Privacy Policy

Kent Test Prep ("we", "us") is an online 11+ Kent Test tutoring service operated in the United Kingdom. We are the "data controller" for the personal data described in this policy - meaning we decide how and why it is used. You can contact us about anything in this policy at hello@kenttestprep.co.uk or through the in-app help (the "?" button).

About parents: your email address, username, password (stored only as a secure hash), the display name you give us, and your billing details. Card details go directly to Stripe - we never see or store your card number.

About children: a first name (or nickname - it does not need to be real), school year group, target school (optional), and everything they do in the app: answers given, scores, timing, streaks and progress. Children's profiles are created and controlled by their parent, and children log in with a simple PIN rather than any personal account details.

Automatically: basic technical logs needed to run and secure the service (such as error logs).

We deliberately collect as little as possible. We do not ask for children's email addresses, and there is no advertising, tracking or profiling for marketing on the child side of the service.

• To provide the tutoring service - weekly assessments, adaptive practice, progress tracking (performance of our contract with you).
• To take payment and manage your subscription via Stripe (contract).
• To answer support requests (contract / legitimate interests).
• To email you about your account and the service - for example your welcome email, weekly assessment reminders and weekly results summaries (both on by default, switchable anytime in Account settings), mock exam results after each monthly sitting, a one-off reminder if your free assessment is still waiting three days after you join, important changes, and billing matters (contract / legitimate interests).
• To send optional "streak-saver" engagement emails only where you have explicitly opted in - either by ticking the box at sign-up or switching them on in Account settings. You can withdraw consent with one tap in Account settings at any time (consent under PECR).
• To send occasional marketing emails (for example, new services or offers) only where you have consented or the "soft opt-in" for existing customers applies - every marketing email includes an unsubscribe link, and you can opt out at any time (consent / legitimate interests under PECR).
• To keep the service secure and fix problems (legitimate interests).
• Children's learning data is processed under the contract you enter with us as their parent, and on the basis of parental consent where consent is required. You may withdraw consent at any time by deleting your child's profile or your account.

We never sell personal data. We share it only with the processors needed to run the service:

• Stripe - payment processing (they act under their own privacy policy and PCI-DSS certification).
• Railway - hosting of the application and database.
• Cloudflare - DNS and security for our domain.
• Moonshot AI - if you use the in-app help, your question may be processed to draft a first response.
• Google Ads and Google Analytics - only if you accept optional cookies: pseudonymous visit, usage and conversion data to measure and improve our advertising. See the Cookie Policy for details and how to change your choice.
• Meta - only if you accept optional cookies: pseudonymous visit and registration events from our Meta Pixel, to measure and improve our Facebook and Instagram advertising.
• Your tutor - only if you joined via a tutor's referral link or entered their code at signup: we share your child's practice progress (scores, topics and activity - never answers, contact details or billing information) with that tutor, and this is shown to you at signup. You can unlink at any time from your account or by emailing us.

Some of these providers process data outside the UK; where they do, transfers are protected by appropriate safeguards such as the UK Addendum to EU Standard Contractual Clauses.

Account and learning data is kept while your account is active. If you cancel, we keep your data for up to 12 months in case you return, then delete it. Financial records (invoices, payment references) are kept for 7 years as required by tax law. Support tickets are kept for up to 24 months.

Under UK GDPR you have the right to access, correct, delete, restrict or object to our use of your personal data, and the right to data portability. Parents exercise these rights on behalf of their children. Email hello@kenttestprep.co.uk and we will respond within one month. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk.

The service is designed for children to use, but accounts are created and managed by parents or guardians. We collect the minimum needed to teach effectively, never show advertising to children, and never contact children directly. If you believe a child has given us personal data without parental consent, contact us and we will delete it promptly.

If we change this policy we will update the date above and, for significant changes, let you know in the app or by email before they take effect.