Privacy Policy | IT SkillForge

1. Our approach

IT SkillForge is used by students, many of whom are under 18. We aim to collect the minimum personal data necessary to provide the service, and to give teachers and schools appropriate oversight, in line with UK GDPR and the Data Protection Act 2018.

2. What we collect

Account data: name, email address, role (student/teacher/institution admin), year group (optional).
Learning data: lesson progress, quiz/coding attempt history, coding submissions, project workspace content.
Payment data: purchases and subscriptions are processed by Stripe — we do not store full card details ourselves.
Usage data: basic product analytics (e.g. feature usage) to improve the platform, collected in a way that avoids unnecessary personal identifiers where possible.

3. How we use it

To provide and personalise the learning experience (progress tracking, recommendations).
To let teachers monitor progress for students in their own classes.
To process payments and manage subscriptions.
To communicate service-related information (see our approach to notifications in-product).

4. Who can see student data

The student themselves.
Teachers of classes the student has joined (progress and coding/assessment activity relevant to that class).
Platform administrators, for support and safeguarding purposes.
We do not sell personal data to third parties.

5. Data retention

We retain account and learning data for as long as the account is active, plus a reasonable period afterwards for legal and safeguarding purposes, after which it is deleted or anonymised. Institutions/schools may request earlier deletion in line with their own policies.

6. Your rights

Under UK GDPR you have the right to access, correct, delete, or export your personal data, and to object to certain processing. Contact us via the Contact page to exercise these rights. For students under 13, requests should generally come via a parent/guardian or the school.

7. Third-party processors

We use trusted third-party processors including Supabase (database and authentication) and Stripe (payments). Each operates under its own privacy and security commitments.

8. Children's privacy

We do not knowingly collect more personal data from children than necessary to provide the service, and we rely on schools/parents to provide appropriate consent for students under 13 where required.

9. Changes to this policy

We may update this policy from time to time; material changes will be highlighted in-product.

10. Contact

Questions about this policy can be sent via our Contact page.