Who we are
Nudge is operated by F&F Ventures Ltd, a company registered in England and Wales (company number 16204942). When we say "Nudge", "we", "us" or "our" in this policy, we mean F&F Ventures Ltd.
Contact: support@nudgeapp.co
The short version
We collect only what we need to run Nudge. We never sell your data or your child's data. We never show your child advertising. Parents are in full control of their child's account.
What data we collect and why
From parents:
- Email address and password — to create and secure your account
- Payment information — processed by Stripe on our behalf. We never see or store your full card details
- Name — so we can address you properly
- Children's profiles you create — name, year group, and PIN (stored as a secure hash, not plain text)
From children:
- First name and PIN (hashed) — for login only
- Year group — to show age-appropriate revision content
- Revision session data — topics practised, scores, session duration, dates
- Homework help chat messages — to generate Nudge's responses and flag weak areas to parents
Automatically collected:
- Device type and browser — for technical compatibility only
- Session timestamps — for streak tracking and parent notifications
What we do NOT collect from children:
- Email addresses
- Phone numbers
- Location data
- Photos or camera access
- Social media profiles
- Behavioural advertising data
Legal basis for processing (UK GDPR)
- Contract performance — processing parent account data to deliver the subscription service
- Legitimate interests — session logging, streak tracking, parent notifications, improving the service
- Legal obligation — retaining financial records as required by HMRC
For children's data specifically, we rely on the parent's contract with us as the legal basis. We do not rely on children's consent.
The Children's Code (ICO Age Appropriate Design Code)
Nudge is designed for children aged 7–11. We comply with the ICO's Age Appropriate Design Code. This means:
- We apply privacy by default — the most protective settings are on by default for child accounts
- We collect the minimum data necessary from children
- We do not profile children for commercial purposes
- We do not use nudge techniques to encourage children to share more data than necessary
- We do not serve advertising to children
- Parents have full visibility and control over their child's data at all times
- We make our practices transparent and age-appropriate
How we use your data
- To operate and personalise the Nudge service
- To generate parent progress reports and notifications
- To track revision progress and identify weak areas
- To process subscription payments via Stripe
- To send transactional emails (login alerts, session summaries, weekly reports)
- To improve the accuracy and quality of the AI tutoring
We do not use your data or your child's data for marketing to third parties.
How long we keep your data
- Active account data: kept while your account is active
- Child session and revision data: kept for 2 years from the date of the session, then deleted
- Payment records: kept for 7 years as required by HMRC
- Deleted accounts: all personal data deleted within 30 days of account deletion request
Your rights (UK GDPR)
You have the right to:
- Access the personal data we hold about you and your child
- Correct inaccurate data
- Delete your account and all associated data
- Object to processing based on legitimate interests
- Restrict how we process your data
- Portability — receive your data in a machine-readable format
To exercise any of these rights, email support@nudgeapp.co. We will respond within 30 days.
You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.
Changes to this policy
We will notify you by email of any material changes to this policy at least 14 days before they take effect.