Fair Processing Notice

Last updated: 10 June 2026

This notice explains how Paul Britto (“we”, “us”) collects and uses your personal information when you use Character Assess (www.character-assess.co.uk), in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Who is responsible for your data

The data controller is Paul Britto. If you have any questions about your data, or want to exercise any of your rights, contact dpo@character-assess.co.uk.

What information we collect

  • Your chosen username and email address.
  • If you register with a password: a securely hashed version of your password (we never store or see your actual password).
  • If you sign in with Google or Microsoft: your verified email address and an account identifier they provide. We do not receive your password for those services.
  • Your answers to the Curiosity and Personality questionnaires — and, if you choose to unlock it, the optional Deep Dive questionnaire — together with the results we calculate from them.
  • Any development goals you write, and any AI-generated profile or development plan created for you (see below).
  • Your avatar choice (an icon and colour — we do not collect photos).
  • A unique customer reference number (e.g. CA-000123), your AI-unit balance, and counts of how you use the app’s features.
  • The invite code you used to join, and the date you created your account and gave consent.

Why we use it and our lawful basis

We process your questionnaire answers and results on the basis of your consent (UK GDPR Article 6(1)(a)), which you give when you tick the box during registration. We process account, payment and security information because it is necessary to provide the service you have asked for (Article 6(1)(b)). We use your data solely to:

  • create, secure and manage your account;
  • calculate and display your results and profiles;
  • save your results so you can return to them later;
  • generate the optional AI-written content you request;
  • create and deliver your PDF report if you request one; and
  • manage your AI-unit balance and any purchases you make.

We do not use your data for advertising, we have no analytics or tracking, and we never sell or share your data with third parties for marketing.

AI-generated profiles and development plans

If you choose to generate an AI personality profile or development plan — or unlock the Deep Dive, which can add a section to an existing profile — the relevant information (your assessment scores and, for a development plan, the goals you have written) is sent to our AI provider, Anthropic, which generates the text on our behalf as a data processor. Anthropic does not use data sent through its API to train its models (see Anthropic’s privacy policy). The generated text is stored in your account alongside your results. These steps are entirely optional — they only happen if you tap the relevant button.

PDF reports sent by email

If you request your PDF report, we create it on our own server and can also email it to your registered address. That email is delivered through our email hosting provider, Fasthosts (Livemail), acting as a data processor. We don’t use your email address for anything else unless you ask us to.

Payments for AI units

If you choose to buy AI units, payment is handled by Stripe, a regulated payment provider, acting as a data processor (see Stripe’s privacy policy). Your card details go directly to Stripe — they never touch our servers and we cannot see them. We keep a record of your customer reference number, the package you bought, and your updated unit balance so we can provide what you paid for.

Cookies and device storage

We use only what the app strictly needs to work:

  • a login cookie that keeps you signed in (and a separate one for the site administrator);
  • a short-lived cookie used only while completing Google/Microsoft sign-up; and
  • your browser’s local storage to remember small display preferences (such as which sections of your profile you collapsed).

There are no advertising, analytics or tracking cookies.

How long we keep it

We keep your account and results until you delete your account, or after 3 years of inactivity, whichever is sooner. You can delete your account yourself at any time (see below).

Who can see it

Your results are private to your account. Even the site administrator sees only activity counts (for example, how many tests you have taken) — never your answers, results or AI-written text. We use reputable hosting providers who process data on our behalf under contract.

Where your data is stored

Your data is stored on servers located in the UK or European Economic Area. If any provider stores data outside these areas, we ensure appropriate safeguards (such as UK-approved contract clauses) are in place.

Your rights — and the built-in tools for them

Under UK data protection law you have the right to:

  • be informed about how your data is used (this notice);
  • access a copy of your data;
  • have inaccurate data corrected;
  • have your data erased (“right to be forgotten”);
  • restrict or object to processing;
  • data portability (receive your data in a usable format); and
  • withdraw your consent at any time, without affecting earlier processing.

You can exercise the most important rights yourself, instantly, from Account settings (tap your avatar): “Download my data” gives you a complete copy of everything we hold about you, and “Delete my account” permanently erases your account and all your data. For anything else, email dpo@character-assess.co.uk.

Complaints

If you are unhappy with how we handle your data you can complain to the UK’s data protection regulator, the Information Commissioner’s Office (ICO), at ico.org.uk or by calling 0303 123 1113.

Is providing this data required?

Providing your username, email and answers is necessary to use the app. If you choose not to provide them, you will not be able to create an account or receive a profile. Your results and AI-written content are generated automatically from your answers, but no automated decision-making takes place that has legal or similarly significant effects on you.