Draft, pending legal review. This is a plain-English summary of how we intend to handle personal data. It has not yet been reviewed by our lawyers or our data protection officer, and it is not yet the binding privacy notice. That will be published, in full, before anyone can create an account.
Privacy
This product exists to hold a young person’s record of what they have done, which is genuinely personal information. We would rather tell you plainly what happens to it than bury it in twelve pages nobody reads.
What we collect
- Account details. A name, an email address, a year group and an age band. For under-13s the account is held by a parent.
- The achievements themselves. What your child adds: titles, dates, descriptions, a line of reflection, and any evidence they upload such as photographs, certificates and documents.
- Verification records. Who was asked, their name, relationship and email address, what they wrote, and when. Verifiers are adults and are told clearly what happens to their statement.
- The minimum technical data needed to keep the service running securely and to stop abuse.
We do not ask for anything we do not need. There is no interest profiling, no advertising identifier and no tracking across other sites.
Who can see it
By default, only the young person and, where there is a parent account, their parent. A young person’s story is private until they deliberately share part of it. An adult asked to confirm something sees exactly that one achievement and nothing else. Schools do not get access — this is not sold to schools and no school administrator has a view into your child’s record.
Evidence files are stored privately and served through short-lived links, so a file cannot be found by anyone guessing at an address.
Third parties
Deliberately very few, and none of them advertising. We use a hosting provider, a database provider, an email provider to deliver verification requests, and a payment provider for memberships. That is the list, and we will name each of them in the full notice. There is no analytics vendor and no session recording on any screen a child can see — not because it is forbidden in every case, but because we do not think it belongs here.
Getting it back, and getting rid of it
You can export everything — a readable PDF and the underlying data — from inside the product, on every plan including the free one, without asking us and without paying. You can delete the account from inside the product too.
One honest exception: when a verification is withdrawn we keep a record that it existed and was withdrawn, rather than erasing it. A record that can be silently rewritten would be worthless as evidence, which is the whole point of the product. Everything else goes.
If you register interest on this site
We ask for your email address, which membership you would choose, and optionally your child’s year group. We use it to email you when we open and to work out whether we have the pricing right. We do not pass it to anyone, and you can ask us to remove it at any time. Please use a parent’s email address, not a child’s.
See also our safeguarding page, which covers the design decisions behind all of this.