Privacy notice
Clevzo is used by children through their school, so we collect as little as we can and we never track or advertise to them. This notice explains what we hold, why, and who decides. It is written for schools, parents and students.
Who is responsible
Your school decides to use Clevzo and which students and staff use it, so the school is the controller of the information about its students and staff. JARY LTD (company number 17522627), registered office Suite RA01, 195-197 Wood Street, London, E17 3NU, provides Clevzo and handles that information on the school's instructions, as its processor, under a written agreement with the school. We are registered with the Information Commissioner's Office (ICO) under number C2060727. Questions about a student's information are best sent to the school first; you can also email us at hello@prepacer.com.
What we hold
About students:
- First name and surname, class and year group, from the class list the school adds, so teachers can see their results.
- A username the student chooses and a password (stored as a one-way hash, so we cannot read it). Students do not need an email address.
- Their answers, marks, how long a question took and which topics are finished, so the student and their teachers can see progress and mistakes to retry.
- A parent's email address from the class list, used only to send the invite and password resets.
About teachers: name, school email address, password (as a one-way hash), and the classes, homework and questions they create.
We do not use analytics or advertising cookies. We only use the cookies needed to keep someone logged in.
How marking works
Answers with one right answer, such as a number or a choice, are marked by the computer against the answer. Written answers are marked by an AI model against the question's mark points. It shows which points were met and why, the student can press “Question this mark” on any mark they think is wrong, and teachers can change any mark in the results. The AI only suggests marks and feedback on practice and homework; it does not make decisions with a legal or similarly significant effect on a student. Students' answers are not used to build advertising profiles or to train AI models.
Who else handles it
We use a small number of trusted services to run Clevzo, acting on our instructions as sub-processors. They only get what they need:
- Supabase: our database and login system. Information is stored in London, in the UK. Its support staff, including its US company, can reach it only when needed to support or run the service.
- Vercel (United States): hosts the website.
- Anthropic (United States): provides the AI used to mark written answers and to power the tutor. It receives the question and the answer or message text, never a student's name, username or email. It deletes this text within 30 days, unless its safety checks flag it (then it can be kept for up to 2 years) or the law requires it to be kept longer, and it does not use it to train its models.
- Resend (United States): sends invites and password resets.
Where information is handled outside the UK, it is protected by the UK-US data bridge or the standard contract clauses with the UK Addendum in each service's data processing agreement. We do not sell information or share it for advertising.
How long we keep it
- When the school removes a student, their access ends at once and their account is deleted 30 days later.
- When the school's licence ends, accounts and results are kept for 90 days so the school can renew, then deleted.
- A school can ask us to delete its information sooner.
Keeping it secure
Information is encrypted in transit, passwords are stored as one-way hashes, and access to the database is restricted. Students only see their own work, and teachers only see their own school. If a data breach is likely to put anyone at risk, we will tell the school straight away so it can meet its duties.
Your rights
Under the UK GDPR, students, parents and staff have the right to be informed, to access their information, to have it corrected or erased, to restrict or object to how it is used, and to receive a copy. Because the school is the controller, please ask the school; we will help it answer within one month. If you are unhappy with how information is handled you can complain to the Information Commissioner's Office (ico.org.uk).
Children's privacy
We follow the UK Age Appropriate Design Code: high-privacy settings by default, no profiling, no nudging and no adverts. Group Challenge, if the school switches it on, only works between students of the same school.
Changes to this notice
If we make a significant change we will tell schools before it takes effect.
Last updated 27 October 2026. Back to home