What we hold about your family
This is the whole list. It’s written for you rather than for a regulator, and it’s generated from the same file the app uses. A test compares it against the code that erases an account, in both directions, so a table can’t be quietly added to one and left out of the other.
Atlas is not listening unless you open the microphone
The microphone is switched off for the whole session. It opens when you tap the talk button and closes when you tap it again, or by itself after three quarters of a minute. There is no wake word and nothing is recorded in the background. Between turns the browser sends silence. A child talking to Atlas out loud should have a grown-up nearby.
You can read his side of it, and everything typed to him
A typed conversation appears in full, both sides of it. A spoken one keeps Atlas's half: his questions, his explanations, what he answered. What your child says out loud is not written down, and we do not store it anywhere. The audio goes to OpenAI to be answered and stops there. So a voice conversation reads like one side of a phone call, and what was asked is usually plain from what he said back.
We never sell anything, to anyone
No advertising, no data brokers, no analytics company gets your child's work. The only companies involved are the ones that make the product run: Supabase stores it, Stripe takes the payment, OpenAI answers the questions, Vercel serves the pages.
We don't train anything on your child
Your child's work, recordings and conversations are not used to train any model, ours or anyone else's.
Everything exports, always
One button downloads the complete record for your family, as a file you can read. It's yours, and it works whether or not you're still paying. The recordings and the photographs are not inside the file; it carries a link to each one, good for an hour, so open them and save the files while the account still exists.
Deleting means deleting
Delete a recording and the audio file goes with it. Delete the account and every row and file above is removed straight away, including the customer record at Stripe that holds your card. Stripe keeps its own record of payments already taken. Encrypted backups held by our database provider expire on their own cycle.
Everything we store
The database tables are named so anyone technical can check the claim.
Your account — email, and your card details held by Stripe
- Why
- To let you in, and to take the subscription.
- Kept
- Until you delete the account, then removed straight away.
- Leaves us
- Stripe processes the payment. We never see or store a card number. Deleting the account deletes the customer record at Stripe, and the stored card goes with it.
- Stored in
- auth.users, subscriptions
The terms you accepted, and your customer id at Stripe
- Why
- So we can say which version of the terms you agreed to and when, and so the billing button can find your subscription.
- Kept
- Until you delete the account, then removed straight away.
- Leaves us
- The customer id is the same one Stripe holds. The row also has a column for where you heard about us, which nothing in the product fills in; it is empty on every account we have ever made.
- Stored in
- profiles
Each child's first name, birth month and year, and school year
- Why
- To choose the right lessons and to say their name.
- Kept
- Until you delete the child or the account.
- Stored in
- children
The subjects you chose for each child
- Why
- The year is planned from them, and unticking one takes it out of the plan.
- Kept
- Until you delete the child or the account.
- Stored in
- custom_subjects
Notices the app wrote you — a year moving up, a subject finished, the trial ending
- Why
- So the bell and the evening brief can show them once and remember they were seen.
- Kept
- Until you delete the account.
- Stored in
- notices
Which lessons were finished, and when
- Why
- It's the plan, the hours log and the local-authority report.
- Kept
- Until you delete the account. This is the record you may need to keep.
- Stored in
- progress, plan_inserts
Answers to Try It questions
- Why
- So Atlas can re-explain the thing that wobbled instead of guessing.
- Kept
- Until you delete the account.
- Stored in
- try_it_attempts, mastery_ledger
Recordings your child chooses to keep — the Telling
- Why
- So you can hear them explain it, and so the year has their voice in it.
- Kept
- Until you or your child deletes it. Deleting removes the audio file too.
- Stored in
- tellings, storage: tellings
Photographs of work you upload
- Why
- The portfolio, and the evidence in a council report.
- Kept
- Until you delete them.
- Stored in
- lesson_evidence, storage: evidence
Conversations with Atlas, in text
- Why
- Typed conversations are kept in full. From a spoken one we keep Atlas's own words. What your child says out loud is not written down, and we do not store it anywhere.
- Kept
- Until you delete the account, then removed straight away. Nothing removes them on a timer.
- Leaves us
- Voice goes directly from the browser to OpenAI, who answer as Atlas. It never touches our servers, and we never ask them to write down what your child said. Atlas's own words come back to us as text so you can read them.
- Stored in
- luna_sessions, luna_turns
What Atlas remembers about a child
- Why
- So he can use something they like to explain something they find hard.
- Kept
- Until you delete it. Every item is listed, editable and deletable in Atlas's memory room.
- Stored in
- luna_memories
The notes Atlas writes to you about a child
- Why
- The evening door asks you to approve or skip a change to next week, and the note is the reason he gives.
- Kept
- Until you delete the account, whether you said yes or no.
- Stored in
- proposals
Changes you made to the plan
- Why
- So a half-speed week or a lesson you moved keeps working the next morning.
- Kept
- Until you delete the account.
- Stored in
- plan_adjustments
The questions your child asked
- Why
- Atlas turns them into work later in the week, so they are kept in their own words until he does.
- Kept
- Until you delete the account.
- Stored in
- curiosity_threads
How grown-up each child's side of the app is pitched
- Why
- It moves with how much a child explains out loud, so the last reading is kept.
- Kept
- Until you delete the child or the account.
- Stored in
- register_signals
Extra Atlas minutes you have bought
- Why
- So the minutes you paid for are counted before the monthly cap closes a call, and so a checkout is never counted twice.
- Kept
- Until you delete the account, then removed straight away.
- Leaves us
- Stripe takes the payment. We keep the minutes, which pack it was, and Stripe's checkout id; never a card number.
- Stored in
- voice_topups
A log of what you shared, and when you opened billing
- Why
- So you can see what left the house and when, and so we can count how often a letter gets forwarded.
- Kept
- Until you delete the account. The log holds the kind of thing shared and the time, never the content.
- Stored in
- share_events, portal_access_logs
How many questions Atlas answered today
- Why
- There is a daily cap per child and per family, and this is the count behind it.
- Kept
- Until you delete the account. It is a tally, not the questions.
- Stored in
- gpt_usage
It’s yours
Both of these work whether or not you’re still paying, and neither needs you to ask us first.
The file itself is text. The recordings and the photographs are not inside it; it carries a link to each one, and those links stop working an hour after you download it. Open them and save the files before you delete the account, because deleting removes the audio and the pictures too.
Who else is involved
- Supabase — stores the database and the files.
- OpenAI — answers questions as Atlas. Voice goes browser-to-OpenAI directly. Conversations are not used to train their models.
- Stripe — takes the payment. We never see a card number.
- Vercel — serves the pages.
- Oak National Academy — wrote the lessons, under the Open Government Licence. Nothing about your child goes to Oak.
Your rights
Under UK GDPR you can ask for a copy of everything we hold, ask us to correct it, or ask us to delete it. The two buttons above do the first and the third immediately. For anything else, email support@studyden.co.uk and a human will answer.
Children’s accounts are created and controlled by a parent or carer. A child never has their own login, never receives email from us, and cannot make a payment. We keep the text of conversations with Atlas so you can read them back at any time. They stay until you delete the account, and deleting the account removes them straight away.
The other document
The terms are the sibling of this page: who runs StudyDen, what the subscription costs, how it renews and how to end it. Both are linked from the account menu and from the Family room, so you can read them again after you have signed up.
Last changed 28 August 2026. If we ever change what we hold, this page changes in the same commit as the code. That’s the point of generating it.