Privacy Policy

1. Who We Are

Street Smart ("we", "us", "our") operates the Street Smart educational platform at streetsmartkids.co.uk. We are committed to protecting the privacy of our users and the children in their care.

2. Information We Collect

We collect the following categories of information:

• Account information:Email address of the parent or guardian who registers.
• Family profile data:Family name, child nicknames, age bands, and learning preferences you provide during onboarding.
• Usage data:Lessons started and completed, answers selected, time spent, streaks, and progress statistics.
• Billing information:Subscription status and payment metadata. Full card details are handled by Stripe and never stored on our servers.
• Technical data:IP address, browser type, and device information collected automatically when you use the Service.

3. Children's Privacy

We take children's privacy very seriously. Child profiles are created and managed by registered parent or guardian accounts. We do not collect personal data directly from children, we do not display advertising to children, and we do not sell children's data. Child profiles use nicknames and age bands — not full names or dates of birth. All child data is accessible only to the parent account holder.

4. How We Use Your Information

• ✓To provide, maintain, and improve the Service
• ✓To personalise lesson recommendations based on age band and progress
• ✓To send lesson reminders and service notifications (if enabled)
• ✓To process payments and manage subscriptions
• ✓To respond to support requests
• ✓To analyse usage patterns and improve content quality
• ✓To comply with legal obligations

5. Legal Basis for Processing (UK/EU Users)

We process your personal data on the following legal bases: performance of a contract (to deliver the Service you signed up for), legitimate interests (to improve the Service and prevent fraud), consent (for marketing communications, where separately obtained), and compliance with legal obligations.

6. Data Sharing

We do not sell your personal data. We share data only with trusted service providers who help us operate the Service:

• SupabaseDatabase, authentication, and file storage
• NetlifyHosting and content delivery
• StripePayment processing

All providers are contractually bound to process data only as instructed and to maintain appropriate security standards.

7. Data Retention

We retain your account data for as long as your account is active. If you delete your account, we will delete your personal data within 30 days, except where we are required to retain it for legal or financial compliance purposes.

8. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• →Right to access the personal data we hold about you
• →Right to correct inaccurate data
• →Right to erasure ("right to be forgotten")
• →Right to restrict or object to processing
• →Right to data portability
• →Right to withdraw consent at any time

To exercise any of these rights, contact us at privacy@streetsmartkids.co.uk.

9. Security

We implement industry-standard security measures including encryption in transit (TLS), row-level security in our database, and regular security reviews. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

10. Cookies

We use only essential cookies required for authentication and session management. We do not use tracking cookies or third-party advertising cookies.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or through the Service. The "last updated" date at the top of this page indicates when the policy was last revised.

12. Contact Us

For privacy-related questions or requests, contact us at privacy@streetsmartkids.co.uk.