Privacy notice

What we collect

• Account details: name, email address, password (stored only as a one-way hash), timezone and role.
• For students: year of birth (not a full date of birth) to apply our rules for minors, and optionally grade level, school and country.
• Learning data: answers, uploaded work, assessment results, mastery estimates, error patterns, class notes and assignments.
• For parents: the link between your account and your child’s account.
• Messages you send us through the contact and consultation forms.
• Consent records: what was agreed, by whom, when and which version of this notice was shown.

Why we use it

• To run your account and sign you in securely.
• To teach: diagnostics, practice, grading, learning paths and class briefs for your mentor.
• To keep parents informed about a linked student’s progress.
• To reply to enquiries and arrange consultations.
• To keep the service secure, including rate limiting and audit logs.

Students under 18

Students who could be under 13 cannot create their own account; a parent or guardian must do it. For students aged 13 to 17, we ask a parent or guardian to approve learning analytics and AI processing before those features are used. A parent can change that decision later.

We do not show advertising to students and do not track students across other websites.

AI and automated assessment

Some assessments use AI models. We send only what is needed to assess the work, without names or contact details, and we do not allow student work to be used to train AI models. Numerical answers are checked with deterministic calculation. Evaluations of uploaded written work are always checked and approved by a mentor before a student or parent sees them, and a mentor can override any automated result.

Who processes data for us

• Cloudflare, which hosts the website and application.
• Neon, which hosts our database.
• Resend, which sends account emails.
• Our AI model provider, for automated assessment features, under terms that do not allow training on your data.
• Our payment provider, when you pay for a plan. We never see or store full card details.
• Google (Analytics and Tag Manager) and Meta (the Meta pixel), only if you accept them in the cookie banner, and only on our public pages.

Cookies and analytics

Necessary cookies keep you signed in and protect the service; they are always on. With your permission, we use Google Analytics (loaded through Google Tag Manager) to see which public pages are useful, and the Meta pixel to measure our adverts on our pricing, booking and contact pages. Nothing from Google or Meta loads until you choose, and you can change your choice at any time with “Cookie settings” at the bottom of every page.

Analytics and advertising tools never run on sign-up or sign-in pages, on parent-approval pages, or anywhere in the student, parent or mentor portals, so they never see learning data. We do not send names, email addresses or phone numbers to Google or Meta.

How long we keep it

• Account and learning data: while the account is active, and deleted after a verified deletion request.
• Contact and consultation messages: up to 12 months.
• Uploaded written work (photos and PDFs) and its evaluation: deleted 180 days after upload, or at once if the student deletes it.
• Email verification and password reset links: expire within 48 hours and 1 hour respectively.
• Security and audit logs: kept for as long as needed to protect the service, without raw personal details.

Your choices and rights

Signed-in users can request a data export or deletion from their account page. Anyone can contact us through the contact page.

• See and download your data, or ask us to correct it.
• Ask us to delete your account and data.
• Withdraw consent you gave, or that you gave for your child.
• Ask questions or raise a concern about how we handle data.

Changes to this notice

When this notice changes in a way that matters, we will tell account holders and record which version each consent was given under.