Privacy Policy

Last updated: October 2026

Platform: BrainScout ("we", "our", or "us")

  1. 1. Overview & Our Commitment to Young Users

    BrainScout is an AI-powered educational platform designed to support students studying for CCEA GCSE and A-Level qualifications. Because our service is used by students (including minors under 18), we comply fully with the UK General Data Protection Regulation (UK GDPR) and the Information Commissioner’s Office (ICO) Age-Appropriate Design Code (Children’s Code). We treat privacy as a priority with high-privacy settings enabled by default.

  2. 2. What Data We Collect

    We practice strict data minimisation. We only collect information that is strictly necessary to provide our core educational service:

    • Account Information: Name, email address, and encrypted account credentials.
    • Academic & Progress Data: Study streaks, completed practice questions, module scores, and bookmark preferences.
    • AI Interaction Logs: Prompts and questions submitted to our Socratic AI tutor to generate feedback and track learning progress.
    • Technical Data: Basic browser information and authentication cookies necessary to keep you securely logged in. We do not track your precise geolocation or sell your data to third parties.

  3. 3. How We Use Your Data

    Your data is used exclusively to:

    • Provide and maintain your personalized student dashboard.
    • Power our code-driven math generators and AI tutoring feedback.
    • Track academic progress, streaks, and exam readiness metrics.
    • Ensure platform security and prevent unauthorized access or cheating.

  4. 4. Data Sharing & Third-Party Processors

    We do not share, rent, or trade your personal information. We use trusted infrastructure partners who comply with strict UK/EU data standards:

    • Supabase / Neon (Database & Auth): Securing user profiles and progress logs.
    • Vercel (Hosting): Delivering fast, reliable web infrastructure.
    • Vercel AI SDK / OpenAI / Anthropic (AI Processing): Processing Socratic study queries. (Note: Student chat logs are never used to train public foundational AI models).

  5. 5. Your Data Protection Rights

    Under UK GDPR, you (or your parent/guardian if you are under 18) have the right to:

    • Access: Request a copy of the personal data we hold about you.
    • Rectification: Correct inaccurate or incomplete data.
    • Erasure: Request that your account and associated data be deleted ("Right to be Forgotten").
    • Restriction: Limit how we process your information.

    To exercise any of these rights, or if you have questions, contact us at: support@brainscout.co.uk.