Privacy notice

DRAFT TEMPLATE. Fill in the bracketed details and have it checked before the site goes live.

This notice explains what NumTrix+ ("we") collects and why. [Company name], [registered address], is the data controller. Contact: [email address]. ICO registration number: [number].

What we collect

• Your account: your first name, email address, a securely scrambled (hashed) version of your password, and the date you agreed to our terms.
• Your learners: a first name or nickname you choose, their level, and their practice progress (answers right and wrong by topic, streaks and mock exam scores).
• Essays and written answers (English): what your learner writes is saved with their progress so they can come back to it. If they ask for AI feedback, see "AI feedback" below.
• Payments: which modules your family has bought. Card details are handled by Stripe and never reach us.
• Progress summary and rewards: stars, badges, rewards you set, the exam date you enter and a short weekly summary (minutes, expected result, topics to practise) shown on your account page and in the weekly email.
• A login cookie: one essential cookie that keeps you signed in. We don't use advertising or tracking cookies.

Why we use it

To run your account and save progress so it works on every device (contract). To keep the service secure, for example limiting repeated login attempts (legitimate interests).

Children

Accounts are for parents, carers and teachers aged 18 or over. We ask only for a child's first name or nickname. We don't show adverts, sell data or profile children for marketing. We aim to follow the ICO's Age Appropriate Design Code.

AI feedback

When a learner taps "Get AI feedback" on an English answer, the question and their answer (with any email addresses or phone numbers removed) are sent to our AI provider, Anthropic, to produce an estimated mark and comments. We don't send names, email addresses or account details. Anthropic processes the text on our behalf and [does not use it to train its models under its commercial terms – check and confirm your agreement, including data retention]. We don't keep a copy of the answer on our servers beyond the learner's saved progress; we keep a record that feedback was requested (date, question and usage) for fair-use limits and costs. If the AI notices something in a learner's writing that suggests they might be worried or unsafe, the learner is shown where to get help and the parent sees a gentle notice on the account page. AI feedback is an estimate to help learning, not an exam-board mark.

Sharing with a teacher (only if you choose to)

You can choose to share a child's progress with their teacher from your account page. We first email the teacher an invitation that contains only your name and your child's first name. Nothing else is shared unless the teacher confirms they teach your child; if it reaches the wrong person, they can say so (or ignore it) and nothing is shared. We email you when the teacher confirms or declines. Once confirmed, the teacher gets a weekly summary (and, if you choose, a note when your child finds a topic hard) and a private link to a read-only progress page. We share only your child's first name and practice summary – never answers, essays or your contact details. Sharing ends automatically on 31 August, at the end of the school year; you can renew it for the new year. You can stop sharing at any time, which switches the link off, and the teacher can stop the emails too. We keep the teacher's name and email only while the sharing is listed on your account.

School classes

Joining a class from home. If you type a teacher's class code under your child on your account page, that teacher's dashboard shows your child's first name and practice summary: when they last practised, minutes on questions each day, expected result, how much of each area is complete, topics they find hard and homework progress. Never answers, essays or your name or contact details. You can leave the class at any time from your account page, and the teacher stops seeing your child straight away.

Class logins made by a school. A teacher can make logins for pupils to use in school, with a first name and a 4-digit PIN. These belong to the teacher's account and the school is responsible for them (the school is the data controller and we process the data for it). We keep only the first name, a scrambled (hashed) PIN and the practice data. A class login can't see any other child or any account details. When the teacher deletes a pupil or the class, that pupil's data is deleted. AI essay feedback is off for class logins unless the school adds it and the teacher switches it on for the class. Then, when a pupil asks for feedback, their answer and the question (no name, with email addresses and phone numbers removed) are sent to Anthropic under a zero-data-retention arrangement, so nothing is kept after the reply. If the AI notices something in a pupil's writing suggesting they may be worried or unsafe, the pupil is shown where to get help and their teacher sees a notice on the class dashboard.

Who we share it with

Our hosting provider [hosting company], which stores the data on our behalf; Stripe, to take payments; Anthropic, only for AI feedback as described above[; and our email provider (Resend) to send password reset emails and the weekly progress email, which you can switch off at any time]. We don't sell your data.

How long we keep it

Until you delete your account. You can delete it at any time from your account page, and everything is removed straight away. [Backups are kept for up to 30 days.]

Your rights

You can download your data or delete your account from your account page. You can also ask us to correct your data or object to how we use it. If you're unhappy, you can complain to the Information Commissioner's Office (ico.org.uk).