🔒 Privacy Policy
Last updated: January 2026
Our Commitment: Learnillion is committed to protecting the privacy of our users, especially children. We do not sell personal information and we collect only what's necessary to provide our educational service.
1. Overview
This Privacy Policy explains how Learnillion ("we", "us", or "our") collects, uses, and protects your personal information when you use our website and services. We comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
By using our Service, you consent to the collection and use of information in accordance with this policy.
2. Information We Collect
2.1 Account Information
When you create an account, we collect:
- Name and email address
- Account type (parent or teacher)
- Country (for pricing purposes)
- Password (stored securely using encryption)
2.2 Child/Student Information
When you add children or students to your account:
- Child's first name (we don't require surnames)
- Year group / age range
- For student accounts: username and class assignment
2.3 Learning Data
As children use our Service, we collect:
- Activities completed and scores achieved
- Time spent on activities
- Answers to questions (for progress tracking)
2.4 Payment Information
Payment processing is handled by Stripe. We do not store your full credit card details. We retain only a reference to your Stripe customer account for subscription management.
2.5 Technical Information
We automatically collect:
- IP address and browser type
- Device information
- Pages visited and features used
- Cookies and similar technologies (see our Cookie Policy)
3. How We Use Information
We use collected information to:
| Purpose | Legal Basis |
|---|---|
| Provide and maintain our Service | Contract performance |
| Process payments and manage subscriptions | Contract performance |
| Track learning progress | Contract performance |
| Send service-related communications | Contract performance |
| Improve our educational content | Legitimate interest |
| Send marketing (with consent) | Consent |
| Prevent fraud and ensure security | Legitimate interest |
4. Information Sharing
We do not sell your personal information. We share information only:
- With service providers: Such as our payment processor (Stripe) and hosting provider, who process data on our behalf.
- For legal reasons: If required by law or to protect our rights.
- With your consent: For any other purpose with your explicit consent.
5. Children's Privacy
We take children's privacy extremely seriously. We comply with the Children's Online Privacy Protection principles and the UK Age Appropriate Design Code.
5.1 What We Collect from Children
For children using our Service, we collect only:
- First name (for personalization)
- Year group (to show appropriate content)
- Learning progress data
5.2 What We Don't Collect
- Children's email addresses or contact information
- Children's full names or surnames
- Photos or images of children
- Location data from children
5.3 Parental Controls
Parents and teachers have full control over child accounts, including the ability to:
- View all data collected about their child
- Delete child profiles at any time
- Control what activities children can access
6. Data Security
We implement appropriate technical and organizational measures to protect your data:
- All data is encrypted in transit using TLS/SSL
- Passwords are hashed using industry-standard algorithms
- Access to personal data is restricted to authorized personnel
- Regular security audits and monitoring
- Secure data centers with physical access controls
7. Data Retention
We retain your data for as long as your account is active. After account deletion:
- Account data is deleted within 30 days
- Learning progress data is anonymized or deleted
- Payment records are retained as required by law (typically 7 years)
8. Your Rights
Under UK GDPR, you have the right to:
- Access: Request a copy of your personal data
- Rectification: Correct inaccurate data
- Erasure: Request deletion of your data ("right to be forgotten")
- Restriction: Limit how we process your data
- Portability: Receive your data in a portable format
- Object: Object to processing based on legitimate interests
- Withdraw consent: Where processing is based on consent
To exercise these rights, please contact us at support@learnillion.com. We will respond within 30 days.
9. International Transfers
Your data is primarily stored and processed in the UK/EEA. Where we use service providers outside these regions, we ensure appropriate safeguards are in place (such as Standard Contractual Clauses) to protect your data.
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes by email or through a notice on our Service. Your continued use after changes indicates acceptance of the updated policy.
11. Contact Us
For privacy-related questions or to exercise your rights, contact us:
- Email: support@learnillion.com
- Contact Form: Contact Page