Privacy at flux.study

Who we are

flux.study is operated by Clear Success Ltd (company number 13984815), registered in England and Wales at 5 Clark Close, Shipston on Stour, CV36 4HJ. We are the data controller for the information described here, and we are registered with the Information Commissioner’s Office.

ICO registration reference: ZC238939.

What we collect

About you

Your name and email address when you create an account. Your payment details are handled by Stripe and are not stored by us.

About your child

Your child’s first name, school year, and the subjects they study. A PIN you set so they can sign in without an email address. Everything they type to their tutor and everything the tutor replies. Their assessment results and progress.

You can also optionally tell us your child’s reading age, an attainment band, your reasons for seeking tutoring, and any additional context you want the tutor to have. That last box is free text, and it asks you not to put health, medical or diagnosis information in it. If you do write something like dyslexia support there anyway, we will hold it and share it with the tutor. All of this is optional, it is yours to leave blank, and it is shared with the tutor so it can teach your child better.

We do not ask for your child’s surname, address, date of birth, photograph, or the name of their school.

Why we collect it

To teach your child, to show you what they have been doing, to keep them safe while they use it, and to take payment.

We do not sell data. We do not advertise to your child. We do not profile anyone for marketing.

Why we are allowed to: you asked us to teach your child, and that agreement with you is what covers your account and sign-in, your child’s profile, everything they do with the tutor, their assessments and their progress, and your billing. We do not need to ask separately for those — without them there is no tutor.

Anything not needed to teach your child is different: website analytics, the live-chat window on our public pages, and any marketing email beyond what your account needs. Those should only happen if you agree to them first. The chat window works this way already: nothing about it loads, and it sets no cookie, until you tap the chat button yourself — that tap is the asking. Website analytics is different: it runs automatically on every page, including this one, but Vercel states that it uses no cookie and stores nothing that identifies your browser beyond 24 hours, so we do not yet have a way to ask about it and are telling you instead.

Safety

Every message your child sends and every reply the tutor gives is checked before it is shown. If something suggests your child may be at risk, the conversation is flagged and a member of our team reads it. Depending on what it is, we may contact you, and in circumstances the law requires we may contact the authorities.

Who else handles it

These are the services that process information on our behalf:

• Supabase — the database and sign-in system. This is where your child’s account and their work are stored, on servers in London.
• Anthropic — the tutor itself. What your child types is sent to Anthropic to generate a reply. Anthropic keep a copy of what is sent to them and what they send back for 30 days, and during that time their staff can look at it for safety and security reasons.
• Vercel — hosting. Every page you or your child loads is served by Vercel, from Dublin or London.
• Vercel Analytics — visit measurement. It runs on every page of the site, including the ones your child uses. It records which page was visited and when, the site you arrived from, your browser and device type, and an approximate location (country, region, city). Before the page address is sent, we replace the reference numbers it can contain for your child or for a single session, so the address names the page and not the child. On our public pages it also records four actions: choosing Pricing in the menu, choosing a plan on the pricing page, choosing to join the waitlist, and sending the waitlist form, including whether that address had already joined. These records carry no name, email address or account number. Vercel states that it sets no cookies, that the data is not associated with an IP address, and that the visitor identifier it derives from each request is discarded after 24 hours. The measurement script is loaded from va.vercel-scripts.com and the data is sent to vitals.vercel-insights.com.
• Stripe — payments. Your card details go to Stripe, not to us.
• Google — sign-in. If you choose “Continue with Google”, your browser goes to Google’s own sign-in screen and Google gives us your email address and basic profile. This is never offered to your child, who signs in with a username and PIN.
• Resend — email. Account and safeguarding notifications are sent through Resend, from Ireland.
• Sentry — error monitoring, on Sentry’s servers in Germany. Configured not to collect personal information, with request contents scrubbed.
• Intercom — live chat, on the public marketing pages and on parent account pages. Never loads on a pupil page, and on every other page nothing about it loads until you tap the chat button — before that tap there is no Intercom script, no request to Intercom, and no Intercom cookie. Once you tap it, whoever is looking at the page — including an anonymous visitor who has not made an account — has their messages, approximate location, browser and device type sent to Intercom, along with anything they choose to type, which may include their name or email address if they give it. Conversations are not linked to a child’s account or to anything your child does in the product.

Email support: a message sent to support@flux.study arrives in a Google Workspace mailbox and is read by us. There is no outside help desk in front of it, and the live-chat window is a separate service — Intercom cannot see this mailbox. Google is already named above, for sign-in, so nothing here puts your message in front of a company that is not already on this list.

Where it is kept

Your child’s data is stored in the United Kingdom. Running the service also processes it in Ireland, and error monitoring runs on Sentry’s servers in Germany. All three are covered by UK adequacy, so there is no transfer arrangement to describe.

How long we keep it

When you close your account, your child’s work, conversations and progress are deleted. Billing records are kept for the period UK tax law requires.

Safeguarding records are treated differently. Our policy is to keep them, stripped of anything identifying your child, for five years — a safeguarding record that disappears on request cannot protect anyone.

Your rights and how to use them

You can ask us for a copy of everything we hold about you and your child, ask us to correct it, ask us to delete it, or object to how we use it.

Write to support@flux.study and we will reply within one month.

If you are unhappy with how we have handled your information you can complain to the Information Commissioner’s Office at ico.org.uk.

What the tutor is told, and what it decides on its own

Before your child says anything, the tutor is told their first name, their school year, the subjects they study, and — if you filled them in — your estimate of their reading age, your estimate of how they are doing relative to expectation, your reasons for seeking tutoring, and any notes you wrote. Those four are passed on as your estimates, not as facts about your child, and the tutor is told they came from you.

From the placement test and later assessments, flux.study works out a starting level and a rough measure of how well your child has grasped each subject. The tutor is given those too, and they are what it uses to decide what to teach next and how hard to make it.

Those choices are made by the program, not by a person. Nobody reviews each lesson, each question or each hint before your child sees it. What a person does look at is anything the safety checks flag, and anything you ask us about.

This is used to teach your child and to show you their progress. It is not used to advertise to them, it is not sold, and it is not used to make any decision about them outside flux.study.

Where in the world your information goes

Most of what flux.study holds stays in the UK, Ireland and Germany, as described above. Two things are worth being specific about, because “UK only” would not be true.

The live-chat service, Intercom, is hosted in the United States, and that is a deliberate choice on our part. If you tap the chat button on a public page or on your own account pages, what you type goes to the United States. The chat window never appears on your child’s pages, so your child’s conversations with the tutor do not go to Intercom at all — this is about you, not them.

When you're signed in and use our chat, we share your name and email address with Intercom, our customer support provider, so we know who we're talking to.

The tutor itself runs on Anthropic’s service, and what your child types is processed in the United States. Anthropic’s own privacy policy, which took effect on 10 September 2026, says personal data is transferred to their servers in the United States, and that transfers out of the UK and the European Economic Area rely on an adequacy decision where one exists and on standard contractual clauses where one does not. As set out above, Anthropic keep a copy of what is sent to them and what they send back for 30 days, and during that time their staff can look at it for safety and security reasons.

Our error-monitoring and email providers are now confirmed: Sentry runs in Germany, and Resend, which sends our emails, runs in Ireland. Both are set up to receive as little as possible about you, and neither receives your child’s conversations.

Your child’s rights, not only yours

The information here is about your child, so the rights in it are theirs as well as yours. A child can ask what is held about them, ask for it to be corrected, and object to how it is used. In practice, for a child this age, that usually happens through you — but it does not have to, and we will not refuse a child who asks us directly.

If your child wants to ask us something about their own information, they can tell you, or an adult they trust, or write to support@flux.study themselves. We will answer in language they can actually read.

There is one limit, and it is deliberate. Where something has been flagged as a safeguarding concern, we may not be able to delete it or show all of it, including to a parent, if doing so could put a child at risk.

The agreement you have with us

This policy explains what we do with information. The agreement itself — what flux.study is, what you and your child agree to, and what happens if either side ends it — is in our terms of service.

Read the terms of service