Last updated 19 October 2026
Privacy notice
What KeyStage knows about you
This part is for children. A grown-up can read it with you.
- Your first name (or a nickname), your school year, the picture you chose and which teacher you picked.
- What you and the teacher say and type in lessons. When the microphone is on, your voice is turned into words. We keep the words, not the sound of your voice.
- What you have learned, what you find tricky, your flashcards and your quiz answers.
- A few things you tell the teacher you like, such as “loves dinosaurs”, so lessons can be more fun.
Your teacher is a computer program (an AI), not a real person. It will never ask where you live, which school you go to, your surname, your phone number or for photos. If you tell it by accident, that's OK: it won't repeat it.
Your grown-up can see your lessons. They can read what you and the teacher said, and how you are getting on. If you say something that makes the teacher worried about you, it will tell your grown-up so they can help.
We never show you adverts and we never sell what we know about you. Your grown-up can ask us to delete it all at any time.
If something is worrying you, talk to a grown-up you trust. You can also call Childline free on 0800 1111, any time.
1. Who we are
KeyStage (keystageapp.co.uk) is provided by Renacer Enterprises Ltd, a company registered in England and Wales with company number [company number], whose registered office is at [registered office address]. We are the “controller” of the personal information described here, which means we decide how it is used and are responsible for looking after it. We are registered with the Information Commissioner's Office (ICO) under number [ICO registration number].
For anything about privacy, email hello@keystageapp.co.uk or write to us at [postal address].
We have written this notice with the UK GDPR, the Data Protection Act 2018 and the ICO's Age Appropriate Design Code (the “Children's Code”) in mind. Children's best interests come first in how we design KeyStage.
2. Who holds the account
Accounts are held by adults (18 or over) who are a parent or guardian, or otherwise have parental responsibility, for the children who use them. When you create an account you confirm this and agree to this notice and our terms. You decide whether your child uses KeyStage, you set them up, and you can see, change or delete their information. Children do not sign up themselves and we do not ask them for consent.
Older children who understand their rights can also ask us about their own information (see section 8). We will usually involve the parent who holds the account, and we will take the child's wishes into account.
3. What we collect
About you (the parent)
- Account details: your name and email address, held by our sign-in provider, Clerk. We keep your email to send you the emails described below.
- Grown-ups' PIN: stored only as a one-way scrambled code (a hash), so we can't read it.
- Settings: whether you want safeguarding alerts and the weekly digest, and each child's settings (videos, voice, daily goal, hands-free microphone).
- Your agreement: when you agreed to our terms and this notice, and which version.
- Billing: your plan, its status and renewal date, and the reference numbers Stripe gives us. Stripe holds your card details; we never see or store them.
About your children
- Profile: a first name or nickname, school year, an avatar (an emoji) and the AI teacher they chose. We never ask for surnames, dates of birth, schools, addresses or photos.
- “What are they doing at school?”: anything you choose to type about their current school topics.
- Lesson transcripts: what the teacher said and what your child typed or said (transcribed into text), with the whiteboard, pictures and questions shown.
- Learning records: progress through curriculum objectives, lesson summaries, flashcards and review history, tests and their answers, and how they rated each lesson.
- Learning profile: how your child seems to learn best (pace, which explanations helped, confidence, reading level, whether they prefer talking or typing) and interests they mention. The teacher also keeps a short list of non-identifying likes (for example “loves football”) and private teaching notes after each turn.
- Safeguarding notes: if the teacher is worried by something your child says, a short note and the words that caused the concern (see our safeguarding policy).
Voice
When the microphone is on, your child's browser records their answer and sends it to OpenAI to be turned into text. We keep the text as part of the transcript. We do not store recordings of your child's voice. The microphone only listens during a lesson or review, after your child (or the hands-free setting you chose) switches it on, and the screen shows when it is listening.
Technical information
Like any website, our hosting provider handles technical information such as IP addresses, browser type and request logs to deliver the service and keep it secure. We use two essential cookies and no tracking or advertising cookies (see our cookies page). We do not collect precise location.
Things we don't ask for
We don't ask for sensitive information such as health, religion or ethnicity. Children sometimes mention things like this in conversation; if they do, it will be in the transcript, which you can read and delete. The AI teacher is instructed never to ask for personal details and not to repeat them if a child shares them.
4. Why we use it, and our lawful bases
| What we do | Lawful basis (UK GDPR Article 6) |
|---|---|
| Run your account and the service you signed up for: lessons, voice, revision, flashcards, tests, progress and reports. | Contract with you. For your children's information: our legitimate interest, shared with you, in providing the learning you asked us to provide for them. |
| Tailor lessons to each child using their learning profile and past lessons. | Contract with you, and legitimate interests. This is the core of the service; you can view the profile and delete the child's data. |
| Spot and tell you about safeguarding concerns. | Legitimate interests (protecting children), and vital interests in an emergency. |
| Send safeguarding alerts and the weekly digest by email (both can be switched off in the grown-ups' area). | Contract with you, and legitimate interests. |
| Take payments and keep financial records. | Contract with you, and legal obligation (tax and accounting records). |
| Keep the service secure, prevent misuse and apply fair-use limits. | Legitimate interests. |
| Understand how the service is used (for example how long lessons take and what they cost us to run) so we can improve it and keep it affordable. | Legitimate interests. We use this in summary form, not to target individuals. |
| Keep a record of your agreement to our terms and this notice. | Legal obligation (accountability), and legitimate interests. |
We do not send marketing emails, show adverts, or sell or share personal information for advertising. Where we rely on legitimate interests we have weighed them against your and your child's interests; you can ask us for details.
Automated processing and profiling
The AI teacher adapts each lesson to your child and marks answers automatically, and a learning profile is built from their lessons. This is profiling in the legal sense, but it is used only to teach your child and does not produce decisions with legal or similarly significant effects. Nothing is used to target content or adverts. You can see the profile, transcripts and marks in the grown-ups' area, and contact us if you think something is wrong.
5. Who we share it with
We use the service providers below to run KeyStage. They act on our instructions under written contracts (data processing terms), may only use the information to provide their service to us, and must keep it secure. Stripe also acts as an independent controller for some purposes, such as fraud prevention and meeting its own legal obligations, under its own privacy policy.
| Provider | What for | What they receive | Where |
|---|---|---|---|
| Clerk | Parent sign-in and accounts | Your name, email address and sign-in details | United States |
| Anthropic (Claude) | The AI that writes each teaching turn, reviews lessons, updates the learning profile, and writes and marks tests | Lesson text: what the teacher said and what your child typed or said (as text), their first name, school year, learning profile and remembered likes | United States |
| OpenAI | Turning your child's speech into text, and the teacher's voice | Short audio clips of your child's answers while the microphone is on (transcribed, not kept by us as audio); the teacher's words to be spoken | United States |
| ElevenLabs | An alternative teacher voice, only when we switch it on | The teacher's words to be spoken (not your child's voice) | United States |
| Resend | Sending safeguarding alerts and the weekly digest to you | Your email address, your child's first name and the content of the email | United States |
| Stripe | Taking payments and managing subscriptions | Your name, email, billing details and payment card (entered directly with Stripe; card details never reach our servers) | United States and Ireland |
| Vercel | Hosting the app | Everything the app handles passes through it; also technical data such as IP addresses in short-lived logs | Region to be confirmed (EU/UK preferred); United States company |
| Neon (or a similar hosted Postgres) | Our database | Everything we store, listed above | Region to be confirmed (EU/UK preferred); United States company |
| Sentry | Error reports, when switched on, so we can fix faults | Technical details of the error; we don't send lesson content on purpose, but an error report can include part of a request | United States |
Our AI providers (Anthropic and OpenAI) receive lesson content through their business APIs. Under their business terms they do not use it to train their models, and they keep it only for a limited time for safety and abuse monitoring. We do not use children's data to train AI models.
Pictures and videos
Photos in lessons come from Wikipedia and Wikimedia Commons, and optional short videos come from YouTube (searched with strict SafeSearch and played through YouTube's privacy-enhanced mode). When a picture or video is shown, your child's browser loads it directly from Wikimedia or YouTube, so those services receive the device's IP address and browser details, as with any website. We don't send them your child's name or anything they said. You can turn videos off for each child.
Other sharing
We may share information if the law requires it, or where we believe it is necessary to protect a child from serious harm (for example, with the police or children's services). If Renacer Enterprises Ltd were ever sold or merged, the information would transfer only under the same protections, and we would tell you first.
6. International transfers
Several of our providers are based in, or may process data in, the United States. Where personal information is transferred outside the UK, we make sure it is protected as UK law requires: by using providers certified under the UK Extension to the EU-US Data Privacy Framework (the “UK-US data bridge”), or by putting in place the UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses, together with the providers' security measures. You can ask us for more detail about the safeguards for a particular provider.
7. How long we keep it
- While your account exists, we keep your children's profiles, lessons, transcripts, progress, flashcards, tests and safeguarding notes so they can revise and you can see their learning. Lessons left unfinished for a day are tidied away automatically.
- You can delete a learner at any time in the grown-ups' area; their information is removed straight away.
- If you delete your account (Grown-ups → Account), everything is removed from our live database straight away and is gone from our backups within 30 days. Any subscription is cancelled.
- Payment records are kept by Stripe and in our accounts for as long as tax law requires (usually six years).
- Emails we have sent, and technical logs, are kept by our providers for limited periods under their own retention settings.
- Our AI providers keep lesson content they receive only for a limited period (typically up to 30 days) for safety monitoring, then delete it.
8. Your rights
You (and, where they are old enough to understand, your child) have the right to:
- Access the information we hold. You can download it any time from Grown-ups → Account → Download my data.
- Correct information that is wrong (most of it you can change yourself in the grown-ups' area).
- Delete information: delete a learner, or your whole account, yourself; or ask us.
- Restrict or object to how we use information, including anything we do under legitimate interests.
- Data portability: the download is a standard JSON file you can take elsewhere.
- Withdraw your agreement at any time by deleting your account.
- Not be subject to solely automated decisions with legal or similarly significant effects (we don't make any).
To use any of these rights, email hello@keystageapp.co.uk. We may need to check it's really you. We will reply within one month (we can extend this by two months for complex requests, and will tell you if we do). It is free.
9. Keeping it safe
- Everything is sent over encrypted connections (HTTPS), and our providers encrypt stored data.
- A grown-ups' PIN keeps reports, transcripts and settings away from children on a shared device.
- Only the parent who holds the account can see their children's information. Our own access is limited to what we need to run and support the service.
- Pictures the AI draws are cleaned before display and can never run code on your device.
If something goes wrong that puts your information at risk, we will tell you and the ICO where the law requires it.
10. Complaints
Please tell us first if you are unhappy with how we have handled information, at hello@keystageapp.co.uk, and we will try to put it right. You also have the right to complain to the Information Commissioner's Office: online at ico.org.uk/make-a-complaint, by phone on 0303 123 1113, or by post to Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF.
11. Changes to this notice
If we change this notice in a way that matters, we will update the date at the top and ask you to read and agree to the new version the next time you open KeyStage. Small corrections may be made without asking again.
12. Contact us
Renacer Enterprises Ltd, [postal address]. Email hello@keystageapp.co.uk. See also our contact page.