Privacy policy
Last updated 15 October 2026
Oakling Primary Scholars is run by Oakling Academics, the data controller for the information described here (see Contact us). Families and schools trust us with children's learning, so we collect as little as we can and explain plainly what we do with it.
Privacy at a glance
- We collect only what the portal needs: no children's surnames, email addresses, photos or dates of birth.
- No adverts, no chat, no tracking cookies, no profiling, and we never sell data.
- Our app and database run in London, UK.
- Parents and teachers can delete a child's account, and everything in it, at any time.
A summary for children
We keep your name, your username, your school year, the avatar you pick and how you get on in practice, so you can see your progress and the grown-up who set up your account can help you. We keep your PIN locked up so nobody, not even us, can read it. We don't show you adverts, and only your grown-up (or your teacher, if your school set up your account) can see your answers.
Information we collect
| Type | What it includes |
|---|---|
| Parent accounts | Your email address and password, stored only as a one-way scrambled form (a hash) that can't be turned back into the password. If you use “Continue with Google”, we receive your Google account ID and email address instead, and never see your Google password. |
| Teacher accounts | Your name, email address, password (as a hash) or Google account ID, your school’s name, and the names and year groups of the classes you create. |
| Child accounts | The name, username, school year and 4-digit PIN (stored only as a hash) that a parent or teacher enters, and the avatar the child picks from a fixed set of emoji. |
| Practice | The questions shown, answers given, whether they were right, time taken, the stage reached in each subject, points, badges, practice streaks, and any subject a parent sets. |
| Security records | Password reset links (stored as a hash, expire after one hour), counts of failed sign-ins (so repeated wrong guesses can be blocked, with the internet address stored only as a keyed hash), and short-lived technical logs kept by our host, such as IP addresses and pages requested. |
| Messages | Anything you send us by email, and our replies. |
| Visit counts | Anonymous totals for our public pages only (home, plans, log in, parent and teacher sign-in, and this policy): page views, the website a visit came from, country and type of device. No cookies. |
We don't ask for children's surnames, email addresses, photos or dates of birth. Please use a first name or nickname for a child, and don't enter anything else about them.
How we use it, and our lawful basis
| Purpose | Lawful basis (UK GDPR) |
|---|---|
| Running accounts: sign-in, practice, progress reports, worksheets, class reports and password resets | Contract: we need it to provide the service the parent or school signed up for. |
| Keeping accounts secure and preventing misuse | Legitimate interests in protecting accounts and children's data. |
| Counting visits to our public pages, and overall usage totals | Legitimate interests in improving the site, using anonymous totals only. |
| Replying to your emails | Contract and legitimate interests. |
We don't send marketing emails, and we never use children's data for marketing or advertising. The only email we send is a password reset link, when a parent or teacher asks for one.
If your school uses Oakling Primary Scholars
When a teacher adds pupils to a class, the school decides what the portal is used for and is the data controller for those pupils' information; we handle it on the school's behalf and only to run the portal. Teachers see the pupils in their own classes, and a school's admin teacher sees reports for the whole school. Questions about a pupil's data are best sent to the school first.
If you send us a school enquiry
When you fill in the form on our schools page, we keep your name, work email, role, school, the number of pupils and your message, so we can reply and set up a trial. We need this to take steps you have asked for before a contract (a legitimate interest in answering you). We keep it while we are in touch with your school, and delete it if you ask us to. We email you a confirmation, and we never use these details for marketing.
Who we share it with
We never sell personal data. Inside the portal, a child's information is seen only by the parent or teacher who set up their account, and by the child when signed in. Leaderboards only compare children within the same family. We use these providers, each under a contract that only lets them use the data to provide their service to us:
| Provider | What for |
|---|---|
| Vercel | Website hosting, run from London, UK, and anonymous visit counts and page-speed measurements on public pages (no cookies). |
| Neon | Database hosting, in London, UK. |
| Resend | Sending password reset emails. |
| Only if you choose “Continue with Google”, and our email inbox, which receives messages you send us. |
We may also share information if the law requires it, or to protect a child's safety.
International transfers
Our app and database run in London. Some of our providers are based in the United States, so some data may be processed there. Where that happens, the transfer is protected by the UK's approved safeguards, such as the UK Extension to the EU–US Data Privacy Framework or the UK International Data Transfer Addendum.
Cookies
We use only cookies that are strictly needed for the portal to work, so we don't ask for cookie consent:
- A sign-in cookie that keeps you signed in. It lasts up to 30 days and is removed when you log out.
- A temporary cookie that protects “Continue with Google” sign-in. It lasts ten minutes.
We use no advertising, analytics or tracking cookies. To count visits to our public pages we use Vercel Web Analytics and Speed Insights. They set no cookies and build no profile of anyone: each visit is counted using a code that changes every day and can't identify you, and only the page address is sent. They are switched off on every page a child uses, including student sign-in, and on every signed-in parent, teacher and admin page.
How long we keep it
- Account and practice information is kept while the account is open.
- When a parent deletes a child from their dashboard, or a teacher removes a pupil or deletes a class, those children's accounts and all their practice records are deleted straight away.
- To close a parent or teacher account, email us and we'll delete it, and every child account it holds, within 30 days. Backups held by our database provider are overwritten within a further 30 days.
- Password reset links stop working after one hour.
Your rights
Under UK data protection law you have the right to:
- get a copy of your data;
- have it corrected if it's wrong, or deleted;
- object to, or ask us to restrict, how we use it;
- receive it in a portable format.
Parents and guardians can use these rights on a child's behalf. Email contact@oakling11plus.co.uk and we'll reply within one month. If your child's account was set up by their school, you can also ask the school.
If you're unhappy with how we handle your data, please tell us first. You can also complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.
Children's privacy
We follow the ICO's Age Appropriate Design Code (the Children's Code). Children's accounts are created by an adult and are private by default. There is no chat, no public profiles, no adverts, no location tracking, no photo uploads and nothing to buy. Streaks and badges are there for encouragement; missing a day only resets the streak counter.
Keeping data safe
All connections use HTTPS. Passwords, PINs and reset links are stored only as hashes. Sign-in attempts are limited, and every request for a child's data checks that the signed-in parent or teacher is allowed to see it. No system is perfectly secure, but if a breach ever put your data at risk, we'd tell you and the ICO as the law requires.
Changes to this policy
If we make an important change, we'll say so on the site before it takes effect, and update the date at the top of this page.
Contact us
For anything about your data or this policy, email contact@oakling11plus.co.uk. Oakling Primary Scholars is part of Oakling Academics, run by Ruchi Singh.