Privacy Notice

Last updated: 17 May 2026

This privacy notice explains how 11+ Mastermind ("we", "us", "our") collects and uses personal data when you or your child use our website and app. We are committed to protecting the privacy of children and complying with the UK GDPR, the Data Protection Act 2018, and the Information Commissioner's Office (ICO) Age Appropriate Design Code.

Who we are

11+ Mastermind is operated by Checkgate Solution Ltd, a company registered in England and Wales (company number 12610552). Our registered address is 6 Vale Avenue, Pluto House, Tunbridge Wells, Kent, TN1 1DJ, UK. You can contact our data protection lead at support@11plusmastermind.com.

For children: a simple version

Hi! When you use 11+ Mastermind we look after some information about you, like your name, your school year, the answers you give, and which questions you get right or wrong. We use this to help you practise better. We never sell your information, and we don't show you adverts. If you ever want to look at what we know about you, or have it deleted, ask a parent and they can do that from the Settings page.

What personal data we collect

  • Account data: name, email address, date of birth, parent/guardian email (for under-13s).
  • Learning data: questions you answer, scores, time taken, mistakes, AI tutor conversations.
  • Technical data: session cookies (used only to keep you signed in), basic device and browser info from server logs.
  • Billing data: if you subscribe, payment is processed by Stripe; we receive a customer ID and subscription status only — we never see your card details.

Lawful bases for processing

  • Contract: to provide the practice service you have signed up for.
  • Consent: for any optional features such as the leaderboard.
  • Legitimate interests: to keep the service secure, prevent fraud, and improve learning quality. We balance this against children's rights and freedoms.
  • Legal obligation: to keep records required by tax and consumer-protection law.

Children under 13

Under UK GDPR, a child must be 13 or over to consent to information society services on their own. If you are under 13, we ask for your parent or guardian's email when you sign up, and your account is held in a pending state until they approve it. Parents can withdraw consent at any time by emailing us or by deleting the account from the Settings page.

How long we keep your data

We keep learning data while your account is active. If you delete your account, all personal data is removed within 30 days, except where we are required to keep limited financial records for 6 years for tax purposes.

Sharing

We share data only with the third-party processors that make the service work:

  • Clerk (authentication and account management)
  • Stripe (subscription billing, where you choose to subscribe)
  • Anthropic (AI tutor — questions and answers are sent for tutoring)
  • Our hosting provider for database and server infrastructure

We do not sell personal data. We do not use it for advertising or profiling for marketing.

Your rights

You (or a parent for a child) can ask us to:

  • See a copy of the data we hold (right of access — Article 15)
  • Correct anything wrong (Article 16)
  • Delete the account and personal data (Article 17)
  • Withdraw consent for optional features at any time
  • Complain to the UK ICO at ico.org.uk

You can exercise the first three rights instantly from the Settings page once signed in.