Child privacy notice
Last updated 2026-10-12. This page is written in plain English on purpose, for parents and - where age-appropriate - children themselves.
The short version
BrightEleven is for children aged 8 to 11 preparing for the 11+. We collect a name for your child to show in the app - a first name or a nickname, whichever you prefer - an avatar made of shapes and colours, a 4-digit PIN, their own learning data (how they're getting on with practice questions), their settings and their choices in the app's rewards - plus an exam date and a GL region or area, if you choose to add them. The full list is below. No surname, no date of birth, no year group, no photo, no location. There's no advertising, no third-party tracking, and no chat or social features anywhere in the app.
Who decides what we collect
A parent or guardian creates every child profile and explicitly consents to it at the point of creation - a child cannot create their own account. The parent stays in control: they can see everything on their child's dashboard, change settings, and delete the profile at any time.
What we collect from a child profile
- A name for your child - a first name or a nickname. We suggest a nickname when you create the profile, because we would rather not hold a real name we do not need. Used to personalise the app and never shared outside the family account, except with a tutor the parent has chosen to invite (see “Who can see a child's data” below).
- An avatar choice - shapes and colours, never a photo
- A 4-digit PIN, stored only as a one-way hash
- A security log of PIN attempts: the time of each wrong PIN typed on the profile, and of any lockout that follows, so that nobody can guess the PIN by trying again and again. Nothing else is recorded with it.
- Learning data: which questions were answered, whether they were correct, how long they took, and progress like mastery levels, the questions waiting in Fix-It to be tried again, points, streaks, and badges, and the mock papers your child sits with their results (the results are shown on your dashboard)
- The settings chosen for your child's app, such as the font, text size and spacing, colour tint and contrast, the read-aloud voice and its volume, sounds, calmer visuals, break reminders and how long a practice session is
- The daily screen-time limit you set, and how long your child has practised today
- The rewards you set up as the parent: your reward targets and goodies - a gift you set (its name, an emoji and the points it needs) and the goodies you put on the spin wheel
- A question your child reports as wrong or confusing: which question, the reason they picked from a short list (nothing typed), and their display name so the report can be answered
- A record of your consent to the profile: when you gave it and which version of the consent wording you agreed to
- Their choices in the app's rewards: the buddy they pick, the name they choose for it from our list, its outfits and how often it was cared for, the gems it earned from right answers and what they were spent on, where they send it on trips and the postcards it sends back, the mini-missions offered and taken, what they are saving for, any buddies they had before (kept so one can come back), what the spin wheel gave each day, and where they place decorations in their buddy's HQ. All of these are picked from menus; none is typed. You can switch the buddy and the spin wheel off for your child from their page in your dashboard; nothing already earned is deleted.
- If you choose to add them: your child's target exam date and the GL region or area they are preparing for. Both are optional, are entered by you from your child's page, power a plain day count to the date, and can be changed or cleared at any time. If you invite a tutor, they can see the exam date too.
That's the complete list. We do not collect a surname, date of birth, photo, precise location or year group from a child - year group is not asked for on any screen. Apart from typing a number as the answer to a question that asks for one, and a search box that only filters the list of topics on their own screen, the one thing a child can write to us is a short feedback note that you approve first.
What we never do
- No advertising to children, ever
- No third-party tracking, analytics or error-reporting scripts on any screen a child uses - a child's browser talks only to BrightEleven. The one thing that can change that is optional and off unless a family switches it on: the read-aloud voice, whose voice files are downloaded from one content-delivery network (Hugging Face); the program that plays them comes from BrightEleven itself. That download is a plain file fetch - it carries no name, no account details and no learning data - and it only ever happens if read-aloud is switched on in your child's Settings. With the downloaded voice off, reading questions aloud uses a voice built into your child's device. We pick an on-device voice wherever the device offers one, so nothing is sent anywhere. On the rare device whose only British-accent voices are ones the browser maker synthesises on its own servers - some Chrome installations are like this - the browser would send the question text to that voice service in order to speak it. Even then it is the question wording only: never your child's name, your account details or anything about how they are doing.
- No building of behavioural profiles from what a child gets right or wrong
- No chat, messaging, or any way for a child to contact another user
- No AI chat assistant on any child-facing screen - Eva, our help assistant, is only ever available to parents
- No leaderboards or comparisons between different children's accounts
- No dark patterns designed to keep a child engaged for longer than they'd choose themselves - and no reminder emails or notifications are ever sent to a child
A note on AI
Which practice question a child sees next is chosen automatically by BrightEleven, based on how they've done so far - it's not a person deciding in real time.
Questions come from BrightEleven's own rule-based generators and from authors working to a written brief, and some drafts are AI-assisted. A new question can only be published by a step that refuses to run unless a verifier has independently re-derived that batch's answers and filed a report - the check does not trust the author or the generator, and the record is written against the rows as they go live. Across the bank, automated verifier rules and bias audits run in our build pipeline, and any question a family reports is checked against its source and corrected or removed. We do not claim that a person has individually reviewed each of the questions already live.
Who can see a child's data
The parent account that created the profile. Our systems enforce this at the database level, not just in the app's interface - one family can never see another family's data.
Since 17 September 2026 a parent can also choose to invite a tutor. A tutor is an adult the parent already works with; they accept an emailed invitation, and until the parent revokes it they can see this about that one child, and nothing more:
- the child's display name, and their exam date if the parent has added one;
- a level from 1 to 5 for each topic the child has practised, and when the child last practised that topic;
- their recent practice sessions: when each one started and finished, what kind of session it was (a daily quest, topic practice, a mock paper, a topic challenge or the placement check), how many minutes it took, how many questions were answered and how many were right;
- their mock papers: the subject, when it was taken, and how many questions were right out of how many;
- for each topic, how many questions are waiting in Fix-It and how many of those are due now.
A tutor cannot see which questions the child was given or what they answered, and cannot see the child's settings, PIN, avatar, buddy and rewards, points, streaks or badges, screen-time limits, GL region, or anything about the parent such as their email address. The child's app never shows the tutor or anything written by them. The parent can revoke access at any time from their Tutors page, and revocation takes effect on the tutor's next request. The tutor is told what we hold about them, and for how long, in a tutor privacy notice linked from the invitation itself.
There is also a shorter version of this notice written for a child to read on their own, inside the child's app: what the app remembers, what it never does, who can see it, and how to ask for it to be deleted.
How long we keep it
For as long as the account is active. If a parent deletes their account, all associated child data is permanently removed immediately - there is no waiting period. If a child had reported a question or sent a feedback note, the report stays so the question can still be fixed, but the child's name and anything they wrote are wiped from it first.
Parents' rights
Parents can export or delete all of their family's data at any time from account settings, with no need to contact support first. This is described in full in our privacy policy.
This notice and the law
This notice reflects the standards set out in the UK Information Commissioner's Office Age Appropriate Design Code (the "Children's Code") and UK GDPR.