Data summary for schools
Last updated: 18 September 2026 · One page, for your data protection records.
| What is stored |
Teacher or parent: email address (for sign-in codes). Pupil: first name or nickname, year group, the year they work at, a picture chosen by the app. Work: each answer (topic, question, right or wrong, time taken) and check results. Devices: a rough device name, such as "iPad · Safari", including a child's one home device if the teacher sets up home access. |
|---|---|
| Never stored | Full names, dates of birth, addresses, photos, health or special educational needs information. There is nowhere to enter them. |
| Where it is hosted | DigitalOcean, London data centre (United Kingdom). |
| Who can see it |
The teacher who added the pupils, after signing in, and only once the teacher area is unlocked with their PIN. Resend (email delivery) receives only the teacher's email address and the sign-in code. [Confirm Resend's data region.] No advertising, tracking or analytics. Data is never sold or shared. |
| How it is protected |
Encrypted on the server (AES-256), and encrypted on tablets. No passwords: one-time email codes that expire after 10 minutes. Teacher area locked by a PIN on shared tablets, locking itself after 15 minutes unused. HTTPS for every connection; limits on repeated sign-in and PIN attempts. |
| How long it is kept |
Pupils and their work: until the teacher removes the pupil or deletes the account. Sign-in codes: 10 minutes. Sign-ins: up to 30 days. Backups: [how long backups are kept]. |
| How it is deleted |
Remove a pupil: their details and all their work are deleted. Delete the account (Settings): everything is deleted, after an option to save every pupil's report as a PDF. Lost or shared tablet: order it to clear children's work from Settings; it clears the next time it goes online. Home access: switched off by the teacher at any time; the home device is cleared the next time it goes online. |
| Roles | The school decides which pupils are added and why (data controller). ZooNumeria stores the data only to run the app for the school (data processor). A data processing agreement is available on request. |
| Contact | [Organisation name] · our contact address |