Brainy Bees ("we", "us") is a maths and English learning app for children ages 5 to 12. Parents create the account, add a profile for each child, and choose how their child practises: on paper (printed or posted worksheets) or on screen. A child never has an email address, password or account of their own. A parent can optionally set a short PIN so their child can open the app's kid mode on a shared device; that PIN unlocks only that child's own practice space and nothing else.

Almost everything we hold about a child is entered by the parent when setting up or managing their profile. The exceptions are the answers a child gives during on-screen practice and any short pieces of writing they type in the app's writing activities, which come from the child directly while using the app under the parent's account. From the parent: email address, full name, password (hashed, never stored in plain text), whether you are in the UK, notification and newsletter preferences, a push-notification device token, and your parental-consent record (your typed name and the date, or an uploaded signed form). About each child, entered by the parent: first name or nickname, avatar and character theme choice, age band, and optionally their date of birth and gender (both can be left blank). If you choose the Mail plan, the name and postal address the worksheets should be sent to. Generated while a child uses Brainy Bees: answers to on-screen questions, writing-activity responses, photos of completed paper worksheets that a parent uploads, the resulting scores, topic and skill history, Bee Coins, badges and streaks, and a hashed copy of the kid-mode PIN if the parent sets one. We do not collect a child's phone number, precise location, school, government ID or any biometric identifier, and we never ask a child for contact details.

Personalisation: a name, avatar and age band let us show the right difficulty of worksheet and adventure-map content. Grading: a worksheet photo is used to score practice attempts, with a parent confirming the result. Progress tracking: scores and topic-mastery history power the parent dashboard's recommendations for what to practice next. Account operation: your email address is used for login, password reset, and optional notifications about your own account, never sent to or about your child directly. Rolling out changes safely: the app tells our servers which platform it is on and its version number, so it gets settings that work with it. When we introduce a change, we sometimes switch it on for a small share of children first. Which share a child is in is worked out on our own servers from their internal profile number, never from a device identifier, and none of this is sent to anyone else. We do not use any of this data for targeted advertising. We don't show ads, and we don't use any advertising or ad-personalisation tools in this product. We do use privacy-configured product analytics (see "Who we share it with" below) to see which features are actually used and to catch problems, never to build an advertising profile of you or your child.

Supabase (our hosting and database provider) stores and serves all account and progress data. This is our infrastructure vendor, not an independent user of your data. Anthropic (our AI vendor) receives a photo of a completed worksheet only when a parent has separately opted in, to transcribe handwritten answers so grading is quicker. Sending anything to an AI vendor should always be a deliberate parent decision, not a default, which is why this needs its own opt-in. Stripe (our payment provider) handles subscription payments. Your card details go directly to Stripe and never touch our servers; Stripe shares with us only a customer reference, the plan and its status. So that each child's plan can be told apart, we send Stripe an internal reference number for the child a plan is for, never their name or anything else about them. Brevo (our email provider) receives your name and email address in order to send the emails that come with your account and any plan (receipts, renewal and trial reminders, cancellation confirmations, payment problems), the optional notifications (a worksheet is ready to review, a weekly practice reminder, the Sunday weekly summary; each can be switched off in Settings) and, only if you tick the box, our newsletter. Billing emails mention your child's first name so you know which plan they are about. The weekly summary also includes your child's first name and that week's practice figures: how many questions they answered and got right, by topic, and one topic to look at next. Nothing else about your child is sent to Brevo. Expo (our push-notification provider) receives a device token only, no account or child data, to deliver optional reminders to the parent's own device. Google (Google Analytics, via Google Tag Manager on the website and Firebase in the app) is only used if a parent on that device says yes to analytics; until then it is switched off and receives nothing. When it is on, it receives anonymised, aggregate usage data, such as which screens are opened and which in-app actions happen, so we can see which features work and where people get stuck. We configure this with Google Signals and ad personalisation turned off, and we mark our data as directed at children with Google, so none of it is ever used to build an advertising profile or show ads back to you. It never includes your child's name, worksheet content, or answers. We do not sell personal information, and we do not share it with data brokers, advertisers, or anyone else not listed here.

Worksheet photos are kept for 180 days after a score is confirmed, then automatically and permanently deleted by a nightly job. The resulting score and progress history is not deleted, so your dashboard keeps working. Account, child profiles, scores, writing responses and progress history are kept for as long as your account is active. Deleting a child's profile removes everything about that child immediately; deleting your account removes everything about you and every child on it (see Your rights below). Your parental-consent record is kept for as long as your account exists, as evidence of compliance with parental-consent law, and goes with the account when the account is deleted. A push-notification device token is removed when you sign out of that device, or once it goes stale. A kid-mode sign-in on a device expires after 30 days and can be revoked by the parent at any time from the child's profile. Billing emails: we keep a record that each billing email was sent (your email address, the type of email and the date) for 6 years, including after an account is deleted, so we can show that receipts, reminders and cancellation confirmations were sent. When an account is deleted, anything in that record that mentions your child is removed straight away. Stripe keeps its own payment records for as long as the law requires of it.

Review: everything collected about your child is visible to you in the parent dashboard - scores, skill history, writing responses and profile details. Delete a child's profile: from that child's screen in the app. This permanently removes their profile, worksheets, photos, progress history, coins and badges. Delete your whole account: from Settings in the app, at the bottom of the page. This cancels any active plan, removes every child profile and all of their data, and deletes your account itself. It cannot be undone. Two separate consents, at any time: general consent to these data practices, and a separate, optional consent to worksheet photos being sent to our AI vendor for grading. You can accept the first without the second - worksheets are simply graded manually instead. Verifiable parental consent: before a child profile can be created, we require a consent form. Most parents sign it in the app by typing their full legal name, which takes effect immediately; a parent can instead upload a signed paper form, which a real person reviews before approval. To exercise any of these rights or ask a question, see Contact us below.

Every table in our database enforces Row Level Security, meaning a parent's account can only ever read or write their own children's data - enforced by the database itself, not just by application code. Worksheet photos and signed consent documents are stored in private storage with no public URLs, access requires a valid, scoped session. We use Google Analytics for product analytics only when a parent has said yes to it (see "Who we share it with" above), configured with Google Signals and ad personalisation turned off and our data marked as directed at children, exactly as COPPA requires for any analytics used in a children's product. We don't use any advertising tools, and no third-party code in this app shows ads or builds an advertising profile of you or your child.

If you're a kid reading this: Brainy Bees is something your parent or guardian signed up for and manages for you. If you have questions about what we know about you, ask your parent - they can see everything and can delete it at any time.

UK data protection law requires a legal reason for each use of your family's information. Ours are: To provide the service you signed up for (contract): running your account and your child's practice, grading the worksheets you submit, taking payments, and sending the emails that come with a plan, such as receipts, reminders and cancellation confirmations. Your consent: product analytics (Google Analytics, off until you say yes), sending worksheet photos to our AI vendor, our newsletter, and optional notifications. You can withdraw any of these at any time in Settings, and we stop straight away. Our legitimate interests in running a safe, reliable service: keeping accounts secure and preventing misuse. We only rely on this where it does not override your family's interests. Legal obligations: keeping billing records, and keeping a record that a parent consented before a child's profile was created.

Our database and file storage are hosted by Supabase in Ireland, in the European Union. Brevo is based in France. Stripe, Google, Anthropic and Expo may process information in the United States. Transfers from the UK to the European Union are covered by the UK's adequacy regulations. Transfers to the United States rely on safeguards approved under UK law, such as the UK-US Data Bridge or the UK International Data Transfer Addendum to the EU standard contractual clauses.

If we materially change what we collect, why, or who we share it with, we'll update this page and notify parents through the app or by email before the change takes effect for their account.

Questions, requests to review or delete your data, or consent-related questions: hello@brainybees.com. Brainy Bees is run by Techralis Ltd (company number 17445980), 33 Oakdene Park, London, England, N3 1EU, which is responsible for your family's data.

If you are unhappy with how we have handled your family's information, please contact us first at hello@brainybees.com and we will try to put it right. You also have the right to complain to the Information Commissioner's Office (ICO), the UK's data protection regulator, at ico.org.uk or on 0303 123 1113.