Last updated: 2026-08-29
This policy explains what personal data 11+ Help ("we", "us") collects, why, how long we keep it, and the rights you and your child have. 11+ Help is operated by 11+ Help, [registered address — to be added], ICO registration [ICO registration — to be added]. Questions: [contact email — to be added].
11+ Help is bought and managed by a parent or guardian. A child uses it under that adult's account. We design to the ICO Age-Appropriate Design Code: data minimisation by default, no behavioural advertising, no unnecessary profiling.
Parent account
Child profile — deliberately minimal:
We do not collect a child's date of birth, home address, real school, photo, or any special-category data.
Learning data generated in use: answers submitted, scores, time on task, XP / streaks, the mistake book, and chat messages sent to the "Ask the Tutor" feature.
Technical data: a single strictly-necessary session cookie (see the Cookie Policy), and server logs (IP address, request metadata) kept for security and retained for up to 30 days.
Premium accounts can use an AI assistant. Messages are sent to our language-model provider (NVIDIA NIM) to generate a reply, grounded in our own researched school database and your child's recent topic performance. Conversations are stored against the child profile so the tutor has context and so you can review them. We instruct the model provider not to train on the content. The assistant is rate-limited, kept on-topic, and never reveals mock-exam answer keys.
We share data only with processors acting on our instructions: our hosting and database provider, transactional email provider, payment processors, the AI model provider, and error-monitoring. We do not sell personal data and do not use it for third-party advertising. We may disclose data if required by law.
All processors are bound by data-processing terms. Where data leaves the UK/EEA, transfers rely on adequacy regulations or the UK International Data Transfer Addendum.
See the Data Deletion & Retention policy for the full table. In summary: active-account data is kept while the account is open; on deletion, child data is archived immediately and permanently erased after 30 days; payment records are kept for 7 years to meet tax law.
You can access, correct, export, restrict, or delete your data, and object to processing based on legitimate interests. Tools for the common ones are built in:
For anything else, email [contact email — to be added]; we respond within one month. You can complain to the ICO (ico.org.uk), though we'd like the chance to help first.
Material changes are notified by email to account holders before they take effect. The "Last updated" date above always reflects the current version.
Version dated 2026-08-29. First drafts for beta — under professional review before public launch.