GDPR Compliance
We follow GDPR principles end-to-end: lawful basis, minimisation, retention limits and the right to access or delete personal data on request.
Tutors and parents are trusting us with something precious — a child's learning journey. Here's exactly how we handle that responsibility.
We follow GDPR principles end-to-end: lawful basis, minimisation, retention limits and the right to access or delete personal data on request.
Lessons are only recorded when consent has been given. Parents are informed how recordings are used, who can hear them and when they are deleted.
All data is encrypted in transit and at rest. Access is restricted to the tutor and authorised platform processes — never sold, never shared with advertisers.
Audio recordings exist for one purpose: to generate the lesson report. Once the tutor approves the report, the audio is automatically deleted. Transcripts and reports remain so progress can still be tracked over time.
Student data is stored on managed, GDPR-aligned infrastructure with row-level security, audit logging and regular backups.
Tutors invite parents through a secure flow that captures consent for recording, communication and data processing before any session is recorded.
Role-based access for tutors, admins and parents — each role only sees the data they need. Strong authentication and session controls protect every account.
We are actively working towards independent security certifications and ongoing third-party reviews as the platform grows.
Questions about how your data is handled? We're happy to talk it through before you join.
Join Waitlist