Privacy Policy

Last Updated: December 19, 2025

1. Introduction

11 Plus Practice ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our practice platform service.

By using our Service, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies and practices, please do not use our Service.

2. Information We Collect

2.1 Personal Information

When you create an account, we collect:

  • Email address (required for account creation and login)
  • Password (encrypted and securely stored)
  • Name (optional)

2.2 Usage Data

We automatically collect information about how you interact with our Service:

  • Questions answered and your selected answers
  • Correctness of answers (for progress tracking)
  • Time spent on questions
  • Hints used and solutions viewed
  • Bookmarked questions
  • Daily challenge participation and streaks
  • Practice session history
  • Topic performance metrics

2.3 Payment Information

Payment processing is handled entirely by Polar.sh, our Merchant of Record. We do not store your credit card information or payment details. We only receive confirmation of successful purchases and basic transaction information (order ID, amount, date).

2.4 Technical Data

  • IP address
  • Browser type and version
  • Device type and operating system
  • Pages visited and time spent
  • Referral source

3. How We Use Your Information

We use the collected information for the following purposes:

  • Service Provision: To provide, maintain, and improve our practice platform
  • Personalization: To track your progress, identify weak topics, and recommend practice areas
  • Authentication: To verify your identity and manage your account
  • Communication: To send service-related emails (such as purchase confirmations)
  • Analytics: To analyze usage patterns and improve our content and features
  • Security: To detect and prevent fraud, abuse, and security incidents
  • Legal Compliance: To comply with legal obligations and protect our rights

4. Third-Party Services

We use the following third-party services to operate our platform:

Polar.sh

Payment processing and Merchant of Record. Polar.sh handles all payment data, tax calculations, and invoicing. See Polar.sh Privacy Policy.

Supabase

Database and authentication infrastructure. Your data is stored in Supabase's secure, encrypted databases. See Supabase Privacy Policy.

Vercel

Hosting and content delivery. Vercel may collect technical data like IP addresses and request logs. See Vercel Privacy Policy.

Resend

Email delivery service for transactional emails. See Resend Privacy Policy.

5. Cookies

We use cookies and similar tracking technologies to:

  • Essential Cookies: Required for authentication and session management
  • Functional Cookies: Remember your preferences and settings
  • Analytics Cookies: Help us understand how you use the Service

You can control cookies through your browser settings, but disabling essential cookies may affect your ability to use the Service.

6. Data Retention

We retain your personal information for as long as necessary to provide our Service and fulfill the purposes described in this policy:

  • Account Data: Retained until you delete your account
  • Practice History: Retained for the duration of your account plus 30 days
  • Payment Records: Retained for 7 years for tax and accounting purposes
  • Technical Logs: Retained for 90 days

7. Your Rights (GDPR)

If you are located in the European Economic Area (EEA) or UK, you have the following rights:

  • Access: Request a copy of your personal data
  • Rectification: Request correction of inaccurate data
  • Erasure: Request deletion of your data ("right to be forgotten")
  • Portability: Request your data in a portable format
  • Restriction: Request limitation of data processing
  • Objection: Object to processing of your data
  • Withdraw Consent: Withdraw consent for data processing

To exercise these rights, contact us at support@11plusquestions.com. We will respond within 30 days.

8. Data Security

We implement industry-standard security measures to protect your data:

  • Encryption in transit (HTTPS/TLS)
  • Encryption at rest for sensitive data
  • Ongoing security updates via our hosting and database providers
  • Access controls and authentication
  • Secure password hashing (bcrypt)

However, no method of transmission over the internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

9. Children's Privacy

Our Service helps children (typically aged 9–11) prepare for the 11 Plus grammar school entrance examination. Because our users are minors, accounts must be created and managed by a parent or legal guardian aged 18 or over. Children should only use the Service under the supervision of their parent or guardian.

We do not knowingly allow children to register their own accounts or collect personal information directly from a child without the consent and involvement of a parent or guardian. If you are a parent or guardian and believe your child has provided us with personal information without your consent, please contact us at support@11plusquestions.com and we will delete it.

10. International Data Transfers

Your data may be transferred to and processed in countries outside your country of residence. We ensure appropriate safeguards are in place for international transfers, including standard contractual clauses approved by the European Commission.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by:

  • Posting the updated policy on our website
  • Updating the "Last Updated" date
  • Sending an email notification for significant changes

Your continued use of the Service after changes constitutes acceptance of the updated policy.

12. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us:

Email: support@11plusquestions.com

Subject: Privacy Policy Inquiry