Last updated: 24 October 2026.
Who handles your information
AI POWER ACADEMY 3 LTD. operates Swarm44 Science Check and is the controller responsible for the account, website and customer information described here. It is registered in England and Wales under company number 16547011. Our registered office is at 20 Wenlock Road, London, N1 7GU, England. Contact us using the email contact below or by post.
Your research and your AI provider
You buy access to review instructions that your chosen AI assistant retrieves and follows. Your manuscripts, prompts, results and discussions are processed in that provider’s service under your own agreement with it. We do not operate your AI account or its data settings. Delivering those instructions does not require a manuscript upload or a copy of your conversation.
Account information
We store an internal account ID, your selected account type, sign-in methods, creation and update times, and Terms acceptance. Individual registration records your confirmation of the minimum age. Institutional registration records the institution's name and your confirmation that you are authorised to act for it and accept the Terms on its behalf. The institution's name is stored encrypted. Email/password accounts store your email address and a password hash. Provider sign-in stores the provider and its account identifier; personal profile names, email addresses and photos received from that provider are not saved as your account profile. Free registration does not request a personal name or photo. Optional saved invoice details are described below.
Optional passkeys store public credentials and authenticator metadata. Private keys and biometric verification stay with your device or passkey provider. Recovery codes are stored as hashes. Apple sign-in retains an encrypted credential for revocation when you unlink or delete it.
Account eligibility
Individual registration requires you to be at least 14 and asks you to confirm this together with the account terms. Institutional registration instead asks you to confirm that you are authorised to act for the named institution and accept the Terms on its behalf. We record the applicable confirmation and its time with the account. We do not request a birth date or identity document or verify age or representative authority.
Signing in with another service
If you choose a sign-in provider, it handles the authentication request under its own privacy terms and returns the identifier used to recognise your account. This sign-in does not give us access to your AI conversations or itself connect an AI assistant to your paid review access.
When you authorise an AI assistant to retrieve review instructions and resources, we process the connection permissions, resource identifiers, access decisions and usage-period records needed to provide the requested access and account for purchased or earned access periods. This does not require a copy of your AI conversations.
Purchases and support
If you save invoice details in your account, we store the name, address, invoice email and any company or tax information you provide. Saved invoice details are optional and separate from free registration. Purchase and invoice records contain the billing, tax, order, payment-reference, selected offer and access-period information needed to fulfil and document your order. We do not store payment-card details.
If you email us, we receive your address, message and attachments. Send only what is needed to explain the issue. The email contact opens a draft in your own application. Account-verification and password-reset messages contain your email address and a time-limited account link.
The affiliate programme stores your invitation code, attributed accounts and qualifying purchases, earned free days, and the start and end of free-day access windows. This website no longer sends invitation emails on your behalf. Records of invitations sent earlier, including recipient addresses and delivery status, are removed during routine cleanup after 30 days. Limited records are retained to honour unsubscribe requests and to prevent further emails after bounces or complaints.
We retain the accepted Terms version and acceptance time with the account and relevant orders. We retain necessary dispute, complaint and opt-out correspondence to handle the request, establish the applicable agreement and address related legal claims, subject to the retention criteria below. Do not send passwords or unnecessary identity documents in a request.
Website delivery and security
Hosting and security operations process IP addresses, requested URLs, timestamps, browser or device details and technical errors to deliver and protect the website. Our account session records do not store IP addresses or browser user-agent strings. Abuse prevention uses a protected identifier derived from an IP address, with request counts and timing. Automated session and rate-limit checks protect account access.
When you open signup, sign-in, password-reset, dashboard or account pages, we load Vercel BotID Basic to check browser challenge responses and prevent automated account abuse. Vercel receives technical request information, including IP addresses, browser/request details and challenge responses, for these checks. The browser protection can remain active while you continue within the same page session. A fresh visit to our public information pages does not start this browser challenge. Network-level firewall protection still applies throughout the website. We do not use these checks for advertising or audience analytics.
We use encryption, access controls and protected recovery backups to help safeguard personal information. Access is restricted to authorised people and service providers for the purposes described in this notice.
Cookies and browser storage
Essential cookies secure sign-in and maintain sessions. Sessions expire after seven days or 24 hours of inactivity. Signup and account-recovery steps expire after five minutes, password-reset links after 20 minutes, and email-verification links after one hour.
NEXT_LOCALE remembers your selected language for up to one year. The science-check-consent storage entry remembers privacy preferences for 180 days. Cookie settings are available below and in the footer. Blocking account cookies can prevent sign-in. Fonts use your device’s installed fonts.
Only with your permission, opening a personal invitation link sets the signed swarm44.referral cookie for up to 30 days. Before that choice, the invitation code remains in the current link and temporary page memory rather than a referral cookie. If you allow attribution before registration, the first valid invitation is recorded with the new account so a qualifying purchase can award free days to the inviter. Without permission, registration and purchases still work but the invitation is not captured through that cookie.
Your versioned choices and their expiry are stored in science-check-consent in browser storage and a first-party preference cookie for up to 180 days. Refusing or withdrawing referral permission removes the referral cookie and prevents further cookie-based capture. Previously recorded account attribution and transaction records are handled under their own purposes and retention rules; withdrawal does not reverse an earlier purchase or reward.
No advertising or optional analytics
We do not sell personal information or share it for cross-context behavioural advertising. This website uses no advertising trackers or optional audience analytics. Do Not Track and Global Privacy Control do not enable advertising or analytics. The referral-attribution cookie described above is separate from analytics. Account access does not require consent to optional audience tracking.
Why we process information
Where the UK GDPR or EU GDPR applies, requested account services and purchases rely on contract performance or steps at your request, Article 6(1)(b). Security, abuse prevention, enforcing the minimum account age and handling ordinary enquiries rely on our legitimate interests in operating and protecting the service, Article 6(1)(f), balanced against your rights. Statutory accounting and other legal duties rely on Article 6(1)(c). Processing that requires consent uses a separate choice under Article 6(1)(a).
The UK GDPR and Data Protection Act 2018 apply within their scope, alongside other applicable data-protection laws. Account registration requires a usable sign-in method, Terms acceptance and confirmation of the minimum age. Accepting the Terms is not blanket consent to unrelated processing.
Our account-service vendors
Vercel hosts and delivers the website and provides firewall and BotID Basic account-abuse protection. Neon Postgres stores account records. Resend delivers account emails, receiving the destination address and message. NeverBounce receives addresses to check deliverability during signup. Stripe handles checkout, payment and invoicing information, including the order reference and billing details entered in its checkout. Card details are entered with Stripe, not stored by this website. These services receive the information needed for those functions. A keyed address digest and delivery-failure reason may be retained for 90 days to prevent repeated sends to bounced or complaining addresses. Authorised staff, support providers and professional advisers receive information needed for their work; authorities receive information where legally required.
These account-service arrangements are separate from the AI service you choose for your research.
Where account and website data is processed
AI POWER ACADEMY 3 LTD. is registered in England and Wales. The account database is hosted in Germany. Our hosting, database and account-email vendors are US-based, and their service operations also involve processing in the United States. This concerns account, website and email information handled for Science Check.
International processing is subject to applicable UK and EU transfer requirements and any other applicable data-protection law. You can request information about the destination countries and transfer safeguards for your Science Check data using the privacy contact below.
Retention and deletion
We retain active account information while you keep your account. Expired sessions and temporary signup, recovery and verification records are removed during routine cleanup. Rate-limit and resource-access records older than two days are removed during that cleanup. Expired credentials cannot be used while awaiting removal. Invitation content is removed during routine cleanup after 30 days, or earlier when the relevant account is deleted. Limited opt-out and deletion records are retained as needed to honour those requests, including during recovery.
We retain support correspondence for as long as needed to resolve the enquiry and related claims. Purchase and invoice records are retained for the periods required by applicable accounting, tax and other legal obligations, or as necessary for legal claims. Deleting an account does not automatically delete those independently retained records. Hosting and security logs are subject to the relevant providers’ retention arrangements.
Our separately maintained recovery backups are encrypted and kept as a rolling set of up to two copies. Older copies are deleted when replaced within that set; replacement depends on the creation of newer backups, rather than automatic expiry after a fixed number of days. Backup data is restricted to recovery and excluded from ordinary account use. Account deletion may therefore take effect in the active service before an existing backup copy is replaced. Deletion and opt-out requirements are reapplied before restored data is returned to service. Any recovery copies kept by our service providers follow the relevant service retention arrangements.
Delete your account
Open Account, choose Delete account, type DELETE and confirm while signed in. The deletion process first disables account access and revokes active sessions and connected-service permissions. If a required provider operation is temporarily unavailable, the account stays disabled while that operation is retried.
Completed deletion removes your active account, sign-in credentials, passkeys, recovery codes, saved invoice details, affiliate profile, usage windows and invitation history. Referral records held for another account no longer contain your account ID. We keep limited records needed to honour deletion requests and email opt-outs, together with financial records we must lawfully retain. Recovery backups are handled as explained above.
Deleting your Science Check account does not delete your separate AI-provider account or research held there. You can also send us a deletion request. Purchase withdrawal, refunds and legally retained transaction records are handled separately.
Your rights and requests
Under applicable data-protection law, you can request access, correction, deletion, restriction and portability, object to processing based on legitimate interests, and withdraw consent for future processing. You can also request information held separately from your active account, including legally retained transaction records. Contact us below or by post; you do not need a paid plan or a new account.
We verify identity proportionately, respond within the applicable legal deadline and explain any lawful refusal or extension and available review or appeal. You can complain to a competent supervisory authority, including the UK Information Commissioner’s Office (ICO) or an EEA authority where you live or work.
Where local law grants additional rights or an appeal, including rights concerning sale, sharing or targeted advertising, you may exercise them through the same contact. We assess the applicable law and explain the available process; you do not need to buy access to make a request.
Updates
We publish updates here and communicate material changes where required. Updating this notice does not itself provide consent to new processing.
Your privacy choices
Open the settings below to allow, refuse or withdraw optional referral attribution. Essential-only leaves it off. No optional audience analytics is enabled. You can also block or remove cookies in your browser, which can affect sign-in. Send data-protection requests using the contact below.
Contact and privacy requests
For questions or requests concerning the information AI POWER ACADEMY 3 LTD. handles for Science Check: .