Privacy Policy

1. Who We Are

BM Tutors is an online educational platform for UK primary school children. We are committed to protecting the privacy of children and families who use our service, in compliance with UK GDPR and the Children's Code.

2. What Data We Collect

We collect only what is necessary to provide the service:

• Parent/guardian email address and name (for account creation)
• Child first name and year group (for personalisation — no surnames required)
• Practice session results and scores (to track progress)
• Chat messages with Dr. BM (to provide responses and improve the service)

3. How We Use Your Data

We use your data solely to provide and improve BM Tutors. We do not sell data to third parties, use data for advertising, or share it outside our core service providers.

4. Children's Privacy

All child profiles are created and managed by a parent or guardian. We do not collect children's email addresses. Children's data is stored securely and used only for educational progress tracking within the platform.

5. Data Storage and Security

Your data is stored on Supabase infrastructure (EU region) with row-level security enabled. All connections are encrypted via HTTPS. We do not store payment card details — payments are handled by Stripe.

6. Your Rights

Under UK GDPR you have the right to:

• Access the data we hold about you
• Correct inaccurate data
• Request deletion of your account and all associated data
• Object to processing

To exercise any of these rights, please contact us.

7. Cookies

We use only essential cookies required for authentication. We do not use advertising or tracking cookies.

8. Changes to This Policy

We may update this policy from time to time. We will notify registered users of significant changes by email.