Skip to content
◆ Data protection

Safe by design.

We built SATS LION to hold as little about a child as possible. For a brand new company with no track record to lean on, getting this right is the trust we offer schools and families.

Data minimal

A pupil carries only a first name and a year group. No pupil email, no password, no home address, no date of birth.

No ads, no trackers

We run no advertising and no third-party tracking technology. Privacy-first analytics only, never Firebase Analytics or ad SDKs.

Pupils have no accounts

Children join with a class code and a personal student code. There is nothing for a child to forget, lose or have stolen.

Children's Code by design

Built to the ICO Age Appropriate Design Code: high privacy defaults, opt-in and effort-based social, no nudge tricks, no loot boxes.

Hosted in the EU

Data is stored with Supabase in an EU region. We do not sell data and do not share it beyond your school or family and our listed processors.

You stay in control

Schools and parents can view and delete a pupil's data at any time. Delete a class or account and the data goes with it.

What we collect, and what we do not

About a pupil we hold: a first name (or a nickname the school or parent chooses), a year group, the answers they give in the game (right or wrong, and how long they took), and their stars, streaks and titles. That is used to choose the right practice and to show their teacher or parent how they are getting on.

About a pupil we never hold: email, date of birth, home address, phone number, photographs, location, or any advertising identifier. Pupils do not even set a password.

About an adult account holder we hold: an email, a display name and a password (stored hashed by our authentication provider), so you can sign in and we can contact you.

For schools

When a school uses SATS LION, the school is the data controller and we are your data processor. We process pupil data only on your instructions and only to run the service.

We provide a Data Processing Agreement (UK GDPR Article 28) and a Data Protection Impact Assessment for your records. Our sub-processors are EU-based and listed in those documents. Request the DPA and DPIA and we will send them across before any pupil joins.

For children and parents

We wrote a short privacy notice in plain words that a Year 6 child can actually understand. Read the child-friendly notice. The full privacy policy is on our privacy page.

Bringing SATS LION to your school?

Ask us for the data protection pack and we will set up a free pilot for your class.