Privacy policy

AceEleven ("we", "us") provides 11+ essay feedback and spelling practice for parents to use with their children. This policy explains what personal data we collect, why, and what rights parents and children have over it. AceEleven is not affiliated with or endorsed by any school or exam board.

The account holder is always the parent or guardian — children do not create their own accounts, sign in, or manage their own data. Parents add a profile for each child they want to use the service with and remain responsible for that profile throughout.

Parent account data: email address, authentication data (a securely hashed password, or your Google account identifier if you sign in with Google), subscription/plan status, and billing details handled by our payment processor (Stripe) — we never see or store your card number.

Child profile data: first name and year group, entered by the parent.

Essay content: the text of essays submitted for feedback, however it was entered — typed, pasted, or extracted from an uploaded file or photo — plus the AI-generated feedback and scores produced for it.

Spelling practice data: which word lists were attempted and session results, once that feature is live.

Usage and technical data: standard log data (IP address, browser type, timestamps) needed to keep the service secure and working.

To provide the service: generating essay feedback, running spelling sessions, managing credits and subscriptions, and keeping a history of a child’s work so progress is visible over time.

To operate and secure the account: authentication, fraud/abuse prevention, and responding to support requests.

We do not use a child’s essays or profile data for advertising, and we do not sell personal data to third parties.

Essay text (and, if uploaded, the image or file it was extracted from) is sent to a third-party AI provider — currently either Google (Gemini) or Anthropic (Claude), depending on which the account is configured to use — solely to generate the marking feedback. Under our current configuration for the free tier, the AI provider’s own terms may allow limited human review of that traffic for safety and quality purposes; we recommend upgrading to a paid-tier AI provider for any real child’s work if that matters to you, and we intend to make a privacy-preserving configuration the default over time.

Sub-processors who help us run the service, each only with the data they need: Supabase (database and authentication hosting), Stripe (payment processing), and Google or Anthropic (AI-generated feedback, as above). We do not share a child’s essays or scores with other parents, schools, or exam boards.

We may disclose data if required by law, or to protect the safety of a child where we believe there is a genuine risk of harm.

Data is hosted with our infrastructure providers (Supabase and, for AI processing, Google/Anthropic), which may process data outside the UK/EEA. Where that happens, we rely on the appropriate safeguards (such as Standard Contractual Clauses) required under UK GDPR.

Essay submissions and feedback are kept for as long as the account is active, so progress over months and years stays visible. If an account is closed, we delete personal data within 90 days except where we’re required to keep billing records for longer (typically 6 years, for UK tax purposes).

Under UK GDPR, a parent can request access to, correction of, or deletion of their own and their children’s personal data, and can object to or restrict certain processing. Contact us (below) to exercise any of these, or to close the account entirely, which removes the children’s profiles attached to it.

If we make a material change to this policy, we’ll notify account holders by email before it takes effect.

Questions about this policy or a data request: hello@aceeleven.co.uk