Privacy Policy

Last updated: [[ DATE ]]

Plain-English summary: MindBlaze is a learning app for children, paid for and managed by a parent or guardian. We collect as little as possible: a parent's email, and a child's first name and year group. We never sell data, never show adverts to children, and a parent can delete everything at any time.

1. Who we are

MindBlaze is operated by [[ COMPANY NAME LTD ]], a company registered in England & Wales (company number [[ NUMBER ]]), registered address [[ ADDRESS ]]. We are the "data controller" for the information described here.

For any privacy question, or to exercise any of your rights, contact us at [[ privacy@mindblaze.co.uk ]].

2. Our approach to children's data

MindBlaze is designed to be used by children, but accounts are created and controlled by a parent or guardian aged 18 or over. We follow the UK Information Commissioner's Office (ICO) Age Appropriate Design Code (the "Children's Code"). In practice this means:

We collect the minimum data needed to run the service.
The child's profile holds only a first name and year group — no surname, no date of birth, no contact details.
We never use a child's data for marketing, profiling for advertising, or any purpose beyond running the learning app.
There is no advertising shown to children and no third-party ad tracking in the child app.
Settings default to the most privacy-protective option.

3. What we collect

From the parent (account holder)

Email address and an encrypted password (to create and secure the account).
Subscription and billing status (e.g. trialing, active, cancelled). We never see or store your full card number — card payments are handled entirely by Stripe.

About the child

First name (or a nickname you choose) and year group.
Learning progress — which activities have been played, scores, and skill levels — used to personalise practice and show you progress.

Technical data

Basic technical information needed to run and fix the app (e.g. error reports). Our error-monitoring tool is configured to mask on-screen text and inputs so it does not capture personal content.

4. Why we use it, and our legal basis

To provide the service (run the app, save progress, show the parent dashboard) — legal basis: performance of our contract with you.
To take payment after the free trial — legal basis: contract.
To keep the service secure and fix faults — legal basis: our legitimate interests in a safe, working product.
To send you service emails (e.g. your welcome link, trial reminders, receipts) — legal basis: contract. Any optional marketing emails are sent only with your consent and you can opt out at any time.

5. Who we share it with

We do not sell your data. We share data only with the service providers ("processors") that make MindBlaze work, each under a data-processing agreement:

Supabase — secure database and login.
Netlify — website and app hosting.
Stripe — payment processing (handles card details directly; we never receive them).
Sentry — error monitoring, configured to mask personal content.
[[ EMAIL TOOL, e.g. Mailchimp ]] — sending service and (if you opt in) marketing emails.
Google Analytics — anonymous usage statistics on our marketing website only (not inside the child app), if enabled.

Some providers may process data outside the UK; where they do, appropriate safeguards (such as UK/EU-approved data transfer terms) are in place.

6. How long we keep it

We keep account and learning data while your account is active. If you cancel and delete your account, we delete the associated personal data within [[ 30 ]] days, except where we must keep limited records (e.g. payment records) to meet legal obligations.

7. Your rights

You can ask us to: access the data we hold, correct it, delete it, restrict or object to its use, or provide a copy. You can delete your child's data or close the account at any time. To make a request, email [[ privacy@mindblaze.co.uk ]]. You also have the right to complain to the ICO (ico.org.uk).

8. Security

Passwords are encrypted, access to family data is restricted so one account can never see another's, and payment details never touch our systems. No service can promise perfect security, but we take reasonable measures to protect your information.

9. Changes

If we change this policy we will update the date above and, for significant changes, notify you by email.

10. Contact

[[ COMPANY NAME LTD ]] · [[ privacy@mindblaze.co.uk ]] · [[ ADDRESS ]]