Learn with Fred is a UK-based AI tutoring service for children in KS2, KS3 and KS4 (roughly ages 7–16). The service is operated by Mutable Software Limited, trading as Learn with Fred, a company registered in England and Wales (company number 12264036; registered office 123 Redditch Road, Kings Norton, Birmingham B38 8RH), which is the data controller for the personal data described here. You can contact us at hello@learnwithfred.co.uk.
Parent account: When you create an account we collect your first name, email address and password (stored hashed, never in plain text), an optional security question answer, and the details you provide about your children (display name, username, year group, age, and subject ability levels). We use this to provide the tutoring service. The legal basis is the performance of a contract.
Payments: We ask for a payment card when you create your account. This is a check that a genuine adult is setting up the account, and it becomes your payment method if you subscribe after the free trial. Card details go directly to Stripe, our payment provider, and never touch our servers. We store your Stripe customer reference, your subscription status, and a record of what you have bought, including any credit top-ups. Stripe is an independent controller for the payment data it holds; its privacy policy is at stripe.com/gb/privacy. The legal basis is the performance of a contract and our legal obligations to keep financial records.
Child usage data: We store chat messages, uploaded homework and session activity to provide tutoring, track progress, and show parents insights. We do not use this data for advertising or sell it to third parties.
Improving the service: The Learn with Fred team may review session data, including messages between your child and the AI tutor, to diagnose problems, investigate issues, check that our safeguarding controls are working, and improve how Fred teaches. This review is done by us, never for marketing, and may use AI tools under commercial agreements that do not use the data for training. The legal basis is our legitimate interest in running a safe, accurate service for children.
Safeguarding: An automated layer reads your child’s messages for signs of distress or a possible safeguarding concern. Messages it flags may be reviewed by us and by a designated safeguarding lead. Where appropriate we email you, as the parent, the kind of concern and how serious it is, and the help your child was shown, never the words your child wrote. The legal basis is our legitimate interest in protecting children using the service, and where necessary their vital interests.
Invitations: If you use “Invite a friend”, we process the email address you give us to send that person a single invitation email on your behalf, and we record that the invitation came from you. We do not email them again unless they create an account. The legal basis is our legitimate interest in letting existing families recommend the service, limited to one message.
Emails we send: Service emails about your account, trial, payments, credits and safeguarding go to the parent email address and cannot be switched off while you have an account. Progress updates can be turned off from your account page. Product news, including the occasional special offer, is optional: you can turn it off from your account page, and every one of those emails has an unsubscribe link.
Contact messages: If you contact us via the form on our website or by email, we collect your name, email, and message to respond to your enquiry.
Our website uses cookies. Some are essential for the site to work. We also use Google Analytics, a service provided by Google, to understand how visitors use our website, such as which pages are viewed and how people find us. Google Analytics sets cookies to do this.
Analytics cookies are only set if you accept them. When you first visit, we ask for your consent through a banner, and no analytics cookies or tracking are active until you click “Accept”. You can decline, and the site will work exactly the same. Your choice is remembered in your browser; to change it, clear your browsing data for this site and the banner will appear again.
The information Google Analytics collects is used only to measure and improve our website. We do not use it for advertising. For details on how Google processes this data, see Google’s privacy policy at policies.google.com/privacy.
We take children’s privacy seriously. Children’s accounts are created and managed by their parent or guardian. Children do not provide their own email address. We do not collect more data than is necessary to provide the tutoring service. We do not show advertising to children.
Learn with Fred uses the Anthropic Claude API to power the AI tutor. When your child uses the tutor, their messages are sent to Anthropic to generate a response. Anthropic processes this data as our data processor, acting on our instructions under a data processing agreement, and under the terms of Anthropic’s commercial API, data submitted through the API is not used to train Anthropic’s models.
When a parent enables voice input for their child, spoken messages are transmitted securely to our transcription provider (Deepgram) to convert speech to text. This transcription takes place within the European Union. Audio is never stored by Learn with Fred or Deepgram, only the resulting text transcript is retained. Voice input is disabled by default and can be turned off at any time from the parent dashboard.
Your data is stored on secure servers in the United Kingdom (currently Microsoft Azure, UK South region; if we change hosting provider we will keep your data in the UK or EU and update this policy). Some of our service providers are based in the United States, including Anthropic (which powers the AI tutor), Resend (email delivery) and Stripe (payments). Where personal data is transferred to these providers, the transfer is protected by Standard Contractual Clauses together with the UK International Data Transfer Addendum, as set out in each provider’s data processing agreement. We use industry-standard encryption in transit (HTTPS) and at rest. Passwords are hashed and never stored in plain text.
We keep your account data for as long as you have an account with us. If you ask us to delete your account, we will delete your personal data within 30 days. Records of payments are kept for six years after the payment, as UK tax law requires. Invitation email addresses that never lead to an account are deleted after 12 months.
Under UK GDPR you have the right to access, correct, or delete your personal data; to object to or restrict processing; and to data portability. To exercise any of these rights, email us at hello@learnwithfred.co.uk and we will respond within 30 days.
You have the right to complain to the Information Commissioner’s Office (ICO) if you believe we have handled your data unlawfully: ico.org.uk.