Privacy policy

FinLe (“we”, “us”) provides the FinLe learning app at finle.uk. We are the data controller for the personal data described below. You can reach us at any time at hello@finle.uk.

• Parent account details — your email address, and an authentication record. If you sign in with Google we receive your email address from Google; we never receive your Google password.
• Child learning profiles — the first name or nickname you enter, an age, and a chosen avatar emoji. We ask you not to enter a child’s full name, school name, or any other identifying detail.
• Learning progress — which lessons and quizzes a child has completed, quiz scores, streaks, XP and badges earned.
• School data — if your child’s class joins FinLe, the school’s staff can see that child’s progress within their class, and can exchange messages with you.
• Referrals — if you invite a friend, we store the name and email address you enter so we can send that one invitation.
• Basic usage analytics — page views, approximate country, device type and referring site, collected in aggregate. We do not use advertising trackers and we do not sell data.

• To run your account and save progress — necessary to perform our contract with you.
• To send service emails (sign-in verification, password reset, school messages, invitations you asked us to send) — necessary to perform our contract, or your consent in the case of referrals.
• To show a child on the leaderboard — only where you have switched that on. It is off by default and only a nickname is ever shown. This is based on your consent and you can withdraw it at any time.
• To keep the service safe and improve it — our legitimate interest in a secure, working product.

We do not use children’s data for profiling, behavioural advertising, or any automated decision-making, and we never sell or rent personal data.

FinLe is designed in line with the ICO’s Age Appropriate Design Code. Only a parent or guardian can create an account, and by creating one you confirm you are the parent or guardian of any child profile you add. We collect the minimum needed to teach and to track progress. There are no public profiles, no direct messaging between users, no in-app purchases and no advertising. A plain-English summary written for children is available on our Privacy for kids page.

We use a small number of trusted providers to run the service:

• Cloud hosting and database — stores your account, child profiles and progress.
• Email delivery — sends verification, password reset, school messages and referral invitations.
• Google Sign-In — only if you choose to sign in with Google.
• Your child’s school — only if you or your child join a class using a class code.

These providers act on our instructions. We may also disclose data where we are legally required to.

Data is stored on servers operated by our hosting provider. Where data is transferred outside the UK, that transfer is covered by the provider’s standard contractual clauses or an equivalent safeguard.

• Account and progress data: for as long as your account is open.
• After you delete your account: removed from our live systems immediately, and from backups within 30 days.
• Referral records: 12 months, then deleted.
• Email delivery logs: 90 days.

Under UK GDPR you can ask us to give you a copy of your data, correct it, delete it, restrict how we use it, or object to our use of it. You can also withdraw consent at any time.

Two of these are built into the app: on the Parents page you can download everything we hold about you and your children as a file, and you can delete your account and all associated data immediately.

For anything else, email hello@finle.uk and we will respond within one month. If you are unhappy with our response you can complain to the Information Commissioner’s Office at ico.org.uk.

We store a small amount of data in your browser to keep you signed in and to remember which child profile is selected. We also use privacy-friendly, aggregated analytics to count page views. We do not use advertising or cross-site tracking cookies.

Data is encrypted in transit and at rest. Access to each family’s data is enforced at the database level, so one parent cannot read another family’s records. School staff can only see pupils in their own school’s classes.

If we make a material change we will update the date at the top of this page and, where appropriate, ask you to accept the new version when you next sign in.