This policy covers the Elevenplus FC web app at web.elevenplusfc.co.uk. (The Android app has its own privacy policy — it has no accounts and keeps progress on the device.) On the web, a parent signs in with Google or Apple and adds a profile for each child — just a nickname and an emoji, never an email or surname. Each child's practice progress is saved to the parent's account, on servers in Europe, so it's there on any computer. No ads, no analytics, no tracking. You can delete a child's profile or your whole account yourself, at any time, from inside the web app.
Who we are
Elevenplus FC ("we", "our") makes 11+ practice tools for children preparing for the UK 11+ entrance examination. This policy describes what the web app at web.elevenplusfc.co.uk handles and how. We are the data controller for the information described here.
Published by: Elevenplus FC
Contact: support@elevenplusfc.co.uk
What we collect
About the parent
- Sign-in details from Google or Apple: your email address and an account identifier. Google may also share your name and profile picture; we don't display or use these. If you use Apple's "Hide My Email", we receive a private relay address instead.
- Premium, if you unlock it with an app code: the Google Play order number you enter (the "app code"), which we store with your account so Premium stays on, and the date you unlocked it.
We never see or store your Google or Apple password, or any payment details.
About each child
- Profile: a first name or nickname (up to 20 characters) and an emoji avatar that you choose. Nothing else — no surname, email, school, age or date of birth.
- Learning progress: which vocabulary words have been studied and when each is next due for review, experience points, and how often comprehension questions of each type (for example "finding information" or "word meanings") were answered correctly.
- Generated reading passages: comprehension passages created for the child by the AI practice feature, with their questions.
Answers typed during practice (spellings, cloze answers, quiz choices) are checked in the browser and are not saved — only the resulting progress above is.
Why we use it
We use this information only to provide the service you signed up for: to let you sign in, keep each child's practice separate, and remember their progress so the right words come up for review. Our lawful basis under the UK GDPR is that this is necessary to provide the service you have asked us for. We do not use it for marketing, profiling or advertising, and we never sell it.
Unlocking Premium with an app code
If you bought Premium in the Android app, you can enter its app code — the Google Play order number from the app's Parent Zone or your Google receipt email — to unlock Premium on the web. Our server asks Google Play whether that order is a completed, unrefunded purchase of Elevenplus FC Premium. Google tells us the order's status and the product bought; we don't receive your name, email or card details from Google. The Android app itself sends nothing for this — you type the code in yourself.
AI-generated practice
Two optional features use Google's Gemini AI, through our own server:
- "Generate a new passage" asks Gemini to write a comprehension passage. We send instructions and the titles of passages the child already has (so it writes something different) — nothing the child has written.
- Cloze tests send the text of the chosen reading passage to Gemini so it can pick words to blank out.
Neither sends the child's name, your email, or anything the child has typed. Requests are checked against your sign-in so only signed-in families can use them, and generated content passes through Google's safety filtering at a stricter-than-default level suitable for children.
What we don't collect
- No analytics, usage tracking or session recording.
- No advertising, and no advertising or tracking cookies.
- No location, camera or microphone access.
- No payment details — the web app is free.
- No contact with children: we never email or message a child.
Service providers
We use a small number of providers to run the web app. Each processes data only to provide its part of the service:
- Google Firebase (Google Ireland / Google LLC) — sign-in, and storage of child profiles and progress. Profiles and progress are stored in Google Cloud's European multi-region (Belgium and the Netherlands).
- Google Sign-In and Sign in with Apple — only if you choose them to sign in.
- Google Gemini API — generates practice passages and cloze tests, as described above.
- Google Play Developer API — checks an app code you enter, as described above.
- Vercel — hosts the small server that relays AI requests and checks sign-in.
- Netlify — hosts the web app's pages.
Some of these providers may process data outside the UK; where they do, they rely on the UK's approved safeguards for international transfers.
Children's privacy
The web app is designed for children aged roughly 8–11, used with a parent. Children cannot create accounts: a parent signs in and creates each child's profile, which holds only a nickname and an emoji. We've designed the web app with the UK Information Commissioner's Age Appropriate Design Code in mind — collecting the minimum needed, with no tracking, no nudges to share data, and privacy-protective settings by default.
Browser storage
The web app stores a few things in your browser to work properly: your sign-in session, which child was last selected on this computer, and a copy of recent progress so practice isn't lost if the connection drops. These are essential to the service, are not used for tracking, and are cleared when you sign out of your browser's site data. We don't use advertising or analytics cookies.
Keeping and deleting data
We keep a child's profile and progress until you delete it. You can do this yourself at any time:
- Delete one child: on the "Who's practising?" screen, choose Manage profiles, then Delete next to the child. Their profile, progress and generated passages are removed immediately.
- Delete your whole account: on the "Who's practising?" screen, choose Delete my account at the bottom. This removes every child profile and all progress, then your sign-in.
Deleted data may remain in Google's encrypted backups for a short period before it's overwritten. If you unlocked Premium with an app code, we keep a record that the order number has been used (without your email or any child data), so the same code can't unlock someone else's account. You can also email us to ask for deletion.
Your rights
Under the UK GDPR you can ask to access, correct or delete the personal data we hold about you or your child, ask us to restrict its use, or object to it. Email support@elevenplusfc.co.uk and we'll respond within one month. If you're unhappy with how we've handled your data, you can complain to the Information Commissioner's Office at ico.org.uk.
Changes to this policy
If we change how the web app handles data — for example, if we add a way to move progress between the Android app and the web — we'll update this page and the date at the top before the change takes effect, and tell signed-in parents in the web app about significant changes.
Contact
- Email: support@elevenplusfc.co.uk