The Revision Wizard

Privacy Policy

Last updated: 7 July 2026

1. Introduction

The Revision Wizard ("we," "our," or "us") is committed to protecting your privacy and handling personal data responsibly. This Privacy Policy explains how we collect, use and protect personal data when you use our websites and mobile applications (the "Service").

The Service is based in the UK and designed primarily for UK users, though it is accessible worldwide. We provide gamified learning games for children, managed by an adult account holder, and we process data relating to those users and their interactions with the Service.


2. Who We Are (Data Controller)

The Revision Wizard is a service operated by a sole trader based in the United Kingdom, who is the data controller responsible for your personal data under the UK GDPR.

For any privacy question, or to exercise your rights, contact us at [email protected].


3. Information We Collect

3.1 Information you provide

3.2 Information collected automatically


4. How We Use Your Information


5. Legal Basis for Processing


6. Data Sharing and Third Parties

We do not sell your personal data. We share data with the following processors and partners only as needed to run the Service:

ProviderPurpose
StripeSubscription payments (web)
Apple App Store / Google PlayIn-app purchases and subscriptions (App)
Auth0 (Okta)Authentication and account security
CloudflareHosting, security, database and web analytics
BrevoTransactional email and email drips
MailchimpNewsletter sign-up and delivery (opt-in only)
GooglereCAPTCHA (contact-form spam protection) and Google Analytics
Legal authoritiesWhere required by law

7. Shared Leaderboards Between Groups

The Service lets Admin Users connect their Groups using share codes so children can appear on shared leaderboards. Where an Admin User chooses to use this feature, a Child User's username and progress statistics may be visible to the other connected Group(s). No contact details or account credentials are shared.

Admin Users decide whether to create, share, accept, reject or block these connections and can revoke them at any time. If you would like a connection removed, an Admin User can do this in the Service, or you can contact us.


8. Cookies and Analytics

We use a small number of cookies and similar technologies. Essential cookies are needed for the Service to work (for example, keeping you signed in via Auth0). Non-essential cookies — including Google Analytics and Google reCAPTCHA — are used only with your consent, and you can manage your choices via your browser settings or any cookie controls we provide.


9. Fonts and External Resources

Our websites use Google Fonts to display custom fonts. When your browser requests a font, Google may receive your IP address and technical details. No tracking cookies are set for font delivery. See Google's privacy policy for more.


10. Data Storage and Security

We apply appropriate technical and organisational measures to protect personal data. Authentication credentials are managed securely by Auth0, and other data is stored in Cloudflare's infrastructure with access controls and protections in place.


11. Data Retention


12. Your Rights

As a UK/EU user, you have rights under the UK GDPR and the Data Protection Act 2018, including the right to:

To exercise any right, email [email protected]. If you are unhappy with how we handle your data, you can complain to the UK Information Commissioner's Office (ICO) at ico.org.uk.


13. Children's Privacy

The Service is used by children, but child accounts are created and managed by adult Admin Users (parents, guardians or educators), who are responsible for the accounts they set up. We limit the personal data associated with child accounts to what is needed to run the learning games — principally a username and in-game progress — and we do not knowingly collect contact details directly from children.

We design the Service with children's best interests in mind and take account of the ICO's Age Appropriate Design Code (Children's Code). An Admin User can review, correct or delete a child's account and data at any time, or contact us for help.


14. International Data Transfers

Some of our providers (for example Stripe, Auth0/Okta, Cloudflare, Brevo and Google) may process data outside the UK. Where data is transferred internationally, we rely on appropriate safeguards — such as UK adequacy regulations or the International Data Transfer Agreement / Standard Contractual Clauses — to ensure your data remains protected.


15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will update the "Last updated" date above and, for significant changes, notify users through the Service or by email.


16. Contact Us

For any question about this Privacy Policy or your personal data, contact us at [email protected].

← Back to The Revision Wizard