What we hold about your family
This is the whole list. It’s written for you rather than for a regulator, and it’s generated from the same file the app uses. A test compares it against the code that erases an account, in both directions, so a table can’t be quietly added to one and left out of the other.
Atlas is not listening unless you open the microphone
The microphone is switched off for the whole session. It opens when you tap the talk button and closes when you tap it again, or by itself after three quarters of a minute. There is no wake word and nothing is recorded in the background. Between turns the browser sends silence. A child talking to Atlas out loud should have a grown-up nearby.
You can read his side of it, and everything typed to him
A typed conversation appears in full, both sides of it. A spoken one keeps Atlas's half: his questions, his explanations, what he answered. What your child says out loud is turned into text for a moment, so Atlas can follow it and so we can tell you if something needs a grown-up. We do not keep it. The audio goes to OpenAI to be answered and stops there. So a voice conversation reads like one side of a phone call, and what was asked is usually plain from what he said back.
We never sell anything, to anyone
No advertising, no data brokers, no analytics company gets your child's work. The only companies involved are the ones that make the product run, and every one of them is named further down this page with what it receives.
We don't train anything on your child
Your child's work, recordings and conversations are not used to train any model, ours or anyone else's.
Everything exports, always
One button downloads the complete record for your family, as a file you can read. It's yours, and it works whether or not you're still paying. The recordings and the photographs are not inside the file; it carries a link to each one, good for an hour, so open them and save the files while the account still exists.
Deleting means deleting
Delete a recording and the audio file goes with it. Delete the account and every row and file above is removed straight away, including the customer record at Stripe that holds your card. Stripe keeps its own record of payments already taken. Encrypted backups held by our database provider expire on their own cycle.
Everything we store
The database tables are named so anyone technical can check the claim.
If your subscription ends and you stop using the account, we delete it and everything in it 90 days after you last signed in. We email you 14 days before, and signing in keeps it; you do not need to pay.
Your account — first name, email, and your card details held by Stripe
- Why
- To let you in, and to take the subscription.
- Kept
- Until you delete the account, then removed straight away.
- Leaves us
- Stripe processes the payment. We never see or store a card number. Deleting the account deletes the customer record at Stripe, and the stored card goes with it.
- Stored in
- auth.users, subscriptions
The terms you accepted, your customer id at Stripe, and how you found us
- Why
- So we can say which version of the terms you agreed to and when, so the billing button can find your subscription, and so we know which of the places we talk about StudyDen bring families in.
- Kept
- Until you delete the account, then removed straight away.
- Leaves us
- The customer id is the same one Stripe holds. When you sign up we note how you arrived: the kind of place (a search, a link, a post), the address of the page that sent you, and a campaign name if the link carried one. It stays with us and goes to nobody. If you joined through a creator's link or code, Stripe notes that code on your subscription so we can pay them their share; they see a count of families, never your name or email. Their link keeps the code in a cookie in your browser for 30 days, only to apply the discount.
- Stored in
- profiles
Each child's first name, birth month and year, and school year
- Why
- To choose the right lessons and to say their name.
- Kept
- Until you delete the child or the account.
- Stored in
- children
The subjects you chose for each child
- Why
- The year is planned from them, and unticking one takes it out of the plan.
- Kept
- Until you delete the child or the account.
- Stored in
- custom_subjects
Notices the app wrote you — a year moving up, a subject finished, the trial ending
- Why
- So the bell and the evening brief can show them once and remember they were seen.
- Kept
- Until you delete the account.
- Stored in
- notices
Which lessons were finished, and when
- Why
- It's the plan, the hours log and the local-authority report.
- Kept
- Until you delete the account. This is the record you may need to keep.
- Stored in
- progress, plan_inserts
Answers to Try It questions
- Why
- So Atlas can re-explain the thing that wobbled instead of guessing.
- Kept
- Until you delete the account.
- Stored in
- try_it_attempts, mastery_ledger
XP and levels, and badges from the old StudyDen
- Why
- So a child can see their level go up. XP is counted from lessons finished, questions tried and lessons taught back, never from which answers were right; we keep only the part carried over from the old app and its badges.
- Kept
- Until you delete the child or the account.
- Stored in
- xp_carry, child_badges
Recordings your child chooses to keep — the Telling
- Why
- So you can hear them explain it, and so the year has their voice in it.
- Kept
- Until you or your child deletes it. Deleting removes the audio file too.
- Leaves us
- Our server sends the recording to OpenAI to be written down, and the written words to Anthropic so Atlas can answer what was said. We keep the written version beside the recording, and both go when you delete it.
- Stored in
- tellings, storage: tellings
Photographs of work you upload
- Why
- The portfolio, and the evidence in a council report.
- Kept
- Until you delete them.
- Stored in
- lesson_evidence, storage: evidence
Conversations with Atlas, in text
- Why
- Typed conversations are kept in full. From a spoken one we keep Atlas's own words. What your child says out loud is turned into text for a moment, so Atlas can follow it and so we can tell you if something needs a grown-up. We do not keep it.
- Kept
- Until you delete the account, then removed straight away. Nothing removes them on a timer.
- Leaves us
- Voice goes directly from the browser to OpenAI, who answer as Atlas. The audio never touches our servers. OpenAI turn what was said into text; that text is checked once on our server and dropped, never stored. Atlas's own words come back to us as text so you can read them, and ElevenLabs receive those words, as text, to speak them in his voice.
- Stored in
- luna_sessions, luna_turns
What Atlas remembers about a child
- Why
- So he can use something they like to explain something they find hard.
- Kept
- Until you delete it. Every item is listed, editable and deletable in Atlas's memory room.
- Stored in
- luna_memories
The notes Atlas writes to you about a child
- Why
- The evening door asks you to approve or skip a change to next week, and the note is the reason he gives.
- Kept
- Until you delete the account, whether you said yes or no.
- Stored in
- proposals
Changes you made to the plan
- Why
- So a half-speed week or a lesson you moved keeps working the next morning.
- Kept
- Until you delete the account.
- Stored in
- plan_adjustments
The questions your child asked
- Why
- Atlas turns them into work later in the week, so they are kept in their own words until he does.
- Kept
- Until you delete the account.
- Stored in
- curiosity_threads
How grown-up each child's side of the app is pitched
- Why
- It moves with how much a child explains out loud, so the last reading is kept.
- Kept
- Until you delete the child or the account.
- Stored in
- register_signals
Extra Atlas minutes you have bought
- Why
- So the minutes you paid for are counted before the monthly cap closes a call, and so a checkout is never counted twice.
- Kept
- Until you delete the account, then removed straight away.
- Leaves us
- Stripe takes the payment. We keep the minutes, which pack it was, and Stripe's checkout id; never a card number.
- Stored in
- voice_topups
A log of what you shared, and when you opened billing
- Why
- So you can see what left the house and when, and so we can count how often a letter gets forwarded.
- Kept
- Until you delete the account. The log holds the kind of thing shared and the time, never the content.
- Stored in
- share_events, portal_access_logs
How many questions Atlas answered today
- Why
- There is a daily cap per child and per family, and this is the count behind it.
- Kept
- Until you delete the account. It is a tally, not the questions.
- Stored in
- gpt_usage
It’s yours
Both of these work whether or not you’re still paying, and neither needs you to ask us first.
The file itself is text. The recordings and the photographs are not inside it; it carries a link to each one, and those links stop working an hour after you download it. Open them and save the files before you delete the account, because deleting removes the audio and the pictures too.
Who else is involved
Every company that receives anything, and what it receives. None of them may use it for anything except doing this job for us.
Supabase
Stores the database and the files.
Everything on this page. It is our storage.
London, United Kingdom
OpenAI
Hears a spoken conversation and answers as Atlas, writes down a Telling, and indexes conversations so Atlas can find them again.
The live audio of a spoken conversation, the audio of a Telling, the text of conversations, and the first names and school years Atlas needs to talk to your family. We have zero data retention agreed with them: they do not keep it and do not train on it.
United States
Anthropic
Answers typed questions as Atlas, and writes his notes and what he remembers.
What you or your child type to Atlas, the written version of a Telling, Try It answers a child explains, and first names. Under their commercial terms they do not train on it.
United States
ElevenLabs
Speaks Atlas's replies in his voice.
Atlas's words, as text, which can include your child's first name. Never anyone's voice. Our account is set so they do not train on it.
United States
Stripe
Takes the payment.
Your email address and your card. Nothing about a child. We never see a card number.
United Kingdom and United States
Vercel
Serves the pages and counts visits to them, without cookies.
What any web server sees: your device's internet address and the pages it asks for. Our code runs in their London region.
London, United Kingdom; the company is in the United States
Resend
Sends our emails.
Your email address and the email itself. The evening and Sunday emails say what your children did, by first name.
United States
Sentry
Receives a report when something breaks, so we can fix it.
The error, the page it happened on, and the random codes that stand for an account and a child. No names, no email addresses, nothing a child wrote.
Germany
Cloudflare
Checks that the sign-in and sign-up forms are being filled in by a person.
Your device's internet address and details of your browser, on those pages only.
Worldwide
Pexels
Supplies the stock photographs on some lesson slides.
The photograph is loaded from their server, which sees the device's internet address as any website would. Nothing about your account or your child is sent.
United States
Oak National Academy
Wrote the lessons most subjects are built on, under the Open Government Licence.
Nothing about your family. A lesson video is fetched from Oak by our server, never by your child's device.
United Kingdom
Where one of these companies is outside the United Kingdom, its contract with us includes the UK's standard data-protection terms for sending personal data abroad, or it is covered by the UK's data bridge with the United States.
Your rights
Under UK GDPR you can ask for a copy of everything we hold, ask us to correct it, ask us to delete it, and ask us to stop or limit a particular use of it. The two buttons above do the first and the third immediately. For anything else, email support@studyden.co.uk and a human will answer.
Children’s accounts are created and controlled by a parent or carer. A child never has their own login, never receives email from us, and cannot make a payment. We keep the text of conversations with Atlas so you can read them back at any time. They stay until you delete the account, and deleting the account removes them straight away.
Who is responsible
STUDYDEN LTD decides what is collected and why, which the law calls the data controller. Company number 17180776, registered in England and Wales, registered office 1 Melbreak Grove, Middlesbrough, TS5 8PP. We are registered with the Information Commissioner’s Office, reference ZC135433.
Why the law lets us hold it
- Your account, your children, the lessons, the record and Atlas
- You asked us to run StudyDen for your family, and we cannot without it (performance of a contract).
- Error reports, the check that a form is filled in by a person, counting visits, and how you found us
- We need to keep the service working and safe and to know what brings families here, in ways that tell us little about you (legitimate interests). Email us if you object and we will stop where we can.
- The evening email, the Sunday letter and the first-lesson reminder
- They are part of the service you signed up for and are about your own children (legitimate interests). Each one has a switch in the Family room and an unsubscribe link.
- Islamic RE, if you switch it on
- Your explicit consent. It is off until you choose it, the switch says what choosing it tells us, and switching it off withdraws the consent.
- The microphone
- Your consent, asked for before it is ever switched on. Decline and typing still works.
- Records of payments
- Tax law requires a company to keep them (legal obligation). Stripe holds them.
If you think we have got it wrong
Tell us at support@studyden.co.uk. We will confirm we have your complaint within 30 days, look into it without delay, and tell you what we found and what we did.
You can also complain to the Information Commissioner’s Office, the UK regulator, at ico.org.uk/make-a-complaint or on 0303 123 1113. They will usually ask whether you have raised it with us first.
The other document
The terms are the sibling of this page: who runs StudyDen, what the subscription costs, how it renews and how to end it. Both are linked from the account menu and from the Family room, so you can read them again after you have signed up.
Last changed 13 October 2026. If we ever change what we hold, this page changes in the same commit as the code. That’s the point of generating it.