WizMarks is a learning product for 8–11 year olds, so we hold ourselves to the standard UK law sets for children's services: collect as little as possible, keep it safe, never sell it, and let parents see everything. Plain English first, full policy underneath.
Last updated: 11 September 2026These aren't aspirations — each one describes how WizMarks is actually built.
Passwords are stored only as salted one-way hashes, all traffic is encrypted (HTTPS), account data is locked away from public access, and every AI request must carry a signed login token.
Every conversation your child has with the AI tutor is visible to you in the parent dashboard — word for word. There are no private channels and no child-to-child chat.
There is no advertising anywhere in WizMarks, no ad trackers, no analytics cookies, and we never sell or share personal data for marketing. Ever.
A child account is a username, a password and their learning progress — no email address, phone number, photo, date of birth or location.
Each child's progress and AI chat history belongs to their account alone. Access is checked on our servers on every request — one family's data is never visible to another.
Ask us and we'll send you a full copy of your family's data, or delete the lot. Deletion requests are honoured completely — accounts, progress and chat history.
This policy explains what personal data WizMarks collects, why, and what rights you have. It is written to meet the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and the ICO's Age-Appropriate Design Code (the "Children's Code"), which sets extra standards for services used by children.
WizMarks ("we", "us") operates wizmarks.co.uk, an online 11+ practice and AI-tutoring service for children aged roughly 8–11 and their parents, run from the United Kingdom. WizMarks is a trading name of Agentic Money Ltd, registered in England and Wales (company number 16358130), which is the data controller for the personal data described here. We are registered with the Information Commissioner's Office as a data controller under reference ZB937426 — you can check that entry on the ICO's public register.
For anything in this policy, contact us at hello@wizmarks.co.uk or through the contact form. We aim to reply within one working day.
Accounts are created by a parent or guardian, who then adds child profiles. This is how we obtain parental consent for a child's use of the service.
| Data | What it includes | Why we need it |
|---|---|---|
| Account details | Username, display name, password (stored only as a salted one-way hash — we cannot read it), account type (parent/child), and optionally the exam date, exam board and school year you choose to add. | To sign you in and tailor practice to the right exam and timeline. |
| Learning progress | Which questions were attempted, right or wrong answers, hints used, time taken, and skill-level scores derived from these. | This is the product: it powers the adaptive practice, misconception feedback and the parent dashboard. |
| AI tutor conversations | The messages your child exchanges with the AI tutor. | To provide the tutoring, keep context within a session, and show you the full history in the parent dashboard. |
| Payment details (parents only) | Handled by Stripe. We never see or store card numbers — we keep only a Stripe customer reference and your subscription status. | To manage your subscription. |
| Contact messages | Name, email address and message if you write to us, plus your IP address (used only to prevent spam). | To reply to you. |
| Safeguarding records (rare) | If a genuine concern about a child's welfare arises, a dated written record of what was seen or said, what we did, and who we contacted. | Because a service working with children must be able to act on a concern and evidence that it did. Kept separately from ordinary account data and shared only with the people who need it. |
| Email tips list (adults only) | Your email address and, if you give it, your first name — collected only if you sign up for our free 11+ tips. We also record the date and the IP address you signed up from, as our record that you asked to join. | To send you the free cheat-sheet and the 11+ tips you asked for. Every one of those emails has a one-click unsubscribe link, and we act on it immediately. This list is never used for children's accounts and is never shared or sold. |
When your child talks to the AI tutor, the conversation is sent through our own server to Anthropic's Claude API, which generates the tutor's replies. Under Anthropic's commercial API terms, these conversations are not used to train AI models. The AI tutor is instructed to teach — it works within the question your child is practising and does not ask for personal information.
We use a small number of specialist providers ("processors") to run WizMarks. They may only use the data to provide their service to us:
Some of these providers process data outside the UK. Where they do, transfers are protected by UK GDPR-approved safeguards such as the UK International Data Transfer Agreement or Addendum and standard contractual clauses.
We never sell personal data, and we never share it for advertising or marketing.
The ICO's Age-Appropriate Design Code asks children's services to put the best interests of the child first. Here is how WizMarks meets its key standards:
WizMarks is used by children, so it needs a route for a safeguarding concern even though nobody here ever meets your child in person or by video. Our designated safeguarding lead is Gurinder Hullait, WizMarks' founder, and a concern reaches them at hello@wizmarks.co.uk.
If we become concerned about a child's welfare — most likely from something a child has typed to the AI tutor, or something a parent tells us — we record it in writing the same day and act on it. Where the threshold is met we refer to the children's services team for the area the child lives in, and to that authority's Local Authority Designated Officer (LADO) where a concern involves an adult working with children. In an emergency, or where a child is at immediate risk, we call the police on 999. We will normally tell parents that we are making a referral, but we will not do so where telling them could increase the risk to the child — and we will not delay a referral in order to obtain consent.
We correspond with parents, not children. Nobody at WizMarks messages a child privately, connects with them on social media, shares personal contact details with them, or contacts them through any channel other than a parent. If your child ever receives a message that claims to be from WizMarks, treat it as suspicious and tell us.
If your concern is about us, please raise it directly at hello@wizmarks.co.uk; you are also entitled to go straight to your local authority's children's services or LADO without coming to us first, and to the police.
We keep account, progress and chat data for as long as you keep the account, so your child's learning history keeps working for them. That includes after a free trial ends or a subscription stops: we do not delete your child's work when access lapses, because the whole point of coming back later is to carry on from the same place. We hold it until you ask us to remove it. If you close your account or ask us to delete it, we delete personal data from our systems; payment records that we are legally required to keep (for tax and accounting) are retained by Stripe and in our billing records for the statutory period.
If you unsubscribe from the tips list we stop emailing you immediately, but we keep a minimal record that your address opted out. That record is what stops the address being added again by mistake — it is used for nothing else, and you can ask us to erase it completely at any time.
WizMarks uses one first-party cookie: a session cookie that keeps you signed in for up to 30 days. We also use your browser's local storage to cache learning progress on your device so practice stays fast. There are no advertising, analytics or third-party tracking cookies, which is why you won't see a cookie-consent banner — there's nothing to consent to.
Under UK GDPR you (and your child) can ask us to:
Email hello@wizmarks.co.uk from the parent's contact address and we'll act on it — usually well within the one-month legal limit. You also have the right to complain to the UK regulator, the Information Commissioner's Office (ICO), though we'd appreciate the chance to put things right first.
If we change this policy in any meaningful way — especially anything affecting children's data — we'll update this page, change the date at the top, and tell parents by email or a notice in the parent dashboard before the change takes effect.
Questions about anything here — or want the technical detail behind any claim? Ask us at hello@wizmarks.co.uk. We'd rather over-explain than leave a parent wondering.