Terms of Service
Last updated: 27 October 2026
These terms apply when a tuition centre (“the Centre”) uses the MasteryPath portal at app.masterypath.co.uk (“the Service”), provided by MasteryPath (“MasteryPath”, “we”), a business based in England. Questions: hello@masterypath.co.uk.
1. The Service
1.1 The Service lets the Centre download baseline assessments and mark schemes, record students' results, create personalised learning plans, and produce progress reports for parents, all in the Centre's own branding.
1.2 Learning plans and papers are made from MasteryPath's own teaching materials. We may improve, update or replace those materials and the Service's features at any time, provided this does not materially reduce what the Centre has paid for.
2. Accounts and logins
2.1 Access is by invitation only. We set up the Centre's account once the agreed fee is paid and invite the Centre's first administrator.
2.2 Each Centre may have up to 6 logins, counting invitations not yet accepted, unless we agree more in writing.
2.3 Logins are for named individuals at the Centre and must not be shared. The Centre is responsible for what is done through its logins and must tell us promptly if it believes a login has been misused.
3. Fees and payment
3.1 The Centre pays the fee for its plan: Starter, £189 a month for up to 70 students; Growth, £250 a month for 71 to 160 students; or a fee agreed in writing. A yearly plan costs ten times the monthly fee for twelve months. “Students” means students active in the portal; archived students don't count.
3.2 Fees are invoiced in advance, monthly or yearly, and are payable within 14 days by bank transfer.
3.3 If an invoice is unpaid 14 days after its due date, we may pause the account. A paused Centre can still sign in and view its data but cannot make new plans or reports. We will reopen it once payment is made.
3.4 We may change the fee by giving at least 30 days' notice. The change applies from the next billing period.
4. Acceptable use
The Centre must not:
- share, sell or publish the papers, mark schemes, learning plans or workbooks outside the Centre, except giving plans and reports to its own students and their parents;
- use the materials to build a competing product or service;
- try to access another centre's data or interfere with the Service's security; or
- upload anything unlawful, or personal data it has no right to use.
5. Intellectual property
5.1 MasteryPath (or its licensors) owns all rights in the Service, the papers, mark schemes, workbooks and learning plans. While the Centre's account is active, we grant it a non-exclusive, non-transferable licence to use them to teach its own students.
5.2 The Centre keeps all rights in its logo, name and student data. It allows us to use them only to provide the Service, including printing its branding on its papers, plans and reports.
6. Student data
6.1 The Centre is the controller of the personal data of its students, parents and staff that it puts into the Service. MasteryPath processes that data only on the Centre's instructions, as set out in the Data Processing Schedule below, which forms part of these terms.
6.2 The Centre confirms it has a lawful basis for that data and has told students and parents, through its own privacy notice, that it uses MasteryPath.
7. Availability and support
7.1 We aim to keep the Service available at all times and to make learning plans within a working day of a request, usually within minutes. We do not guarantee uninterrupted service, for example during maintenance or outages at our providers.
7.2 Support is by email at hello@masterypath.co.uk. We aim to reply within one working day.
8. Ending the Service
8.1 Either party may end the Centre's account with 30 days' written notice, effective at the end of the current billing period. Fees already paid are not refunded, except where the law requires.
8.2 We may suspend or end the account straight away if the Centre seriously breaks these terms (including clause 4), or does not pay after the steps in clause 3.3.
8.3 When the account ends, the Centre should download what it needs. We will delete the Centre's data as set out in the Data Processing Schedule.
9. Liability
9.1 Nothing in these terms limits liability for death or personal injury caused by negligence, for fraud, or for anything else that cannot be limited by law.
9.2 We are not liable for loss of profits, revenue or business, or for indirect or consequential loss.
9.3 Otherwise, our total liability in any 12 months is limited to the fees the Centre paid us in those 12 months.
9.4 Learning plans and reports support a tutor's professional judgement. They do not replace it, and we do not guarantee any particular result for any student.
10. General
10.1 We may update these terms by giving at least 30 days' notice by email. If the Centre does not agree, it may end the account before the change takes effect.
10.2 These terms are governed by the law of England and Wales, and the courts of England and Wales have exclusive jurisdiction.
Data Processing Schedule
This schedule forms part of the Terms of Service and sets out how MasteryPath processes personal data for the Centre, as required by Article 28 of the UK GDPR.
1. Roles
The Centre is the controller. MasteryPath is the processor and acts only on the Centre's documented instructions. Those instructions are these terms and the Centre's use of the Service. If we think an instruction breaks data protection law, we will tell the Centre.
2. What is processed
| People | Students; the Centre's staff who have logins |
|---|---|
| Student data | Full name, year group, subjects, baseline marks per question, sitting dates, learning plans, progress reports, and tutors' comments, effort and attendance ratings |
| Staff data | Name (if given), email address, role, sign-in records |
| Purpose | To make papers, learning plans and parent reports for the Centre, and to run the accounts |
| Duration | While the Centre's account is open, then deleted as in section 7 |
The Service does not ask for special category data. The Centre should not enter health, SEN or similar details in comments.
3. Confidentiality
Only MasteryPath's authorised people can access the Centre's data, only to provide or support the Service. They are bound by confidentiality.
4. Security
- Each centre's data is kept separate by database rules, so one centre can never read another's. This separation is tested automatically on every change.
- Data is encrypted in transit (HTTPS) and at rest by our hosting providers.
- Files (plans, papers, logos) are in private storage and are reached only through short-lived links.
- Logins are by invitation; passwords are never seen or stored by MasteryPath in readable form.
- Learning plans are built on a computer operated by MasteryPath in the UK, which signs in with its own restricted account. The same computer keeps a daily backup copy of the database for 30 days.
5. Sub-processors
The Centre agrees to MasteryPath using these providers. We will give at least 30 days' notice by email before adding or replacing one, and the Centre may object.
| Provider | What for | Where the data is |
|---|---|---|
| Supabase | Database, file storage and sign-in | London, UK |
| Vercel | Hosting the website | Processed in London, UK; Vercel Inc. is based in the USA |
| Resend | Sign-in, invitation and service emails (email addresses only) | Sent from Ireland; Resend Inc. is based in the USA |
Where data may be reached from outside the UK, we rely on the UK's adequacy regulations (including the UK Extension to the EU–US Data Privacy Framework) or the ICO's International Data Transfer Addendum.
6. Helping the Centre
We will help the Centre, at no extra charge for reasonable requests, to answer requests from students or parents (access, correction, deletion; the Centre can view, correct, archive and delete students itself in the portal) and to meet its own security, breach and impact-assessment duties.
If we become aware of a personal data breach affecting the Centre's data, we will tell the Centre without undue delay, and within 48 hours, with what we know.
7. Deletion
- Plan PDFs are removed 14 days after first download, or 90 days after they were made. They can be remade from the marks.
- When the account ends, all of the Centre's data (students, marks, plans, reports, logins and files) is deleted within 30 days. Copies in daily backups expire within a further 30 days.
- The Centre may ask for its data to be deleted sooner, or for an export before deletion.
8. Audits
We will give the Centre the information it reasonably needs to show compliance with this schedule, and answer reasonable written questions about our security.
See also our Privacy Notice.