How we use your data & AI

• • Your parent email, used to sign in.
• • Your child's chosen hero name and avatar. These are made-up, not real names — pick anything.
• • Progress and scores per question pack, so the saga map can pick up where your child left off.
• • A small amount of device-local preferences (theme, sound, dyslexia mode).

We do not store your child's real name, age, school, photo, or location.

• • The AI tutor is off by default. A parent must switch it on in the Parent Console ("Enable AI Tutor Explanations"). While it is off, nothing is ever sent to the AI provider — the app shows the built-in explanation instead.
• • Before each call we strip anything that looks like a name or email from the question text — the AI provider only sees the maths or English problem and the answer the child gave.
• • Once switched on, it only runs when you tap "Explain this answer" — never automatically in the background.
• • There is a daily cap of 30 explanations per account to keep usage sensible.
• • AI explanations are not stored long-term — they're generated on demand and displayed once.

We don't run advertising in the app, we don't sell or share progress data with third parties for marketing, and we don't include third-party analytics or social trackers.

The outside services we rely on are listed below, and nothing else receives your data:

• • Supabase (EU region) — database, sign-in and file storage.
• • Google (Gemini API) — AI tutor explanations, only when a parent has switched the tutor on and your child taps the button. It receives the question and answer text only.
• • Lovable — hosts the app (on Cloudflare) and sends our emails from notify.seagquest.com, including the alert we get when someone signs up or reports a question.

Data is held while your account is active. During the pilot, all pilot data is deleted 30 days after the pilot ends unless you ask us to keep the account going.

Reset progress (data-only) — clears quiz history, XP and streaks but keeps the account and child profile so you can start fresh. Sign in, open the Parent Console (PIN-protected) and tap "Reset All Progress".

Delete account permanently (full deletion) — sign in, tap Profile in the app, scroll to the bottom and tap "Delete account permanently". You'll be asked to confirm with your password. We then remove your account, your child's profile and progress, your parent email, and any custom packs you authored. There is no recovery — gone is gone.

If you'd rather email us, write to hello@seagquest.com and we'll do the same and reply when it's done.

If your child taps Report or "I think I was right!", we store the question, the answer given, the reason chosen and any note typed, so a human can check it. A short alert email is sent to us so we can act on it quickly. The note box asks children not to type their name — please remind them; anything personal typed there is deleted when we close the report.

SEAG Quest is designed around the ICO's Age Appropriate Design Code (the Children's Code) and UK GDPR. This summary records the decisions we have taken; a full Data Protection Impact Assessment is maintained alongside it.

• • Lawful basis. Account and progress data are processed under legitimate interests (providing the practice service a parent has asked for), and always on the back of explicit parental consent given at sign-up. The account holder is the parent or guardian, never the child.
• • Data minimisation. We collect the smallest set of fields that makes the product work: a parent email, a made-up hero name and avatar, a year group, and question-level progress. No real names, ages, schools, photos, locations or contact details for the child.
• • Local-first architecture. Preferences such as theme, sound, reader/dyslexia mode and in-progress quiz state are held in the browser's local storage on the child's own device and are never uploaded. Only progress needed for the map and parent reports is synced to our database.
• • Default high privacy. No advertising, no third-party analytics or tracking pixels, no profiling for marketing, no nudge techniques that pressure extended use, and no public sharing of a child's progress.
• • Parental controls. The Parent Console is PIN-protected and server-verified, and gives export, reset and permanent deletion in a few taps.
• • Retention. Data is kept only while the account is active. Deleting the account removes the profile, progress, parent email and any custom packs, with no recovery.
• • Processors. Hosting and database (EU region) and the AI tutor provider, which receives only the sanitised question and answer text on a direct tap.