Privacy Policy

1. Introduction

Daily Knowledge Tracker ("DKT", "we", "us", "our") is operated by Laxius Technologies, registered in England and Wales. We are committed to protecting personal data in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

This policy explains what we collect, why we process it, how we store it, and your rights. For how to erase your account, see Data Deletion.

2. Data we collect

We collect and process:

• Parent/guardian email (required) — account identity via Google Sign-In, communications, and access control.
• Student email (required for onboarding / PDF delivery where used) — provided by the parent/guardian.
• Year group (required) — to tailor curriculum-aligned practice.
• Age range — optional.
• School name — optional.
• Student Hub PIN — a 4-digit PIN chosen by the parent; stored as a one-way hash for Student Hub login (not recoverable).
• Names and learning records — student profile names, generated papers, attempts, scores, and related usage data.
• Technical data — authentication tokens, basic logs, and billing identifiers processed via Stripe when you subscribe.

3. Lawful basis and purpose

• Contract / legitimate interests: operating the Service, generating practice materials, and supporting parent accounts.
• Consent: parental/guardian consent to process child-related education data for learning tracking (collected at sign-up / onboarding).
• Legal obligation: responding to lawful requests where applicable.

4. Children's data

DKT is designed for parents/guardians to manage student profiles. Parents must only provide information for children they are authorised to represent. Children should not create independent parent accounts.

5. How we use data

• Account authentication and administrator approval workflows (including approval-pending access before hub use)
• Personalised paper generation and progress tracking
• Email delivery of papers or notifications (where enabled)
• Subscription billing via Stripe (when you purchase seats)
• Security, abuse prevention, and service improvement

6. Processors and infrastructure

Personal data is processed securely using Google Cloud Platform (GCP) infrastructure (for example Cloud Run, Cloud SQL, and Cloud Storage) under appropriate contractual and technical controls.

We also use processors such as Google (Sign-In), Stripe (payments), and AI providers for content generation. Prompts are designed to avoid unnecessary child PII; we do not sell personal data or allow AI providers to use your personal data to train their public models under our configuration.

7. Retention

We retain account and learning data while your account is active. When you delete your account (or we process a verified deletion request), we permanently delete or erase associated personal data from our primary systems, subject to limited technical backups that expire on a rolling schedule and any records we must keep by law.

8. Your rights (UK GDPR)

• Access your personal data
• Rectification of inaccurate data
• Erasure ("right to be forgotten")
• Restriction or objection to certain processing
• Data portability where applicable
• Withdraw consent where processing is consent-based
• Complain to the Information Commissioner's Office (ICO)

To exercise these rights, email laxiustech@gmail.com or use in-app account deletion described on Data Deletion.

9. Contact

Privacy inquiries: laxiustech@gmail.com
General support: laxiustech@gmail.com