Privacy Policy

Last updated: 22 September 2026

1. Who we are

Eduentry (“we”, “us”, “our”) operates two assessment products: an academic benchmarking assessment for children aged 6–17 (managed by a parent or guardian) and a free internship readiness assessment for students aged 14 and above (used directly by students). We can be reached at [email protected]. This policy explains what personal data we collect, why, and how you can exercise your rights under the UK GDPR and EU GDPR.

2. Data we collect

Account registration (all products)

  • Email address and password (hashed — never stored in plain text)
  • Full name (provided at registration)
  • Account creation date and last login

Academic assessment — child profiles

  • Child’s first name and date of birth (to calculate age-appropriate questions)
  • Assessment responses, standardised scores, and percentile rankings
  • Subject-level performance data

Internship readiness assessment — student data

  • Selected internship track (Technology, Business, Data Analytics, or Digital Marketing)
  • Assessment responses across four phases
  • Readiness tier, phase scores, and AI-generated report text

Usage data

  • Pages visited and session duration (via Google Analytics 4, with IP anonymisation)
  • Heatmaps and session replays (via Microsoft Clarity, anonymised)

3. How we use your data

  • To create and manage your account and (where applicable) child profiles
  • To deliver adaptive assessments and generate personalised reports
  • To calculate standardised scores, percentile rankings, and readiness tiers
  • To improve the accuracy of our assessment models
  • To send essential service emails (password reset, assessment completion)
  • To analyse aggregate usage patterns and improve the platform

We do not sell your data to third parties, use it for advertising, or share individual-level data with any third party except as described in Section 5.

4. Children’s data and minimum age

Academic assessment (ages 6–17): This product is designed for use by parents and guardians on behalf of their children. All child profiles must be created and managed by a verified parent or guardian aged 18 or over. Children do not create their own accounts for this product.

Internship readiness assessment (ages 14+): Students aged 14 and above may register and use this product directly. Users under 18 are encouraged to inform a parent or guardian before registering. We do not knowingly allow anyone under 14 to register for any Eduentry product.

Users under 13 (COPPA): Eduentry does not knowingly collect personal data from children under 13. If we become aware that a user under 13 has registered, we will delete their account and all associated data promptly. If you believe a child under 13 has registered, please contact us at [email protected].

Assessment responses and scores are accessible only to the account holder. We retain this data for as long as the account is active, or for 3 years after the last login — whichever comes first.

5. Third parties

Supabase — our database and authentication provider. Data is stored on EU-region servers. Supabase Privacy Policy.

Anthropic Claude API — used to generate AI-powered assessment report summaries. Only anonymised performance data (scores and track) is sent — no names, email addresses, or personally identifiable information. Anthropic Privacy Policy.

Google Analytics 4 — anonymised usage analytics. IP addresses are anonymised before storage. You can opt out via Google’s opt-out browser add-on.

Microsoft Clarity — anonymised heatmap and session behaviour analytics. Clarity is configured to mask all input fields and does not record keystrokes or personal data. Microsoft Privacy Statement.

Vercel — our hosting provider. Handles HTTPS termination and CDN delivery. Vercel Privacy Policy.

6. Legal basis (UK / EU GDPR)

  • Contract performance — to provide the assessment service you signed up for
  • Legitimate interests — improving our platform and preventing fraud
  • Consent — analytics cookies (you may withdraw consent at any time)

7. Your rights

Under UK and EU GDPR, you have the right to:

  • Access — request a copy of your personal data
  • Rectification — correct inaccurate data
  • Erasure — request deletion of your account and all associated data
  • Portability — receive your data in a machine-readable format
  • Objection — object to processing based on legitimate interests
  • Restriction — request that we limit how we process your data

To exercise any of these rights, email [email protected]. We will respond within 30 days. You also have the right to lodge a complaint with the ICO (UK) or your local supervisory authority.

8. Data retention

  • Account data: retained while your account is active
  • Assessment scores: retained for 3 years after last login
  • Analytics data: retained for 14 months (Google Analytics default)
  • Deleted accounts: all personal data removed within 30 days of deletion request

9. Security

All data is transmitted over HTTPS. Passwords are hashed using bcrypt. Database access is restricted to authenticated server-side requests only. We conduct regular security reviews of our infrastructure.

10. Changes to this policy

We may update this policy from time to time. We will notify you by email if we make material changes. The “Last updated” date at the top of this page always reflects the most recent version.

11. Contact

For any privacy-related questions, contact us at [email protected].