Data and Child Safety

Our commitment

• We collect only the information genuinely needed to provide the service — nothing more.
• We never use children's information for behavioural advertising, and we never sell or share it for unrelated commercial purposes.
• Optional usage analytics is switched off unless you turn it on yourself.

Access controls

Each account's records are isolated from every other account at the database level. Photos and documents you upload are kept in private storage — they are not publicly listed, and are only turned into links when your own account, or your learner's signed-in device session, asks for them. Learner devices sign in with a family code and a private PIN — the PIN is stored only as a one-way hash, and repeated wrong attempts temporarily lock the PIN. Only a grown-up with account access can change learner settings.

Sharing portfolios and evidence

Nothing is ever shared automatically. Your records, photos and documents stay private to your account until you deliberately share a portfolio. A shared portfolio is only viewable through its private link, which contains a secret share key — it is never listed publicly, and you can protect it further with a password. A shared portfolio shows only the entries you have chosen to include; your private notes, account details and other learners' records are never included. You can revoke access at any time, and regenerating the link stops older links from working. (Evidence uploaded before September 2026 was stored using public links — if you uploaded evidence before then and would like it moved to private storage, contact us.)

Artificial intelligence

AI is used for one thing only: drafting a plain-English summary of the learning records and evidence you already saved, inside a report you asked us to generate. You review the report before using or sharing it. We do not use AI to make decisions about you or your child, and we do not profile learners.

Child protection

If you believe a learner is at risk, or you have a concern about how a child's information has been handled, contact us immediately at admin@hayseededucation.com. We are registered with the Information Commissioner's Office (registration ZC243913); registration is a legal duty and does not imply approval or certification by the ICO.