed notifications	Your device, through the App

When you chat with @moji, our AI assistant, we keep the conversation — your messages and the assistant's replies — as part of your support history, linked to your account or, if you chat as a guest, to the name and email address you give us first. A conversation can be passed to our support team as an enquiry (for example when you ask for a human, or when the assistant cannot answer). The assistant's replies are generated for us by Anthropic — section 4 explains exactly what Anthropic receives. Chat conversations are kept on the same schedule as our other support communications (section 8) and are deleted or anonymised if you delete your account (section 10).

2. How we use your data

• To provide the Services — creating your account, delivering course access, marking assessments, issuing certificates, processing payments, sending sign-in links.
• To communicate with you — responding to enquiries, sending operational emails (course updates, receipts, Consultant replies), and sending push notifications to the App where you have allowed them on your device.
• To market our Services — sending newsletters and course announcements (only where you have consented or where we have a legitimate interest).
• To improve the Services — analysing usage patterns, debugging.
• To comply with law — meeting our obligations under tax, accounting, anti-money-laundering and data protection legislation.

3. Legal bases for processing

Under the UK GDPR and the Data Protection Act 2018, we rely on: contract — to deliver the Services you have purchased; consent — for marketing communications and non-essential cookies (withdrawable at any time); legitimate interests — to operate, secure and improve our Services, prevent fraud, and measure advertising effectiveness (balanced against your rights); and legal obligation — to keep financial records and respond to lawful requests from authorities.

4. Who we share your data with

• Payment processors — Stripe Payments Europe Ltd (Ireland) for card and subscription processing.
• Infrastructure providers — our hosting providers and Cloudflare Inc. (secure encrypted backups), bound by data-processing agreements.
• Advertising and analytics — Google LLC (Google Ads, Google Analytics), Microsoft (LinkedIn Ads) and similar measurement platforms, on our marketing pages. We do not sell your personal data.
• Communications providers — SendGrid, Twilio and similar providers, used to deliver emails and messages you have requested or that are required for service delivery.
• AI assistant — Anthropic PBC (United States), whose Claude model generates the replies you receive from @moji, our AI assistant. When you send @moji a message, we pass Anthropic the text of the conversation — your recent messages and the assistant's replies — together with the platform information the assistant answers from and, where you are signed in with a verified email address and have open support enquiries, the subject lines of those enquiries so the assistant can acknowledge them. Anthropic processes this on our behalf, solely to generate the assistant's reply. We do not send Anthropic your name, email address, sign-in details or payment details — though the conversation text will include anything you choose to type into the chat yourself.
• Mobile app services — Expo (650 Industries, Inc., United States), which hosts updates to the App and operates the push notification service we use. When the App checks for an update, Expo receives that request, including your device's IP address and the version of the App you are running. When we send you a notification, we pass Expo your push notification token and the content of the message, and Expo passes it to Apple's or Google's push notification service for delivery to your device. Expo does not receive your course content, your progress or your offline downloads.
• Professional advisers and public authorities — accountants, auditors, lawyers where required, and authorities where required by law (e.g. HMRC).

All third-party processors are contractually bound to process personal data only in accordance with our instructions and applicable data-protection law.

5. The MojiTax mobile app

The App is a reader for courses you already have access to. It uses the same account and the same learning platform as our website, so everything set out in this Policy applies to it. This section explains what is specific to the App.

Signing in. When you sign in — with your email and password, a one-time email sign-in link, or a supported social sign-in — the App stores your session token in the secure store your device's operating system provides (Keychain on iOS, Keystore on Android). It is sent to us only to identify you on each request, and it is removed from the device when you sign out.

Push notifications. If you allow notifications, your device is issued a push notification token, which the App sends to us and we store against your account so that we can send you course announcements and platform notices. We do not receive a token unless you grant that permission, and you can withdraw it at any time in your device's notification settings.

Offline downloads. Chapters and library PDFs you download for offline study are encrypted and stored on your device, together with a local record of how long your offline access lasts. That content stays on your device: it is never uploaded to us and we cannot read it. You can remove individual downloads, or every download for a course, on the App's Downloads screen. Signing out does not remove downloads — they remain encrypted on the device, stop being readable when your offline access lapses or your access to the course ends, and are deleted by the App after that. If you delete your account, the App removes every download from the device you used to make the request.

What the App does not do. The App contains no advertising, no advertising identifiers, and no third-party analytics or crash-reporting software. It does not access your location, contacts, camera, microphone, photos or health data, and it does not take payments. No data collected in the App is used to track you across other companies' apps or websites.

6. Cookies

See our Cookie Policy for the cookies used on the learning platform. Analytics and advertising cookies are set only with your consent.

7. International transfers

Some of our processors (e.g. Google, Stripe, Cloudflare, Anthropic) operate globally. Where personal data is transferred outside the United Kingdom or the European Economic Area, we rely on appropriate safeguards including the UK International Data Transfer Agreement, the EU Standard Contractual Clauses, or adequacy decisions.

8. How long we keep your data

• Account and course data — for the duration of your account, plus six years after closure (to meet UK tax-record retention rules).
• Payment data — six years, for accounting and audit purposes.
• Marketing data — until you unsubscribe or withdraw consent, plus a short suppression period to honour your preferences.
• Push notification token — for as long as it stays registered to your account. It is replaced whenever your device registers a new one, is deleted when you ask us to delete your account, and you can withdraw it at any time in your device's notification settings.
• Support communications — three years after the last interaction.
• Assistant chat conversations — treated as support communications and kept on the same three-year schedule, linked to your account or, for guest chats, to the name and email address given before chatting. The stored transcript lives on our platform; what is sent to Anthropic to generate each reply is described in section 4.
• Technical and session data — a sign-in record (session token, IP address, browser or app identifier) lasts up to 30 days and is deleted automatically once it expires. Live-presence data — the page you were last on, and when — is a single record per learner that we overwrite as you use the Services, and it is deleted when you delete your account.
• Fraud-prevention records — sign-in attempt counters and payment-card fingerprints that we use to detect account and payment abuse are kept for up to 12 months on the basis of our legitimate interest in preventing fraud, and are then deleted automatically. Because they exist to stop abuse of the Services from being repeated, they are retained for that period even if you delete your account.

These are the periods that apply if you leave your account in place. If you ask us to delete your account, we do not wait for them: we delete or anonymise the personal data described above within 30 days, and keep only the records the law requires us to keep, together with the fraud-prevention records described above, which expire on their own 12-month schedule. Section 10 explains what that means in practice.

9. Your rights

Under the UK GDPR, you have the right to: access the personal data we hold about you; request correction of inaccurate data; request deletion of your data ("right to be forgotten"), subject to legal exceptions; object to or restrict certain processing, including direct marketing; request data portability; and withdraw consent at any time where processing is based on consent. To exercise any of these rights, contact us using the details below — we respond within one month, as required by law. You may also lodge a complaint with the UK Information Commissioner's Office at ico.org.uk.

10. Deleting your account

You can delete your MojiTax account at any time. In the App, open the Profile tab, tap Delete account, then confirm twice. If you cannot sign in, or you no longer have the App, email compliance@mojitax.com from the address on your account and we will action the request for you. There is no charge, and you do not need an active subscription to ask.

Deleting your account takes effect straight away. Your account is deactivated, you are signed out on every device, your access to all courses ends, push notifications stop, and any active subscription is cancelled immediately — we do not refund the remainder of a period you have already paid for. The personal data we hold about you is then deleted or anonymised within 30 days. Records we are required by law to keep are retained, in particular payment records, which we hold for six years because UK tax and accounting law requires it. Our Delete your account page sets out the whole process in full.

Three details of how that deletion works. First, when we erase your data we place the removed records in a locked quarantine store for up to 30 days, so that an account deleted by mistake — or by someone who was not you — can be put back exactly as it was; at the end of that window the quarantined copy is deleted automatically and the erasure becomes final. Second, our log of the emails we have sent you is redacted rather than deleted: the message content, subject and email address are removed, and we keep only which template was sent to your account, when, and whether it was delivered — the record that proves what we sent, with nothing personal left in it. Third, the fraud-prevention records described in section 8 are kept for up to 12 months from when they were recorded, because they exist to stop the abuse they detect from being repeated through a new account; they are deleted automatically when that period ends.

11. Security

We implement appropriate technical and organisational measures to protect personal data, including encryption in transit (TLS) and at rest where appropriate, access controls, multi-factor authentication for staff accounts, continuous off-site backups, and regular security review. No system is completely secure; if a personal data breach occurs, we will notify you and the ICO where required by law.

12. Children

The Services are intended for tax professionals and adult learners. We do not knowingly collect personal data from anyone under the age of 16. If you believe a minor has provided us with personal data, contact us and we will delete it.

13. Changes to this Policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top reflects the most recent revision. Material changes will be notified by email to active account holders.

14. Contact us

Data Controller: MOJITAX LIMITED
Registered office: 11 Bishops Close, Erdington, Birmingham B23 7AY, United Kingdom
Email for privacy matters: compliance@mojitax.com
General contact: support@mojitax.com