Privacy Policy

Tutwoo Kids – kids.tutwoo.com
Last updated: 28 October 2026

The short version (for kids)

• Tutwoo Kids helps you learn. To do that, we keep a few things about you, like your nickname, your learning stage and how you are getting on with your lessons.
• If you are under 13, a grown-up (your parent or carer) sets up your account and looks after it for you.
• Please don’t tell us your full name, address, school, phone number or anything else private. Not even to the owls!
• When you ask Pip, Juno, Ziggy or Remi a question, a computer helper made by a company called Anthropic works out the answer. Your grown-up can read your owl chats. We delete them after 90 days.
• We never show you adverts and we never sell your information.
• If something feels wrong or you feel unsafe, talk to a grown-up you trust. You can also call Childline free on 0800 1111.
• You (or your grown-up) can ask us to show you what we keep, fix it or delete it. Just email [email protected].

The full version (for parents, carers and young people aged 13 to 16)

This policy explains how Tutwoo Kids collects and uses personal information, why we do it, who we share it with, how long we keep it and what your rights are. We have written it with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and the Information Commissioner’s Office (ICO) Age Appropriate Design Code (the “Children’s Code”) in mind.

1. Who we are

Tutwoo Kids (kids.tutwoo.com) is run by Tutwoo UK Limited, a company registered in England and Wales (company number [company number to be added]), whose registered office is at 167–169 Great Portland Street, Westminster, London, W1W 5PF.

Tutwoo UK Limited is the controller of the personal information described in this policy. This means we decide how and why it is used, and we are responsible for looking after it.

If you have any questions about privacy, or want to use any of your rights, please email [email protected] or write to us at the address above.

2. Who can use Tutwoo Kids

Tutwoo Kids is for learners aged 2 to 16, from Early Years to GCSE.

• Children under 13 cannot create their own account. A parent or carer creates a parent account and then adds a child profile for each child from their parent dashboard.
• Young people aged 13 to 16 may create their own account. They can choose to link it to a parent account.

3. What information we collect

From parents and carers

• Parent account details: your name, email address and password (we store passwords in a protected, encrypted form, not as plain text).
• Messages you send us: for example if you email us for help or to make a request.

About children under 13 (provided by the parent or carer)

• Child profile: a first name or nickname, a learning stage, and a username and password chosen by the parent. We ask parents not to use a child’s full name.
• We do not collect an email address, phone number, home address, school, photo or any other contact details from children.

From young people aged 13 to 16 who create their own account

• Account details: name or username, email address, password, and confirmation that they are aged 13 or over.
• Link to a parent account, if they choose to set one up.

Created when anyone uses Tutwoo Kids

• Learning information: courses started, lessons completed, quiz answers and scores, and certificates of completion.
• Owl tutor chats: the questions a learner types to our AI owl tutors (Pip, Juno, Ziggy and Remi) and the answers given, plus basic usage records (for example how many questions were asked and when).
• Technical information: IP address, browser and device type, and security logs (for example login attempts). We use this to keep the site working and secure.
• Login safety records: each time someone logs in, we note the time, the type of device and browser (for example “iPad / Safari”), and a shortened, scrambled version of the network address. We cannot turn this back into a full IP address. We use it to protect accounts and to spot accounts being shared outside the family or resold, which our terms do not allow.
• Cookies: small files that keep you logged in, keep the site secure and remember preferences such as dark mode or language. See section 10.

Things we do not do

• We do not show adverts, and we do not sell or rent personal information.
• We do not send marketing to children, and we do not profile anyone for marketing.
• We do not have public profiles or chat between users.
• We do not collect geolocation (precise location) data.

4. A note about the AI owl tutors

The owl tutors are there to answer questions about the lesson a learner is working on. To produce an answer, the learner’s question and the text of the lesson are sent to Anthropic, the company that provides the AI model. Anthropic acts as our processor: it processes this information on our instructions to generate the answer, under a contract with us.

• The owls are designed never to ask for personal information. We ask learners not to type personal details (such as full names, addresses, schools or phone numbers) into the chat. If a child does, it will be stored with the chat until it is deleted.
• Owl tutor chats are stored so that parents of children under 13 can review them in the parent dashboard.
• Chats and usage records are kept for 90 days and then deleted.
• If a child tells an owl that they feel unsafe, the owl will encourage them to talk to a trusted adult and point them to Childline (0800 1111) and to 999 in an emergency.

5. Why we use information and our lawful bases

Data protection law says we must have a valid reason (a “lawful basis”) for using personal information. Here is what we use and why.

• To provide Tutwoo Kids – creating and running parent accounts, child profiles and teen accounts; providing courses, lessons, quizzes, certificates and owl tutor answers; saving progress; showing parents their child’s progress and owl chats; sending account emails such as password resets.
  Lawful basis: contract – this is necessary to provide the service the parent (or the young person aged 13 to 16) has signed up for. Where the account belongs to a child under 13, the contract is with the parent or carer.
• To keep the service safe and secure – security logs, login safety records, preventing misuse (including account sharing outside the family and account reselling), limiting how many devices can be logged in to one account at once, protecting accounts, fixing faults.
  Lawful basis: legitimate interests – our interest, and our users’ interest, in a safe, secure and working service. UK data protection law recognises network and information security as a legitimate interest. We have considered children’s interests and keep this to what is necessary.
• To answer your questions and handle requests and complaints.
  Lawful basis: legitimate interests in helping our users, and legal obligation where the law requires us to respond (for example to data protection requests and complaints).
• To keep records the law requires – for example, if paid plans launch, financial records.
  Lawful basis: legal obligation.
• To translate a page when you ask using the optional Google Translate tool.
  Lawful basis: consent – we only send page text to Google when a visitor chooses another language. See section 7.
• Optional cookies or similar technology, if we ever use them beyond the essential ones described in section 10.
  Lawful basis: consent, where the law requires it. You can withdraw consent at any time.

We do not use children’s information in ways that are known to be harmful to their wellbeing, and we do not use “nudge” techniques to encourage children to share more information or switch off privacy protections.

6. Children under 13 and parental involvement

Under Article 8 of the UK GDPR, where an online service relies on consent to process a child’s information and the child is under 13, consent must be given or authorised by a person with parental responsibility. Tutwoo Kids goes further than this in practice: every account for a child under 13 is created and managed by a parent or carer, and our main lawful basis is our contract with that parent or carer.

Parents and carers of children under 13 can, from the parent dashboard:

• see their child’s progress, lesson completion and quiz results;
• read their child’s owl tutor chats; and
• delete a child profile at any time.

Young people aged 13 to 16 can create and manage their own account. If they choose to link to a parent account, the parent can see their learning progress, but not their owl tutor chats.

7. Who we share information with

We only share personal information where needed to run Tutwoo Kids, and we never sell it. We use these service providers, who act as our processors and may only use the information on our instructions:

• Anthropic – provides the AI model that powers the owl tutors. It receives learners’ questions and the lesson text needed to answer them.
• Our hosting provider – runs the virtual private server, located in the UK or European Economic Area (EEA), where the website and its data are stored.
• Our email delivery provider – an SMTP email service that sends account emails such as password resets. It receives the email address and the content of the email.

Google Translate (only if you choose it): our pages include an optional Google Translate tool. If you choose a different language, the text of the page and technical information such as your IP address are sent to Google so it can translate the page. Google handles this under its own terms and privacy policy, so please read those before using the tool. If you do not choose a different language, nothing is sent to Google for translation.

We may also share information if the law requires it (for example, with the police or a court), to protect someone’s safety, or if our business is reorganised or sold (in which case this policy would continue to protect the information).

8. International transfers

Our website is hosted in the UK or the EEA. The UK has decided that the EEA has an adequate level of data protection.

Anthropic may process owl tutor questions and answers in the United States. When personal information is sent outside the UK, UK law requires that it stays protected. To protect it, our contract with Anthropic (its Data Processing Addendum) includes the UK International Data Transfer Addendum to the EU Standard Contractual Clauses (the “UK Addendum”). This is a set of standard contract terms approved under UK data protection law, which requires Anthropic to protect the information to UK standards. You can ask us for more information about this safeguard at any time.

9. How long we keep information

• Owl tutor chats and usage records: 90 days, then deleted.
• Parent accounts, child profiles and teen accounts, with learning progress, quiz results and certificates: for as long as the account or profile exists.
• When an account or child profile is deleted: we remove the information from our live systems within 30 days. Copies in our secure backups are overwritten in the normal backup cycle, and until then are not used for anything else.
• Login safety records and security logs: 30 days, then deleted.
• Emails and requests you send us: as long as needed to deal with them, and for a reasonable period afterwards in case of follow-up questions.
• Records the law requires us to keep (for example financial records if paid plans launch): for the period the law requires.

10. Cookies

We use only essential cookies and similar technology. These:

• keep you logged in and keep your account secure; and
• remember your preferences, such as dark mode or your chosen language.

UK law allows these cookies without consent because they are strictly necessary for the service you asked for, or because they only change how the site looks or works to match your choices. You can ask us to stop using preference cookies by emailing us or by not setting those preferences, although the site may then forget your choices. We do not use advertising cookies or cookies that track you across other websites.

If you choose to use Google Translate, Google may set its own cookies. If we ever add any other non-essential cookies, we will ask for consent first and update this policy.

11. Keeping information safe

We use appropriate technical and organisational measures to protect personal information, including encrypted connections (HTTPS), protected password storage, restricted staff access and regular security updates. Privacy settings are high by default.

12. Your rights

You have the following rights under UK data protection law:

• Access – to ask for a copy of the personal information we hold about you.
• Rectification – to ask us to correct information that is wrong or incomplete.
• Erasure – to ask us to delete your information.
• Restriction – to ask us to limit how we use your information.
• Objection – to object to us using your information where we rely on legitimate interests.
• Portability – to ask for information you gave us in a commonly used, machine-readable format, where we rely on contract or consent.
• Withdraw consent – where we rely on consent, you can withdraw it at any time.

How to use your rights: email [email protected]. We will reply within one month (this can be extended in some cases, and we will tell you if so). We may need to check who you are before we act, and we will ask for no more information than we need.

Parents and carers of children under 13 can use these rights on their child’s behalf. Many things can be done straight from the parent dashboard, such as deleting a child profile.

Young people aged 13 to 16 can use these rights themselves. A parent may also ask on their behalf, but we will take the young person’s own wishes and best interests into account.

13. Complaints

If you are unhappy with how we have used personal information, please tell us first by emailing [email protected] with “Data protection complaint” in the subject line. We will acknowledge your complaint within 30 days, look into it without undue delay, keep you updated and tell you the outcome.

You also have the right to complain to the Information Commissioner’s Office (ICO), the UK’s data protection regulator:

• Website: ico.org.uk/make-a-complaint
• Helpline: 0303 123 1113

The ICO will usually ask you to raise your complaint with us first.

14. Changes to this policy

We may update this policy, for example if we add new features or the law changes. We will change the “last updated” date at the top. If we make important changes, we will tell parents and account holders by email or with a clear notice on the site before the changes take effect, and update the short version for kids too.

15. Contact us

Tutwoo UK Limited, 167–169 Great Portland Street, Westminster, London, W1W 5PF
Email: [email protected]