Privacy & your child's data
Version 2026-08-17
The short version. We store your child's first name, their year group, and how they did on practice questions. Nothing else. Children have no email address here, and we never ask for a surname, date of birth, address, photograph or school name. We don't show adverts and we don't sell anything to anyone.
Who we are
Brain Gym Lab, contactable at braingymlabs@gmail.com. We are the data controller for the information described here.
What we collect
From the adult who signs up:
- Your name and email address
- Your password, stored encrypted — we cannot see it
- If you subscribe later: payment is handled by Stripe. We never see or store your card details.
For each child:
- A first name — please do not enter a surname
- Their school year group
- A username you choose, and a password
- Their answers to practice questions, and the scores that follow
Children are not asked for an email address and cannot receive email from us. There is no chat, no messaging, no way for one user to contact another, and no way for a child to be contacted through the service.
Why, and on what basis
- To run the service you asked for — showing questions, marking them, keeping progress. This is necessary to provide the service.
- To send a weekly progress email to the adult on the account. You can turn this off at any time from the link in the email.
- Practice answers may be sent to an AI provider to mark worded answers and to turn a photographed worksheet into questions. Questions and answers are sent — a child's name is not.
A child's account is created by their parent or guardian, who gives consent on their behalf. A tutor who adds a student must have that parent's permission first.
Who can see a child's data
- The parent or guardian on the account
- A tutor the parent has been linked to, for the students they teach
- Us, only when needed to fix a fault or answer a support question
We do not sell data, share it with advertisers, or use it to build profiles for marketing.
Where it is kept, and for how long
Data is held by our hosting and database providers on servers in the UK or EU. We keep an account's data while the account is open. Ask us to delete it and we will, within 30 days — this removes the account and its practice history permanently.
Your rights
You can ask for a copy of the data we hold, ask us to correct it, or ask us to delete it. Email braingymlabs@gmail.com and we will respond within one month. If you are unhappy with how we handle it, you can complain to the Information Commissioner's Office at ico.org.uk.
If something goes wrong
If data is lost or exposed, we will tell the ICO within 72 hours where required, and tell you directly if it affects you or your child. Passwords are stored encrypted, so a breach would not expose them.
Changes
If we change this notice in a way that matters, we will tell the adult on the account by email before it takes effect.
‹ Back to sign up