Terms & Privacy

By accessing or using CrackTMUA (“we”, “us”, “our”), you agree to be bound by these Terms of Service. If you do not agree, you may not use the platform. These terms constitute a legally binding agreement between you and CrackTMUA.

You must be at least 13 years old to use CrackTMUA. If you are under 18, you confirm that you have your parent or guardian's consent to use the service.

CrackTMUA is an online examination preparation platform for the Test of Mathematics for University Admission (TMUA). The service includes access to a question bank, worked solutions, mock examinations, progress tracking, and spaced repetition tools.

We reserve the right to modify, suspend, or discontinue any part of the service at any time with reasonable notice. We will endeavour to provide at least 30 days' notice of any material changes that affect paid subscribers.

You must provide accurate and complete information when creating an account. You are responsible for maintaining the confidentiality of your login credentials and for all activity that occurs under your account.

You must notify us immediately at hello@cracktmua.com if you suspect unauthorised access to your account.

We reserve the right to suspend or terminate accounts that violate these terms, engage in fraudulent activity, or that have been inactive for more than 24 months, with reasonable prior notice.

Free plan: Access to 10 practice questions per day, specimen mock paper, and basic progress tracking. No payment required, no time limit.

Premium plan: A one-time payment of £37 (inclusive of any applicable VAT) grants lifetime access to all content including the full question bank, all mock examinations, spaced repetition, and advanced analytics. This is not a subscription — you will not be charged again.

All payments are processed securely via Stripe. We do not store your payment card details. Prices are quoted in GBP and may be subject to VAT depending on your jurisdiction.

You agree not to:

• Share your account credentials or access with others
• Reproduce, distribute, or commercially exploit any content from the platform without our prior written consent
• Attempt to scrape, reverse-engineer, or extract question data programmatically
• Use the platform to engage in academic dishonesty in any formal assessment context
• Attempt to circumvent any access controls, paywalls, or security features
• Upload or transmit any malicious code, spam, or harmful content
• Harass, impersonate, or harm other users

Violations may result in immediate account termination without refund.

All content on CrackTMUA — including but not limited to questions, worked solutions, explanations, graphics, and software — is owned by or licensed to CrackTMUA and protected by United Kingdom copyright law.

Questions derived from official TMUA past papers remain the property of Cambridge Assessment Admissions Testing. Our original content, including novel questions, solutions, and platform code, is our exclusive intellectual property.

You are granted a limited, non-exclusive, non-transferable licence to access and use the platform for personal educational purposes only. This licence does not permit reproduction or redistribution of any content.

CrackTMUA is provided “as is” and “as available” without warranties of any kind, express or implied. We do not guarantee that use of the platform will result in any particular examination score or university admission outcome. Past performance of any content is not indicative of future results.

We make reasonable efforts to ensure content accuracy but cannot guarantee that all questions, solutions, or information are free from errors. If you identify an error, please contact us and we will correct it promptly.

We do not warrant uninterrupted or error-free access to the service and shall not be liable for any interruptions caused by maintenance, technical failure, or events beyond our reasonable control.

To the maximum extent permitted by applicable law, CrackTMUA shall not be liable for any indirect, incidental, special, consequential, or punitive damages, including loss of profits, data, or goodwill, arising from your use of or inability to use the service.

Our total liability to you for any claim arising out of or related to these terms or the service shall not exceed the amount you paid us in the 12 months preceding the claim (or £37 if you are a one-time Premium purchaser).

Nothing in these terms limits our liability for death or personal injury caused by negligence, fraud, or any other liability that cannot be excluded by law.

You may delete your account at any time from the account settings page. Upon deletion, your personal data will be removed within 30 days in accordance with our Privacy Policy below, subject to any legal retention requirements.

Premium access is tied to your account. If you delete your account, your Premium access will be lost. We are unable to transfer Premium access to a new account.

These Terms of Service are governed by the laws of England and Wales. Any disputes arising from these terms or your use of the service shall be subject to the exclusive jurisdiction of the courts of England and Wales.

If any provision of these terms is found to be unenforceable, the remaining provisions shall continue in full force and effect.

We collect only what is necessary to provide the service:

• Account data: Email address and encrypted password when you register
• Authentication data: OAuth tokens if you sign in with Google
• Usage data: Questions attempted, answers selected, timestamps — used to power your progress dashboard and spaced repetition
• Payment data: Transaction reference and plan status (not card details — those are handled exclusively by Stripe)
• Technical data: Browser type, IP address, and approximate location for security and abuse prevention

We do not collect sensitive personal data, and we do not require your name, date of birth, or school.

We use your data to:

• Provide and operate the CrackTMUA platform
• Track your progress and personalise your learning experience
• Verify Premium access status
• Send transactional emails (account confirmation, password reset, payment receipt)
• Detect and prevent fraud, abuse, and security incidents
• Improve the platform based on aggregated, anonymised usage patterns

We will never use your data for advertising profiling or sell it to third parties. We will not send unsolicited marketing emails without your explicit consent.

Our legal basis for processing is: (a) contract performance — to provide the service you have signed up for; (b) legitimate interests — fraud prevention and platform improvement; and (c) consent — where we ask for your explicit permission (e.g. marketing emails).

We share data only with trusted third-party processors necessary to operate the service:

• Supabase: Database and authentication infrastructure. Data is stored in the West EU (London) region under strict security controls.
• Stripe: Payment processing. Stripe is a PCI DSS Level 1 certified provider. We receive only a transaction reference — never your card details.
• Cloudflare: Content delivery and DDoS protection. Cloudflare processes request metadata to route traffic securely.

All processors are contractually bound to process your data only on our instructions and in compliance with UK GDPR. We do not transfer your personal data outside the UK/EEA without appropriate safeguards.

Under UK GDPR you have the right to:

• Access: Request a copy of the personal data we hold about you
• Rectification: Correct inaccurate or incomplete data
• Erasure: Request deletion of your data (“right to be forgotten”)
• Portability: Receive your data in a structured, machine-readable format
• Restriction: Request that we limit how we process your data
• Objection: Object to processing based on legitimate interests

To exercise any of these rights, email hello@cracktmua.com. We will respond within 30 days. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

We retain your data for as long as your account is active, plus up to 12 months after deletion for legal and operational reasons, after which it is permanently purged.

We use minimal cookies and browser local storage strictly necessary for the service:

• Authentication session: A secure, httpOnly cookie to keep you logged in
• Theme preference: Stored in local storage to remember your dark/light mode choice

We do not use advertising cookies, third-party tracking pixels, or analytics cookies that identify you individually. We do not use Google Analytics or similar services.

We may update these Terms and Privacy Policy periodically. When we make material changes, we will notify you by email (if you have an account) and update the “Last updated” date at the top of this page at least 14 days before the changes take effect.

Continued use of the service after changes take effect constitutes acceptance of the updated terms.

For any questions about these Terms or Privacy Policy, to exercise your data rights, or to report a concern: