Privacy Policy
Last updated: 14 June 2026
ExamNauts (“we”, “us”) provides online entrance‑exam practice for children. We take privacy — especially children’s privacy — seriously, and we deliberately collect as little personal information as possible. This policy explains what we collect, why, and your rights under UK data protection law (UK GDPR and the Data Protection Act 2018).
The short version
We store only: a parent/guardian’s email address, and the child’s first name and age band, plus the child’s practice activity (questions attempted, scores, time spent). We do not collect a child’s surname, address, school, or photographs, and we do not build advertising profiles of children.
Who the account belongs to
Accounts are created and controlled by a parent or guardian (18+). The parent provides their own email to sign in (we use a one‑time code — no passwords) and chooses a first name, avatar and age for their child.
What we collect and why
- Parent email — to create the account, send sign‑in codes, and (if you opt in) occasional updates. Legal basis: performance of our contract with you.
- Child first name & age band — to personalise the experience and pitch questions appropriately.
- Practice data — questions attempted, accuracy, time and streaks, to show progress and adapt practice. Legal basis: contract / legitimate interests in providing and improving the service.
- Payment — handled by our payment provider (GoCardless). We never see or store your bank details.
- Technical data — a single login cookie, and privacy‑friendly, cookieless analytics. We use advertising conversion measurement on our own marketing pages, but we do not run behavioural advertising aimed at children.
Children’s data
We have designed ExamNauts in line with the ICO’s Age Appropriate Design Code (the “Children’s Code”): data minimisation by default, no behavioural profiling of children, and parental control of the account. A parent can view, export or delete their child’s data at any time from Settings, or by emailing us.
Service providers we use
- Postmark — sending sign‑in codes and emails.
- GoCardless — processing payments.
- Pirsch — privacy‑friendly, cookieless website analytics.
- Google Ads — conversion measurement on marketing pages.
- Cloud hosting — running the service securely.
Keeping and protecting data
We keep account data for as long as your account is active, and delete it on request or a reasonable period after an account is closed. Data is stored securely; sign‑in uses one‑time codes rather than passwords.
Your rights
You can access, correct, export or delete your data, and object to or restrict certain processing. Use the export/reset tools in Settings, or email us. You also have the right to complain to the Information Commissioner’s Office (ico.org.uk).
Contact
Questions or requests: hello@examnauts.com.