Privacy Policy

1. Introduction

Supamu Learning ("we", "our", or "us") is committed to protecting the privacy of our users, particularly children. This Privacy Policy explains how we collect, use, and protect personal information when you use our 11+ exam practice platform.

We comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Information We Collect

Parent/Tutor Accounts

• Name and email address
• Password (encrypted)
• Account type (parent or tutor)
• Payment information (processed securely by Stripe)
• Subscription status and billing history

Child Accounts

We minimise data collection for children. We collect only:

• First name (chosen by parent)
• Login code and PIN (system-generated, for authentication only)
• Exercise results and scores

We do not collect email addresses, dates of birth, or other personal information from children.

3. How We Use Your Information

• To provide and maintain our service
• To generate personalised practice exercises using AI
• To track learning progress and results
• To process payments and manage subscriptions
• To communicate important service updates
• To improve our platform and develop new features

4. Third-Party Services

We use trusted third-party services to operate our platform:

For a complete list of our data processors, please contact us at info@supamu.co.uk

5. Data Retention

• Account data is retained while your account is active
• Exercise results are retained to show learning progress
• Upon account deletion, your data is removed within 30 days
• Payment records may be retained longer for legal/tax purposes

6. Your Rights

Under UK GDPR, you have the right to:

• Access - Request a copy of your personal data
• Rectification - Correct inaccurate personal data
• Erasure - Request deletion of your personal data
• Portability - Receive your data in a portable format
• Object - Object to certain processing of your data

To exercise these rights, contact us at info@supamu.co.uk

7. Children's Privacy

We take children's privacy seriously. Our platform is designed so that:

• Only parents/tutors can create child accounts
• Children access the platform via a simple code and PIN (no email required)
• We collect minimal data from children (name and exercise results only)
• Parents have full control over their children's accounts and data
• Parents can delete child accounts at any time

8. Cookies

We use essential cookies only for authentication and session management. We do not use tracking or advertising cookies. Essential cookies are necessary for the platform to function and do not require consent.

9. Security

We implement appropriate technical and organisational measures to protect your data, including:

• Encrypted data transmission (HTTPS)
• Secure password hashing
• Access controls and authentication
• Regular security reviews

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by email or through a notice on our platform. Your continued use of the service after changes constitutes acceptance of the updated policy.