Privacy
Privacy policy
Last updated: 2026-05-28
Working draft
This draft is published in good faith and reflects how Wizzmo currently handles data. The final wording is under review by UK counsel ahead of public launch. Substantive commitments below will not weaken.Who we are
Wizzmo is operated by WiseBees Academy Ltd, a company registered in England and Wales. WiseBees Academy Ltd is the data controller for the personal data described here, except where a school has enrolled its pupils — in that case the school is the controller and we act as its processor under a written agreement. You can contact our data team at
[PRE-LAUNCH: company number and registered office address to be inserted here before public launch — see doc/release-itp.md]
[email protected].[PRE-LAUNCH: company number and registered office address to be inserted here before public launch — see doc/release-itp.md]
Why we use your data, and on what legal basis
- Running the lessons — profiles, progress, mastery, resume state. Basis: performance of a contract(UK GDPR Art. 6(1)(b)) with the adult who set up the account, or the school's instructions where a school enrolled the pupil.
- Keeping accounts secure — sign-in, PIN hashes, rate limiting, session cookies. Basis: legitimate interests(Art. 6(1)(f)) in preventing unauthorised access to children's accounts.
- Billing — subscription status and invoices, via Stripe. Basis: performance of a contract, and legal obligation (Art. 6(1)(c)) for tax records.
- Usage measurement — which screens are opened, which lessons finish. Basis: consent (Art. 6(1)(a)), asked for separately and withdrawable at any time; see the cookies section below. Nothing is measured until an adult agrees.
- Safeguarding — acting on a disclosure a child makes through the app. Basis: legitimate interests and, for any special-category data that arrives in a disclosure, substantial public interest — safeguarding of children (Art. 9(2)(g), DPA 2018 Sch. 1 Pt. 2 para. 18).
What we collect
For parents and teachers: name, email, billing details (via Stripe — we never see your card), and the children you add to your account.
For children: a chosen display name, year group, selected subjects, an optional sign-in PIN, and per-quest progress (answers, hints requested, mastery stars).
We do not collect a child's real name, school name, or precise location unless a school admin enters those for roster management.
What we never do
- Sell or rent personal data to anyone.
- Use a child's data to train any third-party AI model.
- Show third-party advertising to children.
- Run public leaderboards that name children.
- Share a child's data with another child's parents.
How AI is used
Wizzmo's curriculum content (lessons, answer keys) comes from Oak National Academy. An LLM generates Socratic hints and tone-matched encouragement; it never grades a child or invents an answer. No child data is used for model training by any provider named here.
What is sent, and to whom. When a child types a question to Bea, that question — together with a snapshot of anything they have handwritten on the board — is sent to OpenAI (GPT-4o) so a hint can be written. If a child speaks to Bea, their recorded voice is transcribed: normally by our own self-hosted service, and by OpenAI (Whisper) only when that service is unavailable. Spoken replies are synthesised either by our self-hosted voice service or by OpenAI.
An adapter for Claude (by Anthropic) also exists in the codebase but is not currently reachable from the product; this policy previously named Anthropic as the LLM in use, which was inaccurate. If we switch providers we will update this section before doing so.
What is sent, and to whom. When a child types a question to Bea, that question — together with a snapshot of anything they have handwritten on the board — is sent to OpenAI (GPT-4o) so a hint can be written. If a child speaks to Bea, their recorded voice is transcribed: normally by our own self-hosted service, and by OpenAI (Whisper) only when that service is unavailable. Spoken replies are synthesised either by our self-hosted voice service or by OpenAI.
An adapter for Claude (by Anthropic) also exists in the codebase but is not currently reachable from the product; this policy previously named Anthropic as the LLM in use, which was inaccurate. If we switch providers we will update this section before doing so.
Your rights (UK GDPR)
You may request a copy of your data, correction of inaccurate data, deletion (subject to legal hold), or to withdraw consent for processing. Email
[email protected] and we respond within 30 days.Children's rights (Age-Appropriate Design Code)
Wizzmo is built to the UK ICO's Age-Appropriate Design Code. Children's accounts default to the highest privacy settings, profiling is off, and data use is described in age-appropriate language inside the app.
Cookies and on-device storage
Wizzmo does not use advertising cookies, tracking pixels, or any third-party analytics service. Two kinds of thing are stored on your device, and they are treated differently:
Strictly necessary— your child's profile, their lesson progress and spellbook, where they got to in an interrupted lesson, and the signed cookie that keeps them signed in. Without these there is no lesson to do, so they are set without asking, as the regulations allow.
Usage measurement — an anonymous record of which screens are opened and which lessons are finished, kept on the device and sent to our own servers. This is notstrictly necessary, so we ask first and it stays off until an adult says yes. Choosing “No thanks” changes nothing about how Wizzmo works.
The prompt is never shown on a child's screen. If nobody has answered it, measurement stays off.
Strictly necessary— your child's profile, their lesson progress and spellbook, where they got to in an interrupted lesson, and the signed cookie that keeps them signed in. Without these there is no lesson to do, so they are set without asking, as the regulations allow.
Usage measurement — an anonymous record of which screens are opened and which lessons are finished, kept on the device and sent to our own servers. This is notstrictly necessary, so we ask first and it stays off until an adult says yes. Choosing “No thanks” changes nothing about how Wizzmo works.
The prompt is never shown on a child's screen. If nobody has answered it, measurement stays off.
Retention
Active accounts: data kept while your subscription is active. If you cancel, we hold your child's progress for 90 days in case you return, then permanently delete it. That deletion runs automatically on a schedule — and only once the account has also been unused for the same period, so a family who comes back does not lose their work to a billing mistake. Backups are purged within an additional 30 days.
Separately, and regardless of whether you are still subscribed, these are deleted on a timer:
Separately, and regardless of whether you are still subscribed, these are deleted on a timer:
- Tutor conversations, including anything your child typed or said to the tutor — 90 days.
- Usage measurement records — 90 days.
- “Something's not right here” problem reports — 90 days.
- Sign-in security records (failed-PIN counters) — 30 days.
Sub-processors and international transfers
We use the following processors to run Wizzmo: Stripe (billing), OpenAI (AI hints, speech-to-text and speech synthesis), Resend (email), and Railway (hosting and database). Each operates under a current data-processing agreement.
Email may alternatively be sent through an SMTP provider we configure directly rather than through Resend; where that is the case we will name the provider on request. Speech transcription and synthesis are performed by a voice service we host ourselves on Railway wherever possible, so that a child's recorded voice does not leave our own infrastructure.
Stripe and OpenAI are established in the United States. Personal data reaching them is transferred under the UK International Data Transfer Addendum to the EU Standard Contractual Clauses. You may ask us for a copy of the safeguards that apply to any specific transfer.
We do not use Clerk. It was previously named here in error: the product authenticates adults natively and children by PIN, and enabling Clerk would disable child sign-in entirely.
Email may alternatively be sent through an SMTP provider we configure directly rather than through Resend; where that is the case we will name the provider on request. Speech transcription and synthesis are performed by a voice service we host ourselves on Railway wherever possible, so that a child's recorded voice does not leave our own infrastructure.
Stripe and OpenAI are established in the United States. Personal data reaching them is transferred under the UK International Data Transfer Addendum to the EU Standard Contractual Clauses. You may ask us for a copy of the safeguards that apply to any specific transfer.
We do not use Clerk. It was previously named here in error: the product authenticates adults natively and children by PIN, and enabling Clerk would disable child sign-in entirely.
Complaints
If you are unhappy with how we have handled your personal data, please tell us first at
[email protected] so we can put it right. You also have the right to complain directly to the UK Information Commissioner's Office at any time — ico.org.uk/make-a-complaint, or 0303 123 1113. You do not have to raise it with us first.Changes to this policy
If we change anything material we'll email account holders and post a dated notice here. The current version is dated 2026-05-28.