Clear information for families
School data and privacy
How school-managed pupil information is used, kept and removed.
Last updated: 3 October 2026
School and ElevenSprint responsibilities
The school decides which pupils use the service, the purpose of their practice and which staff can see their results. ElevenSprint handles school-managed pupil records to provide the school’s instructed learning service. ElevenSprint separately manages staff account security, support and service administration. These arrangements must be recorded in the school’s agreed data-processing terms before onboarding; this notice is not a substitute for that agreement.
Information kept
Pupil identifiers, year groups, class membership, random-code authentication records, assignments, answers, scores and learning progress. Use pupil numbers or school-approved pseudonyms rather than full names. Pseudonymous results are still personal data. We do not require pupil email addresses, dates of birth or home addresses.
Who can see results
Authorised teachers can review their classes; school administrators can manage the school. Pupils cannot view another pupil’s results. ElevenSprint administrators may access records for authorised support, security and school instructions. Keep pupil cards private and reset lost codes.
After access ends
School learning access stops when the pilot expires or is suspended. Pupil accounts and learning records have a 90-day recovery window after the last school entitlement ends. After that window, daily cleanup becomes eligible to delete pupil identities and their linked learning records, class records, assignments, school memberships and invitations. Cleanup works in batches and completes on successful scheduled runs; failures require operator follow-up. An extension agreed before deletion starts can preserve the records. Deletion cannot be reversed once it starts.
Copies, corrections and earlier deletion
The school administrator can submit a tracked request from the teacher workspace. Expired or suspended schools can use the same request page. We verify the school’s authority, scope and instructions before fulfilling a request. Parents and pupils should normally contact their school; they may also contact support@elevensprint.com. Do not send pupil names or login codes in an ordinary email.
What deletion does not remove
Staff authentication accounts are not deleted automatically: an account may also be used personally. School contact information, request records and limited administration records are handled separately for support, accountability and any legal obligations. Deleted live records may remain inaccessible in provider backups until those backups expire. Restoring a backup requires reapplying completed deletions.
Providers and safeguards
Supabase supplies authentication and databases, Vercel hosts the app, and Fasthosts delivers transactional emails. Provider locations, any international-transfer safeguards and the applicable backup window must be included in the school’s agreement using the actual production configuration. School pupil records must not be used for advertising or unrelated purposes.
Contact
Email support@elevensprint.com for school privacy requests, incident reporting or data-processing terms.