Back

Privacy Policy

Last updated: 18 August 2026

Transfer With Me is operated by Sperrin Consulting Ltd (“we”, “us”, “our”). We are committed to protecting the privacy of our users, particularly children. This policy explains how we collect, use, and safeguard your information.

1. Information We Collect

Account Information

  • Parent email address and name (required for account creation)
  • Child's first name, year group, and school (provided during onboarding)
  • Companion owl name (chosen by the child)

Usage Data

  • Practice session results (questions answered, scores, time taken)
  • Progress metrics (streaks, XP, topic performance)
  • AI companion interactions (used to personalise guidance)

Payment Information

Payment details are processed securely by Stripe. We do not store card numbers, CVV codes, or bank details on our servers. We retain only the subscription status and Stripe customer ID.

2. How We Use Your Information

  • To provide and personalise the practice experience for your child
  • To generate progress reports and weekly digest emails for parents
  • To process subscription payments via Stripe
  • To improve the quality of our questions and AI tutor responses
  • To communicate service updates or respond to support queries

3. Children's Data

We take the protection of children's data seriously, in line with the ICO's Age Appropriate Design Code and UK GDPR requirements.

  • We collect only the minimum data necessary to deliver the service
  • Children do not have their own login. The account belongs to the parent or guardian, who confirms they are over 18 when they sign up
  • About your child we store their first name, their school year, and optionally the school and town you nominate. We do not ask for their date of birth, address, photo or contact details
  • We do not sell or share children's data with third-party advertisers
  • AI companion conversations are not used for marketing purposes
  • Children cannot make purchases, and nothing your child writes is published or visible to other users

One thing worth knowing about the AI owl. When your child asks the owl for help, what they type is sent to Google, who provide the AI that writes the reply. We do not send your child's real name. Please do remind your child not to type personal details (their full name, their address, or their school) into the chat, in the same way you would for any website.

4. Cookies

We use essential cookies to maintain your login session and remember your preferences. We also use a cookie from PostHog, our analytics provider, which counts visits and measures which parts of the site are used. It does not carry your name or your child's.

We do not use any advertising cookies, and we do not allow any third party to track your child across other websites.

5. Data Sharing

We share data only with the following service providers, all of whom process data on our behalf:

  • Supabase: database hosting and authentication
  • Stripe: payment processing. Card details go directly to Stripe; we never see or store them
  • Resend: email delivery. This includes your weekly progress email, which contains your child's first name and their progress figures. It also includes any feedback sent to us from inside the app: if your child uses the “tell your owl something” button, we receive their first name, whatever they wrote, and a screenshot of the page if one was attached
  • Google (Gemini): powers the AI owl tutor. When your child asks the owl for help we send it the question, the answer your child gave, anything your child types into the chat, and the name your child chose for their owl. We do not send your child's real name, their school, or their age. Google does not use any of it to train or improve their own products, and keeps it only briefly, to check it is not being misused.
  • PostHog: anonymous usage analytics, pages visited, sessions started, whether answers were right or wrong, and school year. No names, answers or chat messages
  • Sentry: error reporting, so we can find and fix faults
  • Vercel: website hosting

We do not sell your data to any third party, and we do not use your child's data to train our own models.

6. Data Retention and Deleting Your Account

We keep your account and your child's practice history for as long as your account is open, so progress isn't lost if you take a break and come back later. We do not automatically delete anything when a subscription ends.

Account deletion is handled by our team rather than a button in the app. Email us at help@transferwithme.com and we will delete your account and your child's data within 30 days, and confirm once it is done.

  • Anonymised usage statistics, which cannot identify you or your child, may be kept indefinitely
  • Payment and accounting records are kept for as long as UK tax law requires, even after an account is deleted

7. Your Rights

Under UK GDPR, you have the right to:

  • Access the personal data we hold about you and your child
  • Request correction of inaccurate data
  • Request deletion of your data (“right to be forgotten”)
  • Export your data in a portable format
  • Withdraw consent at any time

To exercise any of these rights, email us at help@transferwithme.com.

8. Data Security

We use industry-standard security measures including encrypted connections (TLS), row-level security in our database, and secure authentication via Supabase Auth. Access to production data is restricted to authorised personnel only.

9. Changes to This Policy

We may update this policy from time to time. We will notify registered users of material changes via email. The “last updated” date at the top of this page indicates when the policy was last revised.

10. Contact Us

If you have questions about this privacy policy or wish to make a data request, please contact us:

↑ Back to top