01Who we are
Scholaria is operated by SN EDU CONSULTING LIMITED, a company registered in England and Wales under company number 17437034 (“Scholaria”, “we”, “us”, “our”). We are the data controller for the personal data described in this policy, and we are registered with the UK Information Commissioner’s Office (ICO) under the Data Protection (Charges and Information) Regulations 2018.
This policy covers the Scholaria website and app. It applies to the account holder (the parent or guardian who creates and controls the account) and to the children they add to it. It should be read alongside our Terms of Service.
02What we collect
| About the parent | Email address, and a Google account identifier if you sign in with Google. For paid plans, we also hold a billing reference from Stripe (see §8) — never your card number. We don’t ask for or store your name. |
|---|---|
| About each child | First name, year group (Y3–Y6), and an avatar colour they pick. That’s the whole list. |
| Practice activity | Which questions were answered, how, and how accurately, plus streaks and time spent — this is what powers the adaptive practice and your evening dashboard. |
| Technical data | Our hosting provider (Railway) automatically logs standard web request data — such as IP address and request path — as a normal part of running any web server. These are transient infrastructure logs, not stored in our application database or used by any feature of Scholaria; we don’t build profiles from them. |
| Site analytics | Google Analytics records pseudonymous usage data — pages visited and product milestones such as signing up, completing a session, or subscribing — so we can understand what’s working. If you accept analytics cookies when asked, this is tied to a cookie on your device; if you don’t, Google still receives a cookieless, non-identifying signal used only for aggregate traffic totals. It never includes your name, email address, or your child’s name. See §15. |
| Anonymous traffic counts | To measure how many visitors reach our homepage even if they decline analytics cookies, we log each page load with a one-way hashed version of your IP address — not the IP itself, and not reversible — never linked to your account or any other data we hold. This doesn’t use a cookie. See §15. |
| Correspondence | Anything you tell us directly — for example in a support email — which we keep only for as long as needed to resolve your query (see §12). |
03What we don’t collect
No date of birth — only the year group you tell us. No device identifiers used for advertising or cross-app tracking. No precise location. No photographs or biometric data of any kind. No school name, unless you choose to mention it in a support message. If a field isn’t listed in §2, we don’t ask for it.
04Our legal basis for using your data
Under UK GDPR, we rely on one of the following legal bases for every use of personal data described in this policy:
- Performance of a contract — creating your account, generating and marking practice questions, running your dashboard, and billing your subscription.
- Legitimate interests — keeping the service secure and reliable, and understanding usage in aggregated, non-identifying form to improve Scholaria. We balance this against your and your child’s privacy interests, weighted in your child’s favour.
- Consent — only where we ask for it explicitly, such as an optional marketing email, which you can withdraw at any time via the unsubscribe link or by contacting us.
- Legal obligation — retaining billing records for the period required by UK tax law.
05Why we collect it
To run the service you’ve signed up for: generating the right practice questions, marking them, building your dashboard, and billing your subscription. We don’t collect data for any purpose beyond delivering, securing, and improving Scholaria itself.
06About your child’s data
Your child’s account is created and controlled by you, the parent or guardian — they don’t sign up themselves, and we don’t collect anything directly from them (no open text fields, no chat, no way for them to enter personal information). Practice questions and explanations are written using AI language models at the level of a curriculum topic — for example “Year 5 fractions” — never using your child’s name or any of their personal details (see §8 for how this works).
- Your child’s best interests are the primary consideration in every design decision we make.
- High privacy settings are on by default — there is nothing for you or your child to configure to get them.
- We don’t profile children for advertising, and no advertising is shown to them at all.
- We don’t use nudge techniques, streak-shaming, or dark patterns designed to keep a child using the app longer than they’d choose to themselves.
- We collect the minimum data needed to run the service, and nothing more (see §2 and §3).
- Your child’s data is never shared beyond the named recipients in §8, and never for a purpose unrelated to running Scholaria.
07What we never do
- Show advertising to children, or use their data to target ads anywhere else
- Sell, rent, or license personal data to any third party
- Use a child’s personal data to train a third-party AI model
- Require a child to provide personal data to access practice content
- Use nudge techniques or dark patterns aimed at children
- Build an advertising or marketing profile from a child’s practice activity
09International transfers
We choose providers that keep data within the UK/EEA wherever possible — our application and database are hosted in the EU (Amsterdam). Where a provider we use is based outside the UK/EEA, we rely on the legal safeguards required under UK GDPR, such as the UK’s International Data Transfer Addendum or Standard Contractual Clauses, before any data is transferred.
10Keeping your data secure
We use industry-standard measures to protect your data, including encrypted connections (TLS) between your device and our servers. We don’t use passwords at all — signing in is via Google Sign-In or a one-time emailed link, so there’s no password for anyone to guess or steal. Access to our production systems and database is restricted to the small team that operates Scholaria. No method of transmission or storage is 100% secure, but we keep these measures under regular review and will notify you and, where required, the ICO without undue delay in the event of a data breach affecting your personal data.
11Where data is stored
Your account and practice data is hosted on Railway’s infrastructure in the EU West (Amsterdam) region. See §9 for how we handle any transfer outside the UK/EEA.
12How long we keep it
| Account & practice data | Kept for as long as your account is active. If you ask us to close your account (see §18), we delete it — or anonymise it where we need aggregate figures to run the service — within 30 days. |
|---|---|
| Billing records | Kept for up to 6 years after the relevant transaction, as required under UK tax law, even after account deletion. |
| Support correspondence | Kept for up to 2 years after your query is resolved, to handle any follow-up. |
13Automated processing
Scholaria’s adaptive practice engine adjusts question difficulty and topic sequencing automatically, based on your child’s answers. This is not automated decision-making with legal or similarly significant effects under UK GDPR Article 22 — it only sequences practice content, it doesn’t make any decision about a person’s rights or access to opportunities, and you as the account holder remain in control and can review or reset your child’s progress at any time.
14Your rights
As the account holder acting on your child’s behalf, you can ask us at any time to:
- Access — get a copy of the personal data we hold about you or your child.
- Rectify — correct anything that’s inaccurate or incomplete.
- Erase — delete your account and associated personal data (subject to the retention rules in §12).
- Restrict or object — ask us to limit, or stop, a particular use of your data.
- Port — receive your data in a portable, machine-readable format.
- Withdraw consent — for anything we process on the basis of consent, such as marketing emails, at any time.
Contact us using the details in §18 to exercise any of these rights. We’ll respond within one month, as required by UK GDPR.
16Complaints
If you think we’ve got something wrong, please contact us first at the address in §18 so we can put it right. You also have the right to complain to the UK’s independent regulator at any time:
Information Commissioner’s Office
Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
Helpline: 0303 123 1113 · ico.org.uk
17Changes to this policy
We may update this policy from time to time, for example to reflect a new feature or a change in the law. If we make a material change to how we handle your data, we’ll email account holders before it takes effect. The “last updated” date at the top of this page always reflects the current version.
18Contact us
Questions about your data, or a request under §14: support@scholaria.co.uk