MySiMy Simple Learning

Privacy Policy

Last updated: 10 October 2026

1. Introduction

This Privacy Policy explains how Mira Patel ("we", "us", "our"), an individual operating MySi as a sole trader rather than through a registered company, collects, uses and protects personal data when you use MySi (the "Service"), a website and web application providing curriculum-aligned Maths lessons, practice questions and printable worksheets for children in the UK primary curriculum. It applies to the parent or legal guardian who registers an account ("you") and to information relating to the child or children who use the Service under that account ("your child"). We are the data controller for the purposes of the UK GDPR and the Data Protection Act 2018.

2. Information we collect

We collect the following categories of information:

  • Parent account information: name, email address, password (stored in hashed form via our authentication provider, Supabase), and marketing preferences you set when registering.
  • Child profile and progress information: a first name or nickname you give for your child, their year group (Reception to Year 3), and their learning activity within the Service — for example, which lessons they have viewed, questions answered, scores and progress over time. We do not require or ask for your child's full name, date of birth, school name, home address, or any other information beyond what is needed to personalise their lessons.
  • Payment information: subscription and billing details are processed by our payment provider, Stripe. We do not store full payment card numbers ourselves; we retain limited billing metadata (such as subscription status and billing dates) needed to manage your account.
  • Technical information and consent records: like any website, our hosting providers process your IP address and basic browser information in server logs so the Service can be delivered and kept secure. We also record when you confirmed you are a parent or legal guardian, and your marketing choice and when you last changed it. We do not use analytics, advertising or tracking tools.

3. How we use your information

We use the information described above to:

  • create and administer your account and authenticate you when you log in;
  • provide, personalise and improve lessons, practice questions and worksheets for your child's year group;
  • process subscription payments, manage billing, and handle refund or cancellation requests;
  • send you service-related communications (e.g. account, billing, security notices) and, where you have opted in, occasional product or learning updates;
  • maintain the security, integrity and performance of the Service, including detecting and preventing fraud or misuse; and
  • comply with our legal obligations and respond to lawful requests from authorities.

Our legal bases for this processing are: performance of a contract with you (to provide the Service you have subscribed to), our legitimate interests (to operate, secure and improve the Service), consent (for optional marketing emails, which are off unless you tick the box, and which you can withdraw at any time in your account settings), and compliance with legal obligations. We only process your child's first name, avatar, year group and learning progress because you, as their parent or legal guardian, have asked us to provide the Service for them and have confirmed this when registering.

4. Children's privacy

MySi is intended to be used by children only under the account and supervision of a parent or legal guardian. Only a parent or legal guardian aged 18 or over can create an account, and by registering they confirm they are the child's parent or guardian and consent to us handling the child information described in section 2. Children do not have their own login, email address or password, and we do not knowingly collect personal data directly from children, market to children, show them advertising, or let them make purchases. We follow the ICO's Age Appropriate Design Code (the Children's Code): we collect the minimum information needed, we switch nothing on by default that is not needed to provide the lessons, and we do not use your child's data for profiling or sharing with third parties for their own purposes. The Service is aimed at children in the UK and is not directed at children in the United States. You can review, download or delete everything we hold about your child at any time from your account page, and a parent or guardian can ask us to do so (see section 12). If you believe a child has given us personal data directly, please tell us and we will delete it.

5. How we share your information

We do not sell your personal data or your child's personal data. We share information only with:

  • Service providers who process data on our behalf under contract, including Supabase (authentication and database hosting), Stripe (payment processing) and Lovable (application hosting). Lovable also provides an AI service that we use only to draft our own marketing posts from our published lesson content; no account, parent or child information is sent to it. We have data processing terms in place with these providers;
  • Professional advisers and authorities where necessary to comply with a legal obligation, enforce our Terms, or protect our rights, safety or property, or those of our users; and
  • A buyer or successor in the event of a merger, acquisition or sale of some or all of our business, subject to that party agreeing to protect your data consistently with this policy.

6. International transfers

Some of our service providers, including Supabase and Stripe, may process data on servers located outside the UK or European Economic Area. Where this happens, we rely on appropriate safeguards recognised under UK data protection law, such as standard contractual clauses or an adequacy decision, to ensure your data continues to receive an appropriate level of protection.

7. Data retention

We keep your account, your children's profiles and their progress for as long as your account exists, so that you do not lose your child's progress if you pause or cancel your subscription. When you delete your account (from your account page) or ask us to erase your data (see section 9), your account, your children's profiles and their progress are deleted straight away, and they disappear from our backups within 30 days. We cannot delete payment records held by Stripe, which Stripe must keep for tax and accounting law (normally six years). Marketing consent records are deleted with your account. Server logs kept by our hosting providers are kept for a short period under their own policies.

8. Security

We use appropriate technical and organisational measures — including encryption in transit, access controls, and secure hosting through our providers — to protect personal data against unauthorised access, alteration, disclosure or destruction. No method of transmission or storage is completely secure, but we work to keep your and your child's data safe and to respond promptly to any incident.

9. Your rights

Subject to applicable law, you have the right to: access the personal data we hold about you and your child; request correction of inaccurate data; request deletion of your data; object to or restrict certain processing; request a copy of your data in a portable format; and withdraw consent at any time. Most of these are available directly on your account page: you can download your data, change your child's profile details, turn marketing emails on or off, and permanently delete your account and your children's data. For anything else, see the contact details in section 12. We will respond within one month. You also have the right to complain to the UK Information Commissioner's Office (ICO) at ico.org.uk, or to your local data protection authority, though we would welcome the chance to address your concerns directly first.

10. Cookies and similar technologies

We only use storage that is strictly necessary to run the Service: your browser keeps you signed in and remembers which child and year group you last chose. We do not use analytics, advertising or tracking cookies, so we do not show a cookie banner. Our payment provider, Stripe, may set its own cookies on its secure payment pages to prevent fraud. You can clear this storage in your browser settings, but you will be signed out. Fonts used by the Service are served from our own site, so visiting it does not send your IP address to a font provider.

11. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes to the Service or to applicable law. If we make material changes, we will notify you by email or via a notice on the Service before they take effect. The "Last updated" date at the top of this page shows when it was last revised.

12. Contact us

MySi is currently run by one person. If you have any questions about this Privacy Policy or how we handle your or your child's data, or want to make a request that you cannot make from your account page, please message us on WhatsApp at 07404 789345.