Privacy Policy

Last updated: 28 July 2026

Table of Contents

1. Introduction

ClevStudy Limited ("ClevStudy", "we", "us", or "our") is committed to protecting the privacy of our users, including parents, guardians, and children. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform.

As an educational platform designed for KS3 and KS4 students in the United Kingdom, we take particular care to comply with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and the Children's Code (Age Appropriate Design Code).

2. Information We Collect

2.1 Information You Provide

Account registration details (name, email address)
Child profile information (name, username, key stage, subjects)
Payment and billing information (processed securely via Paddle)
Support tickets and feedback submissions
Communication preferences

2.2 Information Collected Automatically

Learning progress and performance data
Study session activity (duration, topics covered)
Device information and browser type
IP address and approximate location (for currency detection)

3. How We Use Your Information

To provide and personalise the learning experience
To track academic progress and generate insights for parents
To process payments and manage subscriptions
To send important service notifications
To improve our platform and develop new features
To ensure the safety and security of our users

4. Children's Privacy

ClevStudy is designed for KS3 and KS4 students (typically aged 11–16). We take our responsibilities under the ICO Children's Code (Age Appropriate Design Code) seriously and apply the following principles to all children's data.

4.1 How Children Access ClevStudy

Children do not create their own accounts. A parent or legal guardian creates and manages the child's account, including selecting subjects, setting learning preferences, and reviewing progress. Children sign in using a username and PIN set by their parent.

4.2 What Data We Collect from Children

We apply the principle of data minimisation and only collect what is necessary to provide the educational service:

First name and username (chosen by the parent)
Key stage, year group, and selected subjects
Learning progress data (session activity, quiz scores, mastery levels, streak and XP records)
Device type and browser (for platform compatibility)

We do not collect email addresses, phone numbers, precise location, or any other personal contact information directly from children.

4.3 Lawful Basis for Processing

We process children's data on the basis of legitimate interests (providing the educational service the parent has signed up for) and parental consent (given when the parent creates the child's account and agrees to these terms). We do not rely on the child's own consent.

4.4 How We Use Children's Data

To deliver personalised lessons and adaptive tutoring through our AI-powered learning engine
To track learning progress, streaks, badges, and XP for motivation
To generate progress reports and insights visible to the parent or guardian
To send in-app notifications (e.g. streak reminders)

We do not use children's data for marketing, advertising, profiling for commercial purposes, or sale to third parties.

4.5 AI and Children's Data

Our AI tutoring engine processes children's learning responses to adapt lesson difficulty, detect misconceptions, and generate appropriate teaching content. This processing is performed solely to deliver the educational service. We do not use children's data to train general-purpose AI models.

4.6 Parental Controls and Rights

Parents and guardians have full control over their child's account and can at any time:

View all data held about their child through the parent dashboard
Update or correct their child's profile information
Deactivate or delete the child's account (which triggers deletion of the child's personal data)
Export their child's learning progress data
Manage subject selections and learning preferences

4.7 Age Appropriate Design

In compliance with the ICO Children's Code, we ensure that:

Default settings are set to the highest privacy level for child accounts
We do not use nudge techniques to encourage children to provide more data or weaken their privacy
Analytics cookies are not used to individually profile children; all analytics from child sessions are aggregated and anonymised
Geolocation tracking is not used for child accounts

We do not sell your personal data. We may share information with:

Payment processors (Paddle) for billing purposes
Cloud infrastructure providers for hosting and storage
AI service providers for personalised tutoring (anonymised where possible)
Law enforcement when required by law

5.1 Sub-Processors

We use third-party service providers (sub-processors) to help deliver the ClevStudy platform. All sub-processors are engaged under Data Processing Agreements and are contractually bound to process data only on our instructions and to maintain appropriate security measures.

Our current sub-processors include providers for cloud infrastructure and hosting (Microsoft Azure), payments (Paddle), AI tutoring (OpenRouter, OpenAI), voice accessibility (Speechify), email delivery (Resend), and push notifications (OneSignal).

For the full list of sub-processors, including data categories, processing purposes, data locations, and our changelog, see our dedicated Sub-Processors page.

5.2 International Transfers

Some sub-processors may process data outside the United Kingdom. Where this occurs, we ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) or equivalent measures approved by the ICO. For details on which providers process data internationally, see our Sub-Processors page.

6. Data Security

We implement appropriate technical and organisational measures to protect your personal data, including encryption in transit and at rest, access controls, and regular security assessments.

7. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by law. When an account is deleted, we will remove or anonymise personal data within a reasonable timeframe.

8. Your Rights

Under UK GDPR, you have the right to:

Access your personal data
Rectify inaccurate data
Erase your data ("right to be forgotten")
Restrict processing of your data
Data portability
Object to processing

To exercise any of these rights, please contact us at privacy@clevstudy.com.

9. How to Delete Your Account

You can request deletion of your account and all associated data at any time. When you delete your account, we will permanently remove your personal information, your children's profiles, learning progress data, and all other data linked to your account within 30 days.

To delete your account:

Via the Web Dashboard: Log in to your parent account at app.clevstudy.com, go to Settings → Danger Zone → Delete Account, and follow the prompts to confirm deletion.
Via Email: Send an email to info@clevstudy.com with the subject line "Account Deletion Request" and include the email address associated with your account. We will process your request within 30 days and send you a confirmation email once complete.

Important: Account deletion is permanent and cannot be undone. All learning progress, achievements, and data will be lost. If you have an active subscription, it will be cancelled, but you will not receive a refund for the current billing period.

10. Cookies

We use essential cookies to ensure the platform functions correctly and optional analytics cookies to help us improve the service. You can manage your cookie preferences at any time. For more details, see our Cookie Policy.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date.

12. Contact Us

If you have any questions about this Privacy Policy, please contact us at:

ClevStudy Limited
Email: privacy@clevstudy.com