Privacy Policy
Last updated: 22 October 2026
The Kudos Android app
The Android app opens Kudos on our app website through your device’s supported browser. It uses the same account, learner profiles and saved progress as the web app. You may need to sign in separately on each device or website address. Your browser manages sign-in storage and may share the app website’s session with browser tabs at that same address.
The Google Play version does not load our advertising pixels or marketing analytics, including if you previously accepted cookies. An offline screen may be stored on the device; learner pages, questions, answers and account details are not stored in that offline cache. The app needs an internet connection to mark answers and save progress. You can delete your account from either version.
A browser on either version may keep a small recovery record for an unfinished mock: the paper position, clock and answers still waiting to save. It is tied to your account and learner profile. Unsaved answers are removed once acknowledged by Kudos; the record is removed when the paper is handed in or you sign out. Recovery records older than seven days are not restored. This does not make learning available offline.
The Kudos iOS app
The iPhone and iPad app uses the same account, learner profiles and saved progress. Sign-in storage is kept in the app’s own web view, separately from Safari. Google and Apple sign-in open a system authentication window. Our app distribution does not load advertising pixels or marketing analytics. It needs an internet connection to mark answers and save progress; unfinished mocks use the recovery record described above.
Optional practice reminders are scheduled on your device only, with your permission. They contain no child’s name or progress, remain active when signed out, and can be turned off in parent settings or iOS Settings. We do not send a push-notification token to our servers. Exporting your data opens the iOS share sheet; the temporary export is removed after sharing or on the next app launch. Any copy you save or share remains with the destination you choose. You can delete your account from inside the app.
Who we are
Kudos Learn (“Kudos”, “we”, “us”) is operated by Kudos EdTech Ltd, trading as Kudos Learn, from London, United Kingdom. We are the data controller for the personal data described here. You can reach us at hello@kudoslearn.co.uk.
Who this policy covers
Parents and guardians who hold an account, the children they add to it, tutors and school staff who use Kudos with their students, and anyone who visits kudoslearn.co.uk. It is written to meet the UK GDPR and the Data Protection Act 2018, and for visitors in the EU, the EU GDPR.
What we collect, why, and on what basis
- Your account: your name, email address and a password (stored only as a hash), or your Google account identity if you sign in with Google. Needed to provide the service you have asked for (performance of a contract).
- Your child: a first name or nickname and a school year, which you provide. We do not collect a child's date of birth, email address or photograph, and a child never has a login of their own: practice happens under your account. Basis: our contract with you, the parent or guardian.
- Learning data: the questions answered, the answers chosen, the time taken, the misconception each wrong answer points to, and the progress and reports built from them. This is the product; we process it to provide it (contract). We also keep which questions were shown, in what order and why, and what each question looked like at the time. Without names or account details, this record is used to check and improve how Kudos chooses what a child sees next, including by training models on it (our legitimate interest in making Kudos better). It is never used for marketing, and deleting your account removes your child from it.
- Billing: your plan, its status and its dates. Card details are taken and held by Stripe; we never see or store a full card number. Basis: contract, and our legal obligation to keep accounting records.
- Technical data: your IP address, browser and device, in the server and security logs of the services that host Kudos, and a short report when something in the app breaks (which page, what went wrong, your account id if you were signed in). Basis: our legitimate interest in keeping the service secure and working. Error reports are deleted after 30 days.
- How you found us: on your first visit we note the campaign parameters in the address (such as utm_source) and the site that referred you, and attach them to your account if you sign up, so we know which advertising works. Basis: legitimate interest. It contains nothing about your child.
- Exam results, if you tell us: after results day we ask whether your child qualified, and, if you want to say, the area and the score. Only you and the other guardians on your account can see it; a tutor cannot, and your child never does. We use it for one thing: to learn, across all children, how practice relates to results, so that what we tell parents about readiness is checked against the real exam rather than guessed. Basis: your consent, which you give by answering and withdraw by deleting the entry or writing to us.
- Cookies and measurement: only with your consent, given on the cookie banner. See Cookies below.
Children
Kudos is used by children, so we follow the ICO's Age Appropriate Design Code. What that means in practice:
- A child's account is created and controlled by a parent or guardian. Children under 13 cannot sign up themselves, and no child is given sign-in credentials.
- We collect the minimum: a first name or nickname, a school year, and the practice itself.
- We show no advertising to children, build no advertising profile of any child, and never share a child's data with an advertising platform. Ad measurement, if a parent has accepted cookies, counts only the parent's actions: signing up and choosing a plan.
- A tutor or school a parent has linked to sees the child's practice and mistakes, and never the child's email, birthday, or the parent's account. A parent can unlink a tutor at any time.
- If you believe we hold a child's data without a parent's knowledge, email us and we will delete it.
Who we share data with
We do not sell personal data, and we share it only with the services that run Kudos, each bound by a contract to use it solely for us:
- Supabase (database and sign-in; our data is held in Ireland, in the EU).
- Cloudflare (serves the website and protects it from attack).
- Stripe (payments and invoices).
- Loops (sends our emails and holds the adult's contact record; never a child's name).
- Google (Google Analytics and Google Ads measurement), and Meta and TikTok (ad measurement): only after you accept cookies, and never with your name, email or your child's data.
We will also disclose data where the law requires it, for example to a court or regulator.
Where data goes
Your data lives in the EU. Some of the services above are based in the United States, and when data reaches them it leaves the UK. For each we rely on the safeguards UK law provides: the UK Extension to the EU-US Data Privacy Framework where the provider is certified under it, and otherwise the International Data Transfer Addendum to the EU Standard Contractual Clauses.
How long we keep it
For as long as your account exists. You can delete it yourself at any time from Settings. Deletion is immediate and not a request we have to process: your children's practice, progress and everything built from them are erased, any subscription is cancelled, your contact record is removed from our email service, and your sign-in stops existing. Two things outlast it: invoices for payments already made, which UK tax law requires us to keep for six years, and error reports, which are deleted on their own 30-day schedule. If you would rather we did it, write to hello@kudoslearn.co.uk.
Emails
Some emails are part of the service and are sent to every account: receipts, sign-in links, a password reset. Others are about getting the most from Kudos: a nudge when practice has stopped, a note before a trial ends, tips and offers. These are sent to you as a customer about our own service, and you can refuse them on the sign-up form, turn them off at any time in Settings, or use the unsubscribe link that every one of them carries.
Your rights
You can download a copy of this account and your children's practice, including mock papers and any exam result you have reported, from Settings, under Progress & leaving. You can also ask for a copy of the personal data we hold about you or your child, ask us to correct it, delete it, or restrict what we do with it, ask for it in a form you can take elsewhere, object to processing based on our legitimate interests, and withdraw any consent you have given. Email us and we will answer within a month. You also have the right to complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113, though we would rather you told us first so we can put it right.
Security
Data is encrypted in transit and at rest. Access to the database is controlled row by row, so a parent can read only their own family, a tutor only the students linked to them, and a child's data is never readable by anyone else. Passwords are hashed and never stored in a form we can read.
Changes to this policy
When we change this policy in a way that matters we will tell you by email or in the app before the change takes effect, and the date at the top will move.
Contact us
For anything about this policy or your data, email hello@kudoslearn.co.uk.