Privacy notice

This app keeps your first name, your year group, the answers you give and how you are getting on, so it can choose the right questions for you and show your grown-up how you are doing. Nobody else can see it. It never asks where you live or which school you go to, and there are no adverts. If you are worried about anything, talk to the grown-up who set up your account.

Clever Clogs Academy runs this practice app. We are the data controller for the personal data described here, registered with the Information Commissioner’s Office under number ZB500833. Our data protection contact is Mathew McArthur, at contact@cleverclogsacademy.com. We handle personal data under the UK General Data Protection Regulation and the Data Protection Act 2018.

• Your account. Your email address and your password (stored only as a one-way scrambled form we cannot read back). We use them to let you sign in and to email you about your account: confirming it, and resetting your password. Our lawful basis is performing our contract with you.
• Each child you add. Their first name, year group, which exam they are preparing for, the exam date if you give one, the picture and detective codename they choose, and the coins and shop items they earn. You can use a nickname instead of a real first name if you prefer.
• Their practice. Every answer they give, whether it was right, how long the set took, their mock test results, and the topics they have mastered. We use it to choose their daily questions, to show you their progress, and to write the report after a mock test. Our lawful basis is performing our contract with you.
• Your membership. Whether your family has a membership, its status and renewal date, and the reference Stripe gives your account, so we know who has access. Your card details are entered on Stripe’s own page and are never seen by, sent to, or stored by us.
• On your device. A sign-in cookie, so the app knows it is you; it is needed for the app to work. During a mock test, the questions your child flags to come back to are kept in the browser until the test ends.

• We do not sell, rent or share your details or your child’s with anyone for marketing.
• There are no adverts, and no advertising or analytics cookies, in this app.
• We never ask for your child’s surname, address, school or date of birth.
• Children cannot contact each other or anyone else through the app.

Each supplier receives only what it needs to do its job, acts on our instructions, and is bound by a contract with us.

• Supabase stores the app’s data: accounts, children, answers, progress and memberships.
• Vercel hosts the app and keeps standard server request logs.
• Resend sends the account emails: confirming your account and resetting your password.
• Stripe takes membership payments. Stripe is the data controller for your card details, not us.

Some of these suppliers process data outside the UK. Where they do, the transfer is protected by appropriate safeguards, such as the UK Government’s International Data Transfer Agreement or the supplier’s adherence to the UK–US Data Bridge.

We keep your account, your children’s details and their practice for as long as your account is open. Ask us to close it and we delete the account, every child on it and all their answers within 30 days. Membership and payment records are kept for six years after the last payment, because the law requires us to keep accounting records.

You can ask for a copy of what we hold about you or your child, ask us to correct it, ask us to delete it, or object to how we use it. Email contact@cleverclogsacademy.com and we will reply within one month. If you are unhappy with how we have handled your data, you can complain to the Information Commissioner’s Office at ico.org.uk.