Privacy policy

What we collect

When you create an account we store your name, email address and password (hashed). When you add a child we store their first name, age and target schools. When you use the app we store practice answers, mock results and files you upload to build what we know about your child.

During onboarding we also ask some optional questions to personalise your child's prep plan: what you're already using, how involved you want to be, what you're most worried about, whether your child has a tutor (and which subjects), how confident you feel about your target school, how much time you have each week, and how you heard about Leap (including anything you type in an “other” box). None of these are required to use the app — skipping them just means we can't tailor recommendations as closely.

Depending on the features you use, we may also process:

• Scanned papers & report photos — images you upload for scan-to-mark or teacher-note interpretation. These are stored in object storage under unguessable paths and shown only to the signed-in parent account that uploaded them.
• Interview practice — microphone audio is sent for speech-to-text in real time. We do not keep the audio file; we keep the transcript text, AI interviewer turns, and any written feedback for that session.
• Payment details — if you subscribe, card details are handled by Stripe. We store subscription status and Stripe customer / subscription identifiers, not full card numbers.

Children's data

Leap is designed for parents (and tutors they invite) preparing children for 11+. Accounts are held by adults. Child profiles contain first name, age, school targets, practice history, and any content the parent uploads. We do not use children's data for advertising, and we do not knowingly market to children.

We treat child learning data as sensitive in practice: access is limited to the parent account (and any tutor the parent links), and deletion of a child profile removes that child's papers, interviews, scans, and progress from our systems (see below).

Legal basis for processing

We rely on a few different legal bases, depending on what the data is for:

• Contract— account, child, school, mock, interview, and scan data is processed because we need it to provide the service you've signed up for.
• Consent — analytics (PostHog) and advertising (Meta Pixel / Conversions API) only run if you actively accept them. You can change your mind at any time.
• Legitimate interests — fraud prevention, keeping the service secure, and understanding aggregate usage patterns we need to run and improve Leap responsibly, balanced against your right to privacy.

How we use it

We use your data to run the service: generating papers, scoring mocks, marking scanned work, running interview practice, showing standing against target schools, and sending account-related email. If you join during early access, you land on an in-app waitlist after setup; we email you when your spot is approved — there is no separate waitlist confirmation email at signup. We do not sell your personal data, and we do not send marketing email — account-related email (password resets, early-access approval) isn't marketing. If we ever want to send you anything promotional, we'll ask for your separate opt-in first, not assume it from your account.

Cookies & analytics

We use one essential cookie to keep you signed in, and a second one to remember your cookie-banner choice itself. Neither is optional — the site can't function signed-in without the first, and we need the second so we don't ask you again.

If you accept analytics or advertising, we also set a first-party leap_acq cookie that remembers which ad or campaign brought you to Leap, so we can measure whether our advertising is working.

With your consent (you'll see a banner on your first visit), we also use:

• PostHog — product analytics, so we can see how features are used and fix problems. This includes session recording (a replay of how you moved through the app — not a webcam or microphone recording of you) and, if you followed a campaign link, which campaign referred you. If you answer the optional onboarding questions above, those answers may be attached to your PostHog profile so we can see, in aggregate, which features matter to which kinds of parents — never shared outside AI for Global Goals, and never used to target advertising. Session recording can include on-screen text from the app (for example practice questions or interview transcripts visible on screen).
• Meta Pixel & Conversions API— lets Meta (Facebook/Instagram) know when someone who clicked one of our ads goes on to sign up, so we can tell whether our ads are working. Meta receives that you visited/signed up and which ad you came from — never your child's data, and we never target advertising at children. Server-side conversion events are only sent when you have accepted advertising cookies; rejecting advertising turns both the pixel and those server events off.

Neither loads, and neither sets a cookie, until you actively accept them in the banner. Declining only turns these off — the site otherwise works exactly the same.

You can change your cookie choices at any time: Manage cookies. Withdrawing analytics consent stops further capture and session recording in that browser; withdrawing advertising consent stops further Meta measurement events and clears Meta cookies we set.

Who we share it with

We use a small number of processors to run Leap — companies that handle data on our instruction, for the stated purpose only, and aren't allowed to use it for their own ends:

• Neon — primary application database (hosted in the EU / compatible regions depending on project config).
• Vercel — application hosting, Vercel Blob for uploaded scan / report images, and cookieless Vercel Web Analytics for page-view counts.
• Anthropic / OpenAI — large language models used to generate questions, feedback, interview turns, and similar product features.
• Google (Gemini) — optical character recognition for scanned papers and uploaded report images.
• Deepgram — speech-to-text for interview practice (audio is processed to produce a transcript; we do not store the audio).
• ElevenLabs — text-to-speech for interviewer voices and some generated explainer audio.
• Stripe — payment processing when you subscribe.
• Resend — transactional email (confirmations, password resets, waitlist status).
• PostHog — product analytics and session recording (EU hosting), only with analytics consent.
• Meta Platforms Ireland Ltd — advertising measurement via Meta Pixel / Conversions API, only with advertising consent.

Where a processor is based outside the UK, transfers are covered by recognised safeguards — UK adequacy for EU-hosted services, or Standard Contractual Clauses / the UK International Data Transfer Addendum for transfers to the US.

How long we keep it

We keep account, child, and school data for as long as your account is active, plus a short period afterwards in case you want to reactivate or raise a query. Interview transcripts and scanned-paper records follow the same account lifetime unless you delete the child or ask us to erase them sooner. Once you ask us to delete your account or a child profile, we delete or anonymise the underlying personal data, typically within 30 days, including associated scan images where we still control them.

Analytics data in PostHog follows PostHog's own retention settings, which we've configured conservatively; email logs at Resend are kept only as long as needed to confirm delivery. Stripe retains payment records as required for tax and dispute handling.

Your rights & deletion

Under UK GDPR you have the right to access the personal data we hold on you, have it corrected if it's wrong, have it deleted, restrict or object to how we use it, and receive a copy in a portable format.

In the product today you can:

• Delete a child profile from Settings — this removes that child's practice history, mocks, interview sessions, scanned papers (and their images), teacher-note uploads tied to the child, and related progress data.
• Change cookie preferences at any time via Manage cookies.

To delete a whole parent account, or to exercise any other right, email hello@leap11plus.com. We aim to respond within 30 days. If you're not satisfied with how we've handled a request, you can complain to the Information Commissioner's Office (ico.org.uk).

Contact

AI for Global Goals LTD · hello@leap11plus.com