PrepAcer

Privacy notice

PrepAcer is used by children, so we collect as little as we can and we never track or advertise to them. This notice explains what we hold, why, and your rights. It is written for parents.

Who is responsible

JARY LTD (company number 17522627), registered office Suite RA01, 195-197 Wood Street, London, E17 3NU, is the controller of the information described here, which means we decide how and why it is used. We handle it under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. We are registered with the Information Commissioner's Office (ICO) under number C2060727. Contact: hello@prepacer.com.

What we hold

About you (the parent):

  • Your email address and a password (stored securely as a one-way hash, so we cannot read it).
  • If you switch it on, a weekly progress email to your address summarising your child's practice. It is off unless you tick the box, and every email has an unsubscribe link.
  • If you arrive from one of our adverts, a short campaign label from the link (for example “meta-g1”), saved once when you sign up so we can count which advert worked. It contains no personal information, and we do not use cookies or trackers to collect it.
  • Records of payments you make (date, plan, amount). Card details are handled by Stripe and are never seen or stored by us.

About your child:

  • A username you choose for them (a nickname, not their full name). They log in to your account with it or with your email. No surname, no email address of their own, no date of birth, no photo.
  • The subjects chosen and how long the study plan runs (3, 6 or 12 months).
  • Their answers, marks, how long a question took, and which topics are finished, so we can show progress and mistakes to retry.
  • How many AI credits they have used (counts only, never the text).
  • If your child or you report a question that looks wrong, we keep the report and any note with the account.
  • If a student reports a chat message in a squad, we keep a copy of that message and the nickname for 30 days so it can be reviewed.

The voice tutor does not store what your child says or what it replies. Only the number of messages is counted, to apply limits. If your child talks to the tutor, their web browser may use an online speech-to-text service (for example one run by Google or Apple) to turn their voice into text. PrepAcer does not record or keep any audio.

Why we use it, and our legal basis

The UK GDPR says we must have a lawful basis for each use of personal information. Ours are:

  • Providing the service (account, practice, marking, progress, study plan, tutor): contract, because you sign up on your child's behalf and we need this information to deliver what you asked for.
  • Taking payment and keeping accounts: contract, and legal obligation (tax and accounting law).
  • Keeping accounts safe and preventing abuse (bot checks, blocking disposable emails, reviewing reported chat messages, removing unconfirmed accounts): legitimate interests. We have weighed these against your child's interests and use the least intrusive method we can.
  • The optional weekly progress email: your consent, which you can withdraw at any time using the unsubscribe link or in your account settings.
  • Counting which advert brought you here: legitimate interests. It is a short label with no personal information.

You do not have to give us this information, but without your email, password and your child's details we cannot provide the service.

We do not sell information, do not show adverts, and do not use analytics or advertising cookies. We only use the cookies needed to keep someone logged in.

Who else handles it

We use a small number of trusted services to run PrepAcer. They only get what they need:

  • Supabase: our database and login system. Your information is stored in London, in the UK. Supabase's support staff, including its US company, can reach it only when needed to support or run the service.
  • Vercel: hosts the website.
  • Anthropic: provides the AI used to mark written answers and to power the tutor. It receives the question and the answer or message text. It does not receive your child's name, username or email. Anthropic deletes this text within 30 days, unless its safety checks flag it for breaking Anthropic's usage rules (then it can be kept for up to 2 years) or the law requires it to be kept longer. Anthropic does not use it to train its AI models.
  • Stripe: takes payments. It receives your email and what you bought, not your child's name.
  • Resend: sends the emails to parents, such as password resets.
  • Cloudflare Turnstile: a bot check when you sign up. It receives technical details from your browser, such as your IP address, to tell people from automated programs. It is not used for advertising.

These services act on our instructions as our processors (or, for Stripe, under its own terms for payments). We do not sell or share information for advertising.

Sending information outside the UK

Some of these services process information outside the UK, mainly in the United States. Where they do, the law requires a safeguard so that your information keeps the same level of protection. For each service we rely on:

  • Supabase: stores your information in the UK. Any access from outside the UK (for support) is covered by the standard contract clauses in its data processing agreement.
  • Vercel (United States): the UK-US data bridge, and the standard contract clauses with the UK Addendum in its data processing agreement.
  • Anthropic (United States): the standard contract clauses in its data processing agreement, which is part of its commercial terms.
  • Stripe (United States and Ireland): the UK-US data bridge, under which Stripe is certified.
  • Resend (stores emails in the United States): the UK-US data bridge, and the standard contract clauses with the UK Addendum.
  • Cloudflare Turnstile (worldwide network): the UK-US data bridge, and the standard contract clauses with the UK Addendum in its data processing agreement.

Email hello@prepacer.com if you would like more detail.

AI marking and the tutor

Written answers are marked by an AI. It does not make decisions that have a legal or similarly significant effect on your child: it only suggests marks and feedback on practice answers. It shows its reasoning, and your child can flag any mark they think is wrong. We do not use your child's answers to build advertising profiles, and we do not use them to train AI models.

How long we keep it

  • Your child's answers and progress are kept while the account is open.
  • Payment records are kept for six years from the end of the financial year they relate to, because UK company and tax law requires it (longer only if HMRC asks us to).
  • If you delete the account, we delete everything else we hold about you and your child.

Keeping it secure

Information is encrypted in transit, passwords are stored as one-way hashes, and access to the database is restricted. If a data breach is likely to put you or your child at risk, we will tell you and the Information Commissioner's Office as the law requires.

Your rights

Under the UK GDPR you have the right to be informed (this notice), to access the information we hold, to have it corrected, to have it erased, to restrict how we use it, to receive a copy you can move elsewhere (portability), and to object to uses based on legitimate interests. You can withdraw consent at any time. These rights belong to you for your own information, and a parent or guardian can exercise them for their child. Parents can delete a child's profile, or their whole account including every child profile, from the Account page at any time. Email hello@prepacer.com for anything else. We will reply within one month and do not charge for this.

If you are unhappy with how we handle your information you can complain to the Information Commissioner's Office (ico.org.uk).

Children's privacy

We follow the UK Age Appropriate Design Code: high-privacy settings by default, no profiling, no nudging, and no sharing of a child's details with other users. PrepAcer 11+ and PrepAcer SATs have no chat. PrepAcer GCSE has an optional Group Challenge feature where students form squads, use a nickname and race each other on quiz challenges. Chat is only open during a challenge and is deleted when it ends, and challenge scores are deleted after a week. Parents can ask us to remove their child from them.

Accounts are created and managed by a parent or guardian, who is responsible for agreeing to this notice on their child's behalf. Children under 13 cannot create their own account; only a parent can. If you think a child has given us information without a parent's involvement, email hello@prepacer.com and we will delete it.

Changes to this notice

If we make a significant change we will tell parents by email or in the app before it takes effect.

Last updated 15 October 2026. Back to home