Trust and safety

Children's Privacy & Age-Appropriate Design

Exam Study Hacks is likely to be used by children studying for their GCSEs, so we design it around children's best interests. This page explains, in plain language, how we protect young people's data. Last updated 28 June 2026.

Parent or guardian led

Where a child uses Exam Study Hacks, a parent or guardian sets up and manages the account and is responsible for it. Purchases are made by the parent or guardian, not the child.

We do not make direct appeals to children to buy or subscribe, or pressure them to ask a parent to pay.

Private by default

Student progress is private by default. There are no public leaderboards and no public profiles.

We collect the minimum data needed for revision and billing, and we avoid unnecessary profiling.

Optional analytics are switched off until cookies are accepted, and we never track admin or sensitive learning answers in analytics.

How we use children's data

We use learning data only to adapt revision, show weak topics, track readiness and give parents an appropriate progress summary.

We do not sell children's data, we do not use it for advertising, and we do not make legally significant decisions about a child automatically.

Hattie Ed (AI coach) safety

Hattie Ed is a revision coach only. It guides students with hints and explanations and is not a medical, mental-health, safeguarding or emergency service.

If a student needs urgent help, they should contact a trusted adult, their school safeguarding lead, or the emergency services.

Our Children's Code commitments

We have assessed Exam Study Hacks against the ICO's Age Appropriate Design Code (the Children's Code). Key commitments include: acting in children's best interests, high-privacy default settings, data minimisation, clear transparency, no detrimental use of data, no manipulative nudges, and no behavioural advertising.

We do not collect geolocation, and our Permissions Policy disables location, camera and microphone access.

Data protection impact assessment

We maintain a Data Protection Impact Assessment (DPIA) covering children's data, parent visibility, AI coaching context, analytics and admin uploads. It is reviewed at least annually and on significant changes. The residual risk is assessed as low with our safeguards in place.

The full DPIA is an internal record. To ask about it, email privacy@examstudyhacks.com.

Rights and contact

Parents and guardians can request access to, correction of, or deletion of their child's data by emailing privacy@examstudyhacks.com.

You can also raise a concern with the UK Information Commissioner's Office at ico.org.uk/make-a-complaint. Our ICO registration reference is ZC142850.