Privacy policy

Privacy Policy

Last updated: 30th September 2026

This policy explains how Checkit Education Ltd ("CheckIt", "we", "us") collects and uses personal data when you use the CheckIt website at checkitglossary.com, its sub-domains and the CheckIt mobile apps (together, the "Service"), or when you contact us.

The short version (for students)

• We only collect what we need to run CheckIt, such as your name, email address and school, and how you use the Service.
• If your school gave you your account, your school is in charge of your information. We only use it to provide CheckIt to you and your school.
• We never sell your information. If your school gave you your account, we never show you adverts and we never send marketing to you.
• You can ask to see your information or ask us to delete it. Speak to your teacher, your parent or guardian, or email us at hello@checkitglossary.com.

The rest of this policy gives the full details.

1. Who we are

1.1 Checkit Education Ltd is a company registered in England and Wales with company number 17435561.

1.2 For most of the personal data described in this policy, we are the controller, which means we decide how and why it is used. The exception is school and organisation accounts (see section 2).

1.3 We are registered with the Information Commissioner's Office (ICO) under registration number [ZAXXXXXXX].

1.4 For any questions about this policy or your personal data, email hello@checkitglossary.com.

2. School and organisation accounts

2.1 When a school or other organisation buys a CheckIt licence and sets up accounts for its staff and pupils, the school is the controller of that personal data and we process it as a processor on the school's behalf, under a written agreement (Schedule 1 of our Terms of Use) and only on its instructions.

2.2 If you use CheckIt through your school, please read your school's privacy notice, and contact your school first about your personal data. We will help the school respond to any request.

2.3 We are the controller for the contact details of school staff who buy or manage a licence, and for managing the school's customer relationship with us.

3. The personal data we collect

3.1 Information you give us:

• Account details: your name, email address, password (stored in encrypted form), account type (for example, student, teacher or parent), and your school, year group or subjects where you provide them.
• Subscription details: what you have bought and when. Card payments are processed by Stripe, and we do not see or store your full card details.
• Communications: messages you send us, and your replies to any surveys.
• Marketing preferences: whether you have agreed to hear from us or have opted out.

3.2 Information we collect automatically:

• Usage information: the pages and terms you view, searches, the features you use, your progress within the Service, and when. Our built-in analytics records each page you view together with your IP address and, if you are signed in, your account.
• Technical information: IP address, browser type and version, device type, operating system and app version.
• Cookies and similar technologies: see our Cookie Policy.

3.3 Information from others:

• Your school or organisation, if it creates your account (for example, your name, school email address and class).
• Apple or Google, if you subscribe through their app stores (for example, confirmation of your subscription status; we do not receive your payment details).
• Stripe, confirming payments and subscription status.

3.4 We do not ask for, and do not want to receive, special category data (such as health information) through the Service.

4. Do you have to give us your personal data?

4.1 You need to give us your name and email address to create an account, and payment details to buy a subscription, because we cannot provide the Service without them. Other information, such as your year group or subjects, is optional. You can use the public parts of the website without an account.

5. How we use your personal data and our legal bases

5.1 Data protection law requires us to have a legal basis for each way we use personal data. These are:

5.2 Where we rely on legitimate interests, we have balanced our interests against your rights, taking extra care where the user may be a child. You can object at any time (see section 12).

5.3 We may turn personal data into aggregated, anonymised statistics that do not identify anyone, and use these to improve the Service.

5.4 We do not use your personal data to make decisions about you based solely on automated processing that have legal or similarly significant effects.

6. Marketing

6.1 We will never send marketing content to users who are part of an organisation, excluding those who own or manage an organisation's account.

6.2 We will send you marketing emails if you have opted in, or if you are an existing customer or have asked us about CheckIt and we are telling you about similar products or services (known as "soft opt-in"). We will always give you a simple way to opt out when we first collect your details and in every message.

6.3 If you work at a school, we may contact you at your work email address about CheckIt where it is relevant to your role. You can opt out at any time.

6.4 To stop receiving marketing, click "unsubscribe" in any email or contact us.

7. Children

7.1 CheckIt is designed for use by students, and we take extra care with children's personal data. You must be 13 or over to create your own account; younger children can only use CheckIt through an account set up by their school.

7.2 We:

• collect only the data needed to provide the Service;
• use children's activity data only to provide the Service, for example to show a student and their teacher their progress, and to produce anonymised statistics that help us improve CheckIt;
• never use children's data for advertising or marketing, and never build profiles of children to target content, adverts or offers at them; and
• never sell personal data.

7.3 A parent or guardian can exercise data protection rights on behalf of their child.

8. Who we share your personal data with

8.1 We share personal data only where necessary with:

• Service providers who help us run CheckIt, acting on our instructions (listed in 8.2).
• Stripe, to process website payments. Stripe also uses some payment information as an independent controller, for example to prevent fraud and meet its legal obligations. See Stripe's privacy policy.
• Apple and Google, if you subscribe in our app. They handle your purchase under their own privacy policies.
• Google Fonts. Some pages load fonts directly from Google Fonts, which receives your IP address in order to deliver them.
• Your school or organisation, if your account is provided through it.
• Professional advisers, such as accountants and lawyers.
• Authorities, where required by law.
• A buyer of our business, if we sell or restructure all or part of it. The buyer may use your data only for the purposes for which it was originally collected.

8.2 Our current key service providers are:

8.3 We do not sell your personal data.

9. International transfers

9.1 We store your personal data in the UK. Our hosting, email and backup services all use data centres in London.

9.2 Some of our service providers are based outside the UK, and may occasionally access data from outside the UK (for example, for technical support). Some services, such as Stripe and Google Fonts, may also process data in the United States. When personal data is transferred outside the UK, we make sure it is protected by:

• a UK government decision that the country provides adequate protection (including the UK Extension to the EU–US Data Privacy Framework, where the recipient is certified); or
• the ICO's International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses.

9.3 Contact us for more information about the safeguards we use.

10. How long we keep your personal data

10.1 Deleted data may remain in our encrypted backups, which are stored in the UK, for up to 35 days before it is automatically overwritten. We do not use backups for any other purpose.

11. Keeping your personal data secure

11.1 We use appropriate technical and organisational measures to protect your personal data, including encryption in transit and at rest, secure hosting, and access controls that restrict access to people who need it. Passwords are stored in encrypted (hashed) form.

11.2 If you think your account or personal data has been misused, please contact us straight away at hello@checkitglossary.com.

12. Your rights

12.1 You have the right to:

• access the personal data we hold about you and receive a copy;
• rectification of inaccurate or incomplete data;
• erasure of your data in certain circumstances;
• restrict how we use your data in certain circumstances;
• data portability, to receive data you gave us in a commonly used format or have it sent to another organisation;
• object to our use of your data where we rely on legitimate interests, and to direct marketing at any time; and
• withdraw consent at any time, where we rely on consent. This does not affect anything we did before you withdrew it.

12.2 To use any of these rights, email hello@checkitglossary.com. We will respond within one month. There is usually no charge. We may need to confirm your identity first. If your account is provided by your school, we will pass your request to your school, which is responsible for responding.

13. Complaints

13.1 If you are unhappy with how we have handled your personal data, please contact us first at hello@checkitglossary.com. We will acknowledge your complaint within 30 days, investigate it without undue delay and tell you the outcome.

13.2 You also have the right to complain to the Information Commissioner's Office (ICO), the UK data protection regulator: ico.org.uk/make-a-complaint or 0303 123 1113.

14. Links to other websites

14.1 The Service may link to other websites. This policy does not cover them, so please read their privacy policies.

15. Changes to this policy

15.1 We may update this policy from time to time. The date at the top shows when it was last updated. If we make significant changes, we will tell you by email or through the Service.