Privacy notice

Who is responsible

Hima Bindu Jonnalagadda is a sole trader trading as ElevenSprint and the controller of your personal information. Address: 10 Redshaw Close, MK18 7BS. Contact: support@elevensprint.com.

A short explanation for learners

ElevenSprint remembers your practice answers so you and your parent can see your progress. Your profile is private. We do not show it to other pupils, use it for adverts or ask for your address, school or exact birthday. Ask your parent or guardian if you want information corrected or deleted.

Who this service is for

ElevenSprint is a parent-managed 11+ practice service. A parent or guardian creates the account and controls learner profiles. Children should not create their own accounts or send personal information through support forms.

School-managed pupil profiles

School-managed profiles use pupil numbers or school-approved pseudonyms, which are still personal data. Schools control authorised staff access and pupil participation. School pupil accounts and linked learning records become eligible for deletion 90 days after the last entitlement ends. School administrators can request copies, corrections or earlier deletion. Read school data and privacy for the separate school arrangements, retention and request process.

Information we use

• Parent or guardian account details, such as email address and authentication records.
• Learner profile details entered by the adult, such as nickname and school year.
• Practice activity, answers, scores, timing, topic performance and saved test history.
• Plan, entitlement and usage information needed to provide the selected service.
• Support messages and basic technical information needed to secure and operate the service.

Why we use it

We use this information to provide the service requested by the account holder, generate and save practice, show progress, send weekly and monthly progress summaries, manage access, answer support requests, prevent misuse and improve reliability. Progress emails are enabled by default and the parent can turn either frequency off in Family privacy settings. We do not use learner data for advertising.

Our legal reasons

We process account and service information where it is necessary to provide the service and manage the account. We also use limited information for our legitimate interests in security, support and service improvement, provided those interests do not override a person’s rights. Where consent is required, it can be withdrawn.

Service providers

Vercel hosts the application, Supabase provides authentication and database services, and Fasthosts provides email delivery. Providers process information to deliver those services. We do not sell personal information.

Human verification

Cloudflare Turnstile checks login, registration and password-reset requests to help prevent automated abuse. Cloudflare processes technical signals from your browser and network, including your IP address, for this security check. We do not send learner profiles, practice answers or passwords to Turnstile. See Cloudflare’s Turnstile privacy notice.

Personalised suggestions

Suggestions based on practice performance are off by default. A parent can enable or disable word and lesson suggestions in Family privacy settings. Turning suggestions off does not remove completed results. Parents can still choose practice topics and review scores.

Child-data safeguards

Accounts are parent-managed and learner profiles are private by default. We minimise profile data to a nickname and school year, do not provide child-to-child messaging or public profiles, and do not collect precise location or use learner data for advertising. Parents control profiles, practice history and deletion.

Storage and retention

Completed practice history is limited by plan to the latest 5, 25 or 100 tests for each learner. Abandoned tests become eligible for deletion after 24 hours, security rate-limit counters after 2 days and operational quality events after 90 days. Scheduled cleanup runs daily; processing can take until the next successful run, and failures require operator follow-up. Vocabulary session and answer records become eligible for deletion after 90 days; mastery summaries and repetition records remain with the learner profile to support progress and avoid repeated questions. Account information remains while the account is active and support correspondence is targeted for deletion 12 months after a case closes, unless a legal or security need requires longer. Provider backups expire according to the production backup tier, so deleted data may remain inaccessible in encrypted backups until that window ends.

Public sample notifications

Starting the public sample sends our administrator an email with the test name and start time. It contains no pupil details or answers. A random attempt identifier is used temporarily to prevent duplicate alerts.

Optional pilot tests

When an adult confirms participation, we save the learner’s first answers, approximate active answering time, school year and sample version. Administrators review these to assess question quality and difficulty. Pilot reports and exports use a learner code instead of names or email addresses. Pilot records are separate from rolling practice history and become eligible for deletion 12 months after they were started, or earlier when the learner profile or parent account is deleted. Participation is optional and pupils can stop at any time.

Account security

Administrators must use multi-factor authentication. Parents can enable it in Account security. Supabase stores authenticator enrolment details and verifies time-based codes; the application does not store the codes you enter. Setup keys are shown only during enrolment and should be kept private. Resetting your password does not remove an enrolled authenticator.

Optional parent testimonials

If you consent, we publish your chosen display name and testimonial after review. Your account email and learner profile are not published. Please omit children’s names, schools and contact details. You can edit or withdraw your testimonial from the testimonial page; edits require another review. Submissions and reminder preferences remain until withdrawn or the account is deleted. Reminders appear only in the parent dashboard after several completed sessions, at most once every 30 days and three times in total. You can turn them off.

Deletion

Parents can delete a learner profile or the complete parent account from Settings. Account deletion removes the authentication account and linked learner, practice, pilot, answer and repetition-history records. You can also contact support for help with a deletion request.

Your choices and rights

You may ask to access, correct, delete or restrict use of personal information, or object to certain processing. You may also complain to the UK Information Commissioner’s Office. We may need to verify the account holder before acting on a request.

Homepage visit count

Administrators can view an aggregate count of homepage loads from when the counter was introduced. Repeat visits can count again. This counter stores only a total and its start date, without visitor identifiers, IP addresses or tracking cookies.

Contact

Email support@elevensprint.com or use the support form for privacy questions or requests.