How we collect, use and protect your information
This Privacy Policy explains how Sunshine Learning (UK) Limited, trading as Mocklog ("Mocklog", "we", "our", or "us"), collects, uses, stores, shares, and protects personal data when parents, guardians, children, and visitors use the Mocklog website, web platform, mobile application, and related services (together, the "Services").
Sunshine Learning (UK) Limited is registered in England and Wales under company number 07869825. Its registered office is 27 Watford Road, Wembley, England, HA0 3ET.
For UK data protection law, including the UK General Data Protection Regulation ("UK GDPR") and the Data Protection Act 2018, Sunshine Learning (UK) Limited is the controller of personal data processed through the Services.
Mocklog is an AI-assisted educational practice platform for 11+ preparation. Because the Services are used by or for children, we aim to apply child-appropriate safeguards, data minimisation, parental control, and secure processing.
This Privacy Policy applies to parents and legal guardians who create or manage Mocklog accounts, children who use Mocklog under a parent or guardian account, users who contact us, and visitors to the Mocklog website, web platform, or mobile application.
Mocklog accounts for children must be created and managed by a parent or legal guardian aged 18 or over. Children should not create paid accounts independently.
We collect only the personal data that is reasonably necessary to provide, maintain, secure, improve, and administer Mocklog, and to comply with our legal obligations.
Depending on how you use Mocklog, we may collect:
Payments are securely processed by Stripe. Mocklog does not store or have access to your full credit or debit card details.
Mocklog currently does not ask for child names or unnecessary identifying child details. We do not currently collect child surname, date of birth, age, year group, home address, phone number, profile photo, current school attended, or exam year.
Even without a child name, some practice data may still relate to a child because it is generated when a child uses Mocklog through a parent or guardian account. This may include:
Parents should avoid entering unnecessary personal information about a child into any field, answer, support message, or future feature.
We may collect technical and usage data such as IP address, device type, browser type, operating system, app or platform version, session information, login timestamps, failed login attempts, security logs, usage events, pages or screens visited, papers generated, downloads used, feature interactions, diagnostics, and crash reports.
The app uses Google Analytics to understand usage and improve the Services. Crash reporting is provided by Sentry. The website currently uses only essential cookies required for operation. We do not currently use tracking pixels or customer support chat widgets.
Parents and children should not upload or enter unnecessary sensitive information into Mocklog. Please do not enter medical information, safeguarding concerns, passport details, national insurance numbers, card details outside the secure Stripe payment page, or special category data such as health, religion, ethnicity, disability, or similar sensitive information unless we specifically request it for a lawful and necessary reason.
If unnecessary sensitive data is provided, we may delete, anonymise, or restrict it where appropriate.
We use personal data to:
Mocklog uses Google Gemini 2.5 Flash through the Gemini API to generate or support educational practice content. AI calls are proxied through a Supabase Edge Function so that the API key is not stored inside the app.
We send limited educational inputs needed to generate or support the requested practice. These may include school-specific variables, exam-board style, difficulty level, subject mix, practice category, answer data, score data, timing data, weak topics, or similar educational context.
We do not intentionally send parent email addresses, payment details, full child identity details, home addresses, or other unnecessary identifiers to AI providers.
AI output is educational guidance only. Mocklog does not use AI to make legal, admissions, or similarly significant decisions about a child. Scores, feedback, explanations, and recommendations do not determine school eligibility, examination results, or admission outcomes.
At launch, Mocklog provides individual progress tracking only. There are no public leaderboards, percentile rankings, or user-to-user comparisons.
If comparative or benchmarking features are added later, we will aim to use anonymised or aggregated data wherever possible and update this Privacy Policy where required.
Once data is truly anonymised so that individuals cannot reasonably be identified, it is no longer personal data and may be retained and used for product improvement, statistical analysis, educational research, and platform development.
We rely on different lawful bases depending on the purpose of processing:
Where we rely on legitimate interests, we consider the rights and freedoms of users, especially children, and apply safeguards such as data minimisation, parental control, restricted access, and aggregation or anonymisation where possible.
Because Mocklog is likely to be accessed by children under parental supervision, we aim to apply child-appropriate safeguards, including:
We aim to take account of the UK Information Commissioner's Age Appropriate Design Code where applicable, including the best interests of the child, high privacy settings by default where appropriate, and clear privacy information.
We may carry out or update a Data Protection Impact Assessment where required by applicable data protection law or where new features materially change risk.
We do not sell personal data or child performance data to third-party marketing companies.
We may share data where necessary with trusted service providers and professional advisers, including:
Service providers must process personal data only for authorised purposes and apply appropriate confidentiality, security, and data protection safeguards.
App and user data is hosted through Supabase on AWS infrastructure in the EU West region in Ireland. The website is hosted through Hostinger.
Some service providers, support teams, AI providers, analytics tools, crash-reporting tools, or infrastructure systems may process personal data outside the UK or EEA, including in the United States or other jurisdictions.
Where personal data is transferred internationally, we will use appropriate safeguards where required by UK data protection law. Depending on the destination and provider, these may include UK adequacy regulations, the UK International Data Transfer Agreement, the UK Addendum to the European Commission's Standard Contractual Clauses, or other legally recognised safeguards.
We keep personal data only for as long as reasonably necessary for the purposes described in this Privacy Policy.
Parents may request deletion of an account or practice data by contacting us. We usually aim to complete verified deletion requests promptly and in any event within 30 days, subject to legal, accounting, security, dispute-related, safeguarding, or regulatory retention requirements.
We use appropriate technical and organisational measures to protect personal data. These may include SSL/TLS encryption in transit, secure authentication, password hashing, restricted administrator access, role-based access controls, backups where appropriate, monitoring and logging, rate limiting, abuse detection, staff or contractor confidentiality obligations, service provider due diligence, and security updates.
No internet-based service can be guaranteed 100% secure. Parents should keep login details confidential and contact us promptly if they suspect unauthorised access.
If we become aware of a personal data breach that is likely to result in a risk to the rights and freedoms of individuals, we will investigate promptly. Where required by law, we will notify the UK Information Commissioner's Office and, where legally required, affected individuals.
Mocklog may use cookies, local storage, app identifiers, SDKs, analytics tools, crash-reporting tools, and similar technologies to operate the Services, keep users signed in, remember settings, understand usage, improve performance, detect technical problems, and protect security.
The app uses Google Analytics for usage analytics and Sentry for crash reporting. The website currently uses only essential cookies required for operation. We do not currently use advertising cookies, tracking pixels, customer support chat widgets, or behavioural advertising profiles.
Where required by law, we will ask for consent before using non-essential cookies or similar technologies. More information is provided in our Cookie Policy.
We may send parents service emails that are necessary for account management, payments, renewals, security, legal notices, or important updates.
We may send marketing emails about Mocklog or Sunshine Learning educational products and services only where permitted by law. You can opt out of marketing emails at any time by using the unsubscribe link or contacting support@mocklog.co.uk. We do not knowingly send marketing directly to children.
Under UK data protection law, you may have rights to access, correct, delete, restrict, object to processing, receive certain data in a portable format, withdraw consent where consent is used, object to direct marketing, and raise concerns about automated decision-making and profiling.
To exercise privacy rights, contact support@mocklog.co.uk. We may need to verify your identity before responding. We aim to respond within one month, unless the request is complex or we are legally allowed more time.
Mocklog may use automated systems to generate practice papers, scores, feedback, explanations, weak-area analysis, progress indicators, and learning recommendations. Mocklog does not use personal data to make automated decisions that produce legal or similarly significant effects.
Any scores, feedback, explanations, or recommendations are for educational guidance only and should be reviewed by a parent or guardian.
If you are concerned about how we use personal data, please contact us first so we can try to resolve the issue. You also have the right to complain to the UK Information Commissioner's Office (ICO), the UK supervisory authority for data protection.
We may update this Privacy Policy from time to time to reflect changes in Mocklog, legal requirements, AI providers, payment systems, analytics tools, data practices, or business operations. Where changes are material, we will take reasonable steps to notify users through the Services or the registered parent email address.
For privacy requests, data protection questions, account deletion, child data deletion, complaints, or compliance enquiries, please contact: