Draft child privacy notice
Your information should never be a mystery.
This is a child-readable candidate for a future parent-owned pupil profile. It explains the proposed wider release. Approved adult-managed photo-lesson testers should use the current photo lesson notice, which explains their separate controlled test.
Draft candidate—pending qualified UK review.
A privacy professional must check this wording against the completed Children's Code assessment, data-protection impact assessment, provider contracts and real product. Pupils must also test whether the approved version is easy to understand. This text is not an approved account, subscription, privacy, cancellation, acceptable-use, copyright, complaints, safety or security policy, is not legal advice and is not accepted anywhere in the current service. General public registration, live paid checkout and public pupil-facing AI remain closed. Approved adult-managed testers have a separate controlled route, including uploads, tutoring and owner-only sandbox payments; this draft does not authorise that route. See the legal and trust status for the documents that apply to today's public preview.
Candidate version candidate-0.2 · prepared 2 October 2026 · no effective date
Photos, pages and conversations
These features are in a controlled, adult-managed test for profiles declared aged 13–16 at creation. General public AI access is not open.
- Schoolwork: selected photos or PDF pages are sent as prepared images to OpenAI for explanations, questions and source checks. The original PDF and unselected pages stay on your device. A typed answer is sent only when you ask for feedback.
- Tutor: starting a conversation sends microphone audio, temporary conversation text and readable evidence from your selected lesson to OpenAI. When an ElevenLabs voice is selected, only the tutor’s checked text is sent to ElevenLabs to create speech; it does not receive your microphone audio or uploaded images. The configured avatar provider receives the AI tutor’s generated speech to animate its face. In the Spatius preview, speech is sent through our server and the face renders on your device. Downloading its avatar assets exposes connection information, such as your IP address, to Spatius’s delivery infrastructure. Your camera is not used.
- Our storage: How2Revise does not save raw microphone recordings or conversation transcripts. Short conversation context stays in the open tab for Pause and Resume. We keep session identifiers, durations, token and speech character counts, connection outcomes and credit transactions. These are usage records, not a recording of what you said.
- Lesson storage: credit-backed scan recovery content is encrypted for up to 24 hours; an explicitly activated no-card lesson can be reopened for seven days. An optional encrypted device chapter expires within 30 days of generation. These copies contain generated lesson material and source excerpts; device chapters can also contain prepared photos. Raw typed answers are excluded. Read the storage and deletion details.
Provider handling is separate from our storage. OpenAI’s API documentation says API content is not used for training by default unless the customer opts in. Standard abuse-monitoring retention can be up to 30 days, with stated legal and safety exceptions. Requesting store: false does not establish zero retention. We have not verified a special zero-retention arrangement for this deployment.
ElevenLabs applies its standard processing and retention when its voice is selected. This preview does not use ElevenLabs zero retention mode. The Start notice identifies when ElevenLabs receives the tutor’s checked text.
The Spatius integration sends only checked tutor speech for motion generation; it does not send your microphone or uploaded image to Spatius. This does not establish zero retention or permission for general child use. The Spatius preview remains restricted to the owner’s controlled tests while its contractual and privacy review is completed. Use non-personal test pages and avoid private details in speech.
OpenAI API data controls · ElevenLabs privacy information · Spatius privacy information · Spatius terms · LiveAvatar mode and session retention · HeyGen business terms · HeyGen Data Processing Addendum · HeyGen privacy information · Privacy and rights
Read this first
- Who runs this? ECOMMERCE ONLINE LTD, company number 12568562, runs How2Revise.
- What is How2Revise for? It teaches a revision method. It is not a teacher, textbook, counsellor or emergency service.
- Is there an account now? No. Today's public reset and guided Biology practice do not create a pupil account or receive real schoolwork. Anything typed in the practice stays in that open tab and disappears when it is closed or refreshed.
- Is AI being used on my work now? The public practice does not use AI on your work. The separate approved photo-lesson test does; its current notice is linked above.
If you are aged 10–12
You can use the public method, guides and manual Reset. The guided Biology practice is written for ages 13–16. The proposed first paid service will not create an under-13 pupil profile, save your history online or send your work to an AI provider. Keep your schoolwork beside you and ask a trusted adult if this notice is unclear.
If you are aged 13–16
A future profile could be created only inside a parent-owned account after the adult says you are 13–16. The proposed service would use a simple profile name, age band, selected UK nation, accessibility choices, revision-method progress, return plan and necessary session and safety information. It would not need your own email address, exact school, home address or exact date of birth.
That age statement would be checked only when the each profile is created. How2Revise would not collect a date of birth or continually track your age, so the same profile may continue as the pupil gets older. It could not be replaced with a different pupil.
In the controlled test, choose only the photos or PDF pages you are allowed to study. Check them for private details before sending. AI can explain readable parts and ask questions. It can get things wrong. The processing summary above explains what is sent, saved and deleted.
What could a parent see?
The proposed parent view would show the profile settings, whether a revision session was completed, the method used, return timing and a suitable progress summary. It would not show every answer, ordinary private AI exchange or safety disclosure by default. A child's privacy rights belong to the child; being the paying adult does not automatically give a parent every piece of the child's information.
Who could handle information?
The minimum information could be handled by authorised How2Revise workers and assessed providers for hosting, email, payments, security and the tightly limited AI task. Payment details would be entered with Stripe; How2Revise should not receive a full card number or card security code. Information could also be shared with police, social care, a regulator or another competent authority when this is lawful and necessary to protect someone or meet a legal duty. The approved notice must name important providers and explain any international transfer safeguards before the service opens.
How long could it be kept?
- The current no-login Reset draft stays on the device for up to 24 hours and is not sent to How2Revise.
- The current scan recovery copy can remain encrypted for 24 hours, a free lesson for seven days, and an optional device chapter for up to 30 days. Provider retention is separate; see the summary above.
- Method progress would remain while the account is active, then follow the approved inactivity or deletion schedule.
- Payment, agreement, complaint, safety and security records may need separate limited periods required by law or a recorded risk decision.
The approved notice must give concrete periods that match the live deletion and backup systems. This candidate does not invent them.
Things not to type or upload
Do not give How2Revise your full name, address, exact school, phone number, password, health information or another person's private details. Do not upload a whole textbook, exam paper, paid resource, confidential school document or anything you are not allowed to use. A real scanner must repeat this reminder immediately before sending anything.
AI can be wrong
The AI can explain your page and ask practice questions. It could misunderstand the page. You would confirm or change its suggestion and use the original material or a teacher to check subject facts. It must not write assessed work, predict a grade, make an important decision about you, pretend to be a person or ask you to keep secrets. Read the current AI transparency page.
Your choices and rights
Depending on the law and situation, you may ask what information is held about you, ask for a copy, correct it, ask for deletion or restriction, object, withdraw a consent, and complain. You may be able to ask directly if you understand the decision. We should not force you to use an unsafe parent as the route to privacy help.
For a privacy question, contact privacy@how2revise.com. For a complaint or human review, use the draft complaints route. Do not include schoolwork or more personal information than is needed.
You can also complain to the Information Commissioner's Office.
If something feels unsafe
Stop using the revision activity and go to a safe trusted adult. If anyone is in immediate danger in the UK, call 999. A child or young person can contact Childline free on 0800 1111. How2Revise email is not a crisis line and secrecy cannot be promised when someone may be at risk.
What has not been approved
The lawful-basis map, provider and international-transfer details, retention periods, parent visibility, age/authority flow, safety handling and wording across all four UK nations still need qualified review and child-comprehension testing. This page has no effective date and must be replaced—not merely relabelled—before pupil profiles or real scans open.