Privacy Policy

Last updated: 9 October 2026

Transfer With Me is operated by Sperrin Consulting Ltd, registered in Northern Ireland, company number NI741657 (“we”, “us”, “our”). We are the controller of the personal data this policy describes. We are committed to protecting the privacy of our users, particularly children. This policy explains how we collect, use, and safeguard your information.

1. Information We Collect

Account Information

Parent email address and name (required for account creation)
How you heard about us, only if you choose to answer when signing up
Child's first name, year group, and school (provided during onboarding)
Companion owl name (chosen by the child)

Usage Data

Practice session results (questions answered, scores, time taken)
Progress metrics (streaks, XP, topic performance)
AI companion interactions (used to personalise guidance)

Technical Information

Your IP address, held briefly to stop repeated sign-in attempts and spam through our forms
Error reports when something breaks, so we can find and fix the fault

Payment Information

Payment details are processed securely by Stripe. We do not store card numbers, CVV codes, or bank details on our servers. We retain only the subscription status and Stripe customer ID.

2. How We Use Your Information

To provide and personalise the practice experience for your child
To generate progress reports and weekly digest emails for parents
To process subscription payments via Stripe
To improve the quality of our questions and AI tutor responses
To communicate service updates or respond to support queries
To tell you about our own plans, such as the Season Pass, after a free trial ends. Every one of these emails has a one-click unsubscribe link, and you can turn them off at any time under “Product updates and offers” in Settings

Why we are allowed to use it

Running the service you signed up for (your account, your child's practice, progress reports, the weekly email and payments): this is needed for our contract with you
Keeping the service secure, fixing faults, measuring how the site is used and improving our questions and the owl: our legitimate interest in running a safe service that works. We use only what we need, and never for advertising
Emails about our own plans: our legitimate interest in telling people who use the service about it, with an unsubscribe link in every email
Payment and accounting records: UK tax law requires us to keep them
The optional “how did you hear about us” answer: your consent, which you can withdraw at any time

3. Children's Data

We take the protection of children's data seriously, in line with the ICO's Age Appropriate Design Code and UK GDPR requirements.

We collect only the minimum data necessary to deliver the service
Children do not have their own login. The account belongs to the parent or guardian, who confirms they are over 18 when they sign up
About your child we store their first name, their school year, and optionally the school you tell us. We do not ask for their date of birth, address, photo or contact details
We do not sell or share children's data with third-party advertisers
AI companion conversations are not used for marketing purposes
Children cannot make purchases, and nothing your child writes is published or visible to other users

One thing worth knowing about the AI owl. When your child asks the owl for help, what they type is sent to Google, who provide the AI that writes the reply. Google also checks written answers, so a right answer worded differently from ours is still marked right. We do not send your child's real name. Please do remind your child not to type personal details (their full name, their address, or their school) into the chat, in the same way you would for any website.

4. Cookies

We use essential cookies to maintain your login session and remember your preferences. We also use a cookie from PostHog, our analytics provider, which counts visits and measures which parts of the site are used, so we can improve it. It does not carry your name or your child's. You can turn analytics off on this device at any time:

We do not use any advertising cookies, and we do not allow any third party to track your child across other websites.

We share data only with the following service providers, who process it on our behalf:

Supabase: database hosting and authentication
Stripe: payment processing. Card details go directly to Stripe; we never see or store them
Resend: email delivery. This includes your weekly progress email, which contains your child's first name and their progress figures. It also includes any feedback sent to us from inside the app: if your child uses the “send us a note” button, we receive their first name, whatever they wrote, and a screenshot of the page if one was attached
Google (Gemini): powers the AI owl tutor and marks written answers. When your child asks the owl for help, or types an answer that needs marking, we send it the question, the answer your child gave, anything your child types into the chat, and the name your child chose for their owl. We do not send your child's real name, their school, or their age. Google does not use any of it to train or improve their own products, and keeps it only briefly, to check it is not being misused.
PostHog: usage analytics, pages visited, buttons pressed, sessions started, whether answers were right or wrong, and school year. Linked to a random account number so we can see how a family uses the site across devices, never to your name or email. No names, answers or chat messages
Sentry: error reporting, so we can find and fix faults
Vercel: website hosting
Upstash: protects sign-in and our forms from abuse, by briefly holding IP addresses and counts of recent attempts

Stripe also uses some payment information for its own purposes, such as preventing fraud, as a separate controller under its own privacy policy.

Where your data is processed

Our database is in Ireland and our website runs in London. Some of the providers above are based in the United States or may process data there. Where that happens, the transfer is covered by safeguards recognised by UK law, such as the UK-US data bridge or the UK International Data Transfer Addendum, as set out in each provider's data processing terms.

We do not sell your data to any third party, and we do not use your child's data to train our own models.

6. Data Retention and Deleting Your Account

We keep your account and your child's practice history for as long as your account is open, so progress isn't lost if you take a break and come back later. We do not automatically delete anything when a subscription ends.

You can delete your account yourself in Settings (Delete Account). You keep access until the end of that calendar month; then we delete your account and your child's data and email you to confirm. You can change your mind in Settings before then. You can also ask us to delete it by emailing help@transferwithme.com.

Anonymised usage statistics, which cannot identify you or your child, may be kept indefinitely
Payment and accounting records are kept for as long as UK tax law requires, even after an account is deleted

7. Your Rights

Under UK GDPR, you have the right to:

Access the personal data we hold about you and your child
Request correction of inaccurate data
Request deletion of your data (“right to be forgotten”)
Export your data in a portable format
Ask us to restrict how we use your data
Object to us using your data where we rely on our legitimate interests
Withdraw any consent you have given, at any time

To exercise any of these rights, email us at help@transferwithme.com.

Complaints

If you are unhappy with how we have used your data, please tell us first at help@transferwithme.com. We will acknowledge your complaint within 30 days and tell you what we are doing about it. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk or on 0303 123 1113.

8. Data Security

We use industry-standard security measures including encrypted connections (TLS), row-level security in our database, and secure authentication via Supabase Auth. Access to production data is restricted to authorised personnel only.

9. Changes to This Policy

We may update this policy from time to time. We will notify registered users of material changes via email. The “last updated” date at the top of this page indicates when the policy was last revised.

10. Contact Us

If you have questions about this privacy policy or wish to make a data request, please contact us:

Email: help@transferwithme.com
Operator: Sperrin Consulting Ltd, registered in Northern Ireland, company number NI741657

↑ Back to top