1. Who We Are
NeurofiED is operated by NeurofiED Ltd, a private limited company registered in England and Wales with company number 16559304. Our registered office is 71-75 Shelton Street, Covent Garden, London, United Kingdom, WC2H 9JQ.
For UK data protection law, NeurofiED Ltd is the controller for personal data processed through our consumer web platform, website, and NeurofiED Lite app, except where we act as a processor for an educator, tutor, school, or other organisation.
You can contact us about privacy or data rights at contact@neurofied.co.uk.
2. What This Policy Covers
This policy applies to:
- the public website at www.neurofied.co.uk;
- the NeurofiED web learning platform, including lessons, tests, progress tracking, educator tools, and AI study support;
- the NeurofiED Lite iOS and Android app, including recurring daily, weekly, and monthly tests;
- customer support, transactional emails, and account communications.
3. Children And Parents
NeurofiED is designed for learners preparing for UK 11+ and grammar school entrance exams. Many learners are children, so we treat the best interests of the child as a core design and privacy consideration.
- Parents or guardians should create, approve, or supervise accounts for children under 13.
- Where an educator creates or manages learner access, that educator is responsible for providing required notices and permissions to families.
- We do not sell children's data, profile children for advertising, or use behavioural advertising in the platform or app.
- Anonymous cohort rankings in NeurofiED Lite do not show names, email addresses, user IDs, school names, or profile details.
4. Personal Data We Collect
| Category | Examples | Typical lawful basis |
|---|---|---|
| Account | Name, email address, Firebase user ID, role, login status, password authentication metadata. | Contract; legitimate interests in account security. |
| Parent, student, and educator profile | Year group, target exam year, school or organisation details, invited students, subject preferences, setup answers. | Contract; consent where required for children. |
| Learning activity | Lessons opened, topics and modules completed, progress, rewards, streaks, test attempts, answers, scores, completion times, weak-topic signals. | Contract; legitimate interests in improving learning quality. |
| NeurofiED Lite app data | Recurring-test history, daily streaks, app platform, app version, local cached tests and pending submissions on your device. | Contract; legitimate interests in app reliability. |
| Subscriptions and billing | Stripe customer and subscription IDs for web subscriptions; RevenueCat entitlement records, product IDs, store, status, and expiry for Mobile Lite. | Contract; legal obligations for accounting and tax. |
| AI study support | Student questions, AI responses, lesson context, safety metadata, and quality-monitoring records. | Contract; legitimate interests in safety and quality. |
| Notifications | Expo push token, platform, app version, token status, notification delivery metadata. | Consent; legitimate interests in service messaging. |
| Support and communications | Emails sent to us, support requests, waitlist or interest forms, account notices. | Legitimate interests; contract where support relates to an account. |
| Technical and security | IP address, user agent, device and browser data, session cookies, request logs, CSP reports, admin audit logs. | Legitimate interests in security, fraud prevention, and platform operation. |
We do not intentionally collect special-category data such as health, religion, political opinions, biometrics, or sexuality. Please avoid entering sensitive personal information into free-text fields or AI study-support prompts.
5. How We Use Personal Data
- To create accounts, authenticate users, and keep accounts secure.
- To deliver lessons, tests, scoring, feedback, progress tracking, and educator dashboards.
- To provide NeurofiED Lite recurring tests, result history, streaks, lightweight insights, and optional push notifications.
- To manage web subscriptions through Stripe and app subscription entitlements through RevenueCat and the relevant app store.
- To provide AI study support and monitor it for safety, quality, abuse prevention, and educational relevance.
- To send essential account, billing, security, service, and support communications.
- To maintain, debug, secure, and improve the website, platform, and app.
6. NeurofiED Lite App
NeurofiED Lite uses the same NeurofiED account identity as the web platform. The app is a lighter product focused on recurring tests, results, streaks, notifications, and upgrade routes into the full web platform.
The app may store limited data locally on your device so it can show cached tests or pending submissions. Removing the app may remove that local cache, but account-level records already synced to NeurofiED may remain until you delete your account or ask us to erase them.
If you opt into push notifications, we store a push token so we can send test-ready or test-expiry reminders. You can disable notifications in your device settings or in the app where supported.
7. AI And Automated Processing
The web platform includes AI study-support features, and NeurofiED may use AI internally to help generate or check educational test content. AI output can be wrong, incomplete, or unsuitable, so it should be treated as study support rather than a final authority.
We do not use AI study-support prompts to make decisions with legal or similarly significant effects about learners. We do not permit third party AI providers to use learner prompts for model training where our supplier terms give us that control.
8. Who We Share Data With
We use trusted service providers to operate NeurofiED. They process data only as needed to provide their services to us, or as independent controllers where the law or their platform terms require it.
- Google Cloud and Firebase for hosting data, authentication, storage, logging, and cloud services.
- Google Gemini API for AI study-support responses and educational content generation.
- Vercel for hosting, build, and edge delivery.
- Stripe for web checkout, billing, subscriptions, and fraud prevention.
- RevenueCat for Mobile Lite entitlement management and app-store subscription event sync.
- Apple App Store and Google Play where you buy, cancel, or request refunds for Mobile Lite subscriptions.
- Expo and push-notification infrastructure for optional mobile notifications.
- Resend for transactional email delivery.
We may also share data if required by law, to protect users or the service, to respond to lawful requests, or as part of a business transfer where appropriate safeguards apply.
9. International Transfers
Some providers may process data outside the UK. Where that happens, we rely on safeguards such as UK adequacy regulations, the UK Extension to the EU-US Data Privacy Framework, the UK International Data Transfer Agreement, the UK Addendum to EU Standard Contractual Clauses, or equivalent contractual protections.
10. Retention
| Data | Typical retention |
|---|---|
| Account, profile, learning progress, and synced test history | For the life of the account, then deleted or anonymised within a reasonable period after account deletion unless we must keep it for legal reasons. |
| AI study-support prompts and replies | Normally up to 90 days for safety and quality monitoring, unless a longer period is needed to investigate misuse or a support issue. |
| Push tokens | Until you opt out, delete the app account, the token becomes inactive, or we no longer need it. |
| Billing, tax, and accounting records | Normally up to 7 years where required for tax, accounting, disputes, and fraud prevention. |
| Support emails | Normally up to 3 years after the support matter closes, unless needed for legal or safety reasons. |
| Server logs and security telemetry | Normally up to 90 days, with longer retention for investigated security events. |
| Backups | Deleted as backup cycles rotate. |
11. Your Rights
Depending on the circumstances, you may have rights to access, correct, erase, restrict, object to processing of, or receive a portable copy of your personal data. Where processing is based on consent, you can withdraw consent at any time.
To exercise your rights, email contact@neurofied.co.uk. We may need to verify your identity before responding. We aim to respond within one month, unless the request is complex or the law allows a longer period.
To delete your NeurofiED or NeurofiED Lite account, use the in-app account deletion option or visit Delete Your Account.
You also have the right to complain to the UK Information Commissioner's Office at ico.org.uk/make-a-complaint.
12. Cookies, Local Storage, And Similar Technologies
The web platform uses necessary cookies, including session cookies, to keep users signed in and protect private areas. Stripe may set cookies during checkout for payment security and fraud prevention. The mobile app uses device storage for authentication persistence, cached tests, cached results, and pending submissions.
We do not use advertising cookies in the learning platform or app. If we introduce optional analytics or marketing cookies, we will request consent where required.
13. Security
We use technical and organisational measures designed to protect personal data, including encrypted transport, managed cloud security, access controls, role-based administration, audit logging, and restricted access to production systems. No internet service can be guaranteed completely secure, but we work to reduce risk and respond quickly to issues.
14. Educator Accounts
Where an educator, tutor, school, or organisation provides access to NeurofiED for learners, that organisation may be the controller for learner data and NeurofiED Ltd may act as its processor. In that case, the organisation's agreement with us and its own privacy notices may also apply.
15. Changes To This Policy
We may update this policy as NeurofiED changes or legal requirements develop. We will update the effective date above and, where changes are material, take reasonable steps to notify account holders.
16. Contact
Privacy, legal, and support contact: contact@neurofied.co.uk.
You can also read our Terms of Service.