Privacy notice

Who we are

SATs Studio is a trading name of Md Ahmed, a sole trader, who is the data controller for the personal data described here. Business correspondence address: Lytchett House, 13 Freeland Park, Wareham Road, Poole, Dorset, BH16 6FA. For any privacy question, email support@satsstudio.co.uk.

What we collect

• Adult account data: email address and a password (stored only in hashed form by our authentication provider), plus a display name if you give one.
• Pupil account data: a display name, a username and a PIN. Children do not need an email address; the username and PIN are created by the adult who owns the account.
• Learning data: answers to the free Maths check-in, practice attempts, the mastery estimates the adaptive engine derives from them, and progress history.
• Billing data: a Stripe customer/subscription or payment reference and the resulting access status. We do not receive or store card numbers.

Why we use it and our lawful bases

• To provide the accounts, the check-in and the personalised programme — this is necessary to perform our contract with the adult account holder.
• To take payment and manage access — necessary for that same contract and to comply with our legal obligations, such as keeping tax records.
• To keep the service secure, fix faults and answer support requests — our legitimate interests in running a safe and working service.

Pupil learning data exists only to personalise that pupil's programme and to show progress to the adult who owns the account. We do not sell pupil personal data and we do not use pupil personal data for advertising.

Who processes data for us

• Stripe — payment processing. Card details are entered on Stripe's own hosted checkout page and are handled by Stripe, not by SATs Studio.
• Supabase (provided through Lovable Cloud) — the database and authentication behind the app, where account and learning records are stored.

These providers act on our instructions for the purposes above. We do not make claims about certifications or specific data centre locations that we cannot verify.

Access controls

Records are protected by per-account access rules: an account can read only its own data, and an adult account can see only the pupils it owns.

Retention

Account and learning data is kept while the account exists and is used. Removing a pupil from an adult account disconnects the relationship but preserves that pupil's own learning history. Billing records are kept for as long as tax and accounting rules require. You can ask us to delete an account and its data at any time.

Your rights

You can ask for a copy of the personal data we hold, ask us to correct or delete it, ask us to restrict or object to certain processing, and ask for data portability where it applies. An adult account holder may exercise these rights on behalf of a child on their account. Email us and we aim to respond as soon as reasonably possible, and within one month.

Complaints

If you are unhappy with how we handle your data, please contact us first. You also have the right to complain to the UK Information Commissioner's Office (ICO) at ico.org.uk.

For children

If you use SATs Studio as a pupil: we keep your name, your username and PIN, and your Maths answers. We use your answers to choose what to practise next and to show your grown-up how you are getting on. Nobody else sees them, and we never sell them or use them for adverts.