Privacy policy
Last updated: 27 September 2026 (weekly parent summary, grievances)
In short: we store only what we need to run the account, show progress to the student, their parent and their teacher, and send the emails you asked for. We never sell data and we run no advertising.
1. Who runs this site
cbsemathrevision.com is one of the Math Revision sites run by Pete Bromfield (listed in the footer); they share one sign-in system and database. Questions about your data: pbromfield@ibmathrevision.com.
2. Children and parental consent
Most students are under 18. Accounts for under-18s are parent-controlled: a parent creates their account first (verified with a one-time code sent to their email), confirms they are the student's parent or legal guardian, and approves the student's account. We record that consent. A parent can withdraw it, and ask us to delete the student's data, at any time by emailing us.
The weekly parent summary email is off until a parent turns it on in the parent dashboard (Settings). Before it starts, the dashboard says what the email contains, why we send it and how to stop it, and the parent confirms they are the student's parent or legal guardian; we record the date, that notice and the confirmation. It contains the child's name, their questions, time, sessions and last active day that week, tests and scores, chapters that are secure or need work, homework and one suggested next step; it has no advertising and is sent only to the parent's own email address, through our email provider (Resend). It stops when the parent unticks it in Settings or uses the one-click link at the bottom of any email (as easy as turning it on), and we record that too. The dashboard and the email also offer a “Share this summary on WhatsApp” link: it only opens WhatsApp on the parent's own phone with the text filled in, for the parent to choose whether and to whom to send it. The filled-in text uses the child's first name only (no email address or account link), and it passes to WhatsApp only if the parent taps the link. We do not use WhatsApp to send anything ourselves.
3. What we store, and why
| What | Why | Where |
|---|---|---|
| Email address (student and parent) | Sign-in, progress, and the emails you asked for (the Sunday report, homework notices). | Firebase Authentication (Google Cloud) |
| Practice answers, checkpoint results, timed test scores, homework and class membership | To show progress to the student, their linked parent and their teacher. | Firestore (Google Cloud) |
| Parent–student link and consent record | To prove consent and to decide who may see a student's progress. | Firestore |
| Your plan and payment records | Legal requirement to keep receipts. | Payment provider (card details never reach our servers) |
| Your devices: a random device ID your browser makes, a label such as “Chrome on Windows” (worked out from the browser’s user-agent, which we don’t keep), when each device was first and last used, and which of our four sites it was used on | Accounts are personal and can be used on up to 5 devices; this is how we count them. You can see and remove your devices on your account page. No IP addresses or other fingerprinting. | Firestore; the device ID also sits in your browser’s local storage. A device unused for 60 days is deleted automatically. |
4. Who else processes data
- Google Firebase: sign-in, database, file storage and cloud functions.
- Resend: transactional email.
- Your teacher: if a student joins a class, the teacher sees their progress for that class.
- AI features (not yet available on this site): if they launch, the question and answer are sent to an AI provider to generate feedback, and this policy will say so first.
No advertising networks, no tracking pixels, no profiling, no selling of data.
5. Cookies and local storage
Sign-in storage keeps you signed in. Google Analytics runs only if you accept analytics cookies in the banner. Local storage remembers small preferences on your device, and a random device ID that counts this browser as one of your (up to 5) devices — sent to us only while you’re signed in. If you arrived from another site or a tagged link (e.g. a newsletter), the site name and campaign tags are kept in your browser for this visit (30 days if you accept analytics cookies), and sent to us only if you sign up for emails.
6. How long we keep it
Account and progress data: until you ask us to delete it. Payment records: as long as tax rules require. Consent records (for the parent link and the weekly summary: when it was given or withdrawn, and the notice shown) are kept while the parent account exists, so we can show what was agreed; for the weekly summary we keep only the last 20 changes.
7. Your rights and grievances
Under India's Digital Personal Data Protection Act, 2023 (and UK GDPR, where it applies) you can ask for a summary of your data, a correction, deletion, or to withdraw consent, and nominate someone to act for you. A parent acts for a child under 18.
Grievances and questions about your data: email pbromfield@ibmathrevision.com, read by Pete Bromfield, who runs the site. We respond within 30 days. You can stop the weekly summary yourself at any time (Settings in the parent dashboard, or the link in any email) and remove a child from your dashboard there too. If you are not satisfied with our answer, you can complain to the Data Protection Board of India.