Last updated: 1 September 2026
The short version
Children do not have Fayferz logins. Child profiles sit inside a parent account, so there are no child-held credentials and no child email addresses in our systems. We do not sell data, we do not build advertising profiles from lesson activity, and everything we hold about your family can be exported or deleted from your dashboard.
What we collect
Account information. Your name, email address, a hashed password, your country, how many children you are teaching, and the grade level you told us you were interested in at signup. We also record your IP address and browser user-agent string at signup and at each login.
Activity data. Which pages and courses you open, quiz attempts and scores, enrolments, and the timestamps of each. This is what produces your progress reports and attendance logs, and it is also what our administrators can see in the account activity trail.
Child profile information. A first name or nickname and a grade level per child. We do not ask for a child's date of birth, photograph, address or school.
Messages you send us. Contact form submissions and email correspondence.
Measurement data, if you consent. Where you have accepted cookies, Google Analytics 4, Google Tag Manager and advertising pixels may set cookies to measure which pages lead to signups. Declining leaves the site fully functional.
What we do not collect
- Payment card numbers. Payments are processed by our payment provider; we receive only a token and the last four digits.
- Precise location data.
- Contact lists, microphone or camera access.
- Behavioural data about children for advertising purposes. Lesson activity is never used to target ads.
Why we process it
| Purpose | Legal basis |
|---|---|
| Providing the courses and tracking progress | Performance of a contract |
| Producing attendance logs, reports and transcripts | Performance of a contract |
| Account security and fraud prevention, including the activity audit trail | Legitimate interests |
| Replying to your messages | Legitimate interests |
| Marketing emails | Consent, withdrawable at any time |
| Analytics and advertising measurement | Consent |
Children's privacy
Fayferz is bought and operated by adults. The service is directed at parents and guardians, not at children, and we structure it that way deliberately: a child using Fayferz is using their parent's account under supervision.
We do not knowingly collect personal information directly from children under 13. If you believe a child has submitted information to us, email support@fayferz.com and we will delete it.
How long we keep it
- Account and activity data: while your account is open, then 90 days after closure to allow recovery, then deleted.
- Audit logs for security events such as failed logins: 12 months.
- Contact messages: 24 months.
- Newsletter subscriptions: until you unsubscribe.
- Financial records: as required by tax law in our jurisdiction, typically seven years.
Your rights
Wherever you live, you can ask us to:
- Export everything we hold about your family in a machine-readable format.
- Correct anything inaccurate.
- Delete your account and its data.
- Withdraw consent for marketing or analytics, without affecting the service.
- Object to processing based on legitimate interests.
Account export and deletion are available directly from your dashboard. For anything else, email support@fayferz.com and we will respond within 30 days.
If you are in the UK or EU and are unhappy with our response, you may complain to your national data protection authority.
Cookies
We use three categories:
- Essential — the session cookie that keeps you logged in. Cannot be disabled while you are signed in.
- Analytics — set only after you accept, used to understand which pages lead to signups.
- Advertising — set only after you accept, used to measure ad campaigns on Google, Meta, Pinterest, TikTok and Microsoft.
You can change your choice at any time by clearing your browser storage for this site, which will show the consent prompt again.
Sharing
We share data with a small number of processors, each under contract and none permitted to use it for their own purposes:
- Cloud hosting and database infrastructure
- Transactional and marketing email delivery
- Payment processing
- Analytics and advertising platforms, where you have consented
We do not sell personal information, and we do not disclose data to third parties for their own marketing.
International transfers
Our infrastructure is primarily in the United States and the European Union. Where data moves between jurisdictions, we rely on standard contractual clauses or an equivalent transfer mechanism.
Security
Passwords are hashed with bcrypt and never stored or logged in plain text. Sessions are signed tokens held in HTTP-only cookies and are individually revocable. Administrative access to account data is limited to named staff and every administrative view of an account is itself recorded in the audit trail.
Changes to this policy
If we change this policy materially, we will email account holders at least 14 days before it takes effect. The "last updated" date above always reflects the current version.
Contact
Questions about this policy, or a request to exercise any of the rights above: support@fayferz.com.