Privacy notice

For children: your information

MockNest remembers your answers so you and your parent can see your progress. Your parent can see your practice and mock results. Other families cannot see them.

Use a nickname for your profile if you prefer. Do not put your address, school, password or other private information into an answer or feedback message.

We do not sell your information or use your answers to show you adverts. You can ask us about your information or ask for help changing or deleting it. You can ask a trusted adult to help, but your privacy rights belong to you too.

Who is responsible

MockNest is operated by MOCKNEST LTD, a private limited company registered in England and Wales, company number 17340814. Its registered office is 150 Aspen Road, High Wycombe, England HP10 9GG. The company is the controller of the personal information used to operate MockNest. ICO registration reference: ZC198902.

Contact privacy@mocknest.co.uk for privacy questions or requests. General support and subscription queries go to hello@mocknest.co.uk.

Information we use

• Parent account: email, sign-in identifiers and account details supplied through Clerk; security settings and parent-access controls.
• Child profiles: the name or nickname you choose, target exam year, exam preferences and learning settings. Children use profiles under the parent's account rather than a separate child login.
• Learning records: questions attempted, selected or written answers, marks, elapsed time, completion status, explanations reviewed and vocabulary or flashcard progress. These let us save work and show progress separately for each child.
• Support: messages and feedback you choose to send, relevant account references and the page where feedback was submitted. Please send only information needed to explain the problem.
• Technical information: session identifiers and operational/security records needed to keep the service working. Hosting and authentication providers may process IP addresses, browser information and access logs.
• If you buy Premium: subscription status, billing references and transaction records. Stripe processes payment details. MockNest does not store full card numbers.

Why we use it and our lawful bases

We use the following lawful bases for the purposes described below.

• Parent account and requested service: performance of our agreement with the parent, including account administration and responding to service requests.
• Child profiles and learning records: our legitimate interests in providing the parent-requested educational service, saving the child's work and explaining progress, subject to an assessment of necessity and the child's rights and best interests. A parent's contract is not treated as a contract with the child.
• Security, fault diagnosis and prevention of misuse: legitimate interests in a safe and reliable service, using information proportionate to that purpose.
• Legal obligations: handling applicable data-rights requests, lawful regulatory requests and, if you buy Premium, required financial records.
• Optional marketing or non-essential device tracking: consent where required. These are separate from necessary account and service communications; refusing them must not prevent access to the core service.

Progress, messages and choices

We use learning records to calculate scores, show explanations and report progress. These are practice indicators, not school admission decisions or a guarantee of exam results. Parents can turn off weekly progress emails using the available preference or unsubscribe control. Essential security and account messages are separate.

MockNest does not provide public child profiles, a public leaderboard or chat between families. We do not sell children's information or use their answers for advertising. We do not ask children to upload photographs or record their voices for the current learning activities.

Who receives information

Providers act under the relevant contractual arrangements. Some providers also act as independent controllers for activities such as their own fraud prevention or legal compliance; we do not promise that every provider acts solely as our processor.

• Clerk supports account sign-in and authentication.
• Vercel hosts the application; Neon stores application records.
• Resend delivers service emails. Cloudflare routes incoming mail to our support inbox and provides private R2 storage for prepared mock PDFs. R2 is not a pupil answer-sheet upload service.
• If you buy Premium, Stripe processes your payments and provides subscription and transaction records to MockNest.
• Authorised people helping operate MockNest may access relevant information for support, security or administration. We may disclose information where required by law or to establish or defend legal rights.
• The support inbox receives messages forwarded by Cloudflare. Support correspondence is handled separately from children’s practice records.

Where information is processed

Some suppliers may process information outside the UK, even where application hosting or database storage is in London. Before transferring personal information where UK law requires safeguards, we must establish an applicable adequacy basis or appropriate contractual safeguards and assess the transfer. Contact us for information about the safeguards relevant to your data.

Optional YouTube videos

Video cards use locally stored artwork. YouTube’s player loads only when you choose to watch a video. This connects your browser to Google/YouTube, which receives technical information such as your IP address, browser details and the video you request. MockNest does not send your child’s profile, answers or learning records to YouTube.

We use YouTube’s privacy-enhanced player. Google may use cookies or other device storage when you play a video. You can leave videos unplayed and continue using other MockNest learning. Closing the player stops that embedded playback; it does not erase information already received or stored by Google. Google’s Privacy Policy at https://policies.google.com/privacy explains its processing.

How long information is kept

Cancelling Premium does not immediately delete your family’s saved work. After the paid period ends and your family returns to Free, signing in keeps your learning records active. Inactivity during the paid period does not shorten this Free period.

After three calendar months without account activity on Free, learning history becomes eligible for deletion. We send an email reminder beforehand and allow at least 14 days after confirmed delivery to return. Signing in resets the inactivity period; you do not need to buy Premium. If delivery cannot be confirmed, automatic deletion does not proceed.

This process removes practice and mock attempts, saved answers, marking feedback and learning progress. It keeps the parent account, child profiles and necessary billing records. An individually cancelled child’s saved work is retained while another child continues with Premium. The three-month rule does not automatically apply to families that have never paid.

You can separately request erasure by contacting privacy@mocknest.co.uk. Some records may need to be retained to meet legal obligations or handle a dispute. We explain any relevant exception. Support correspondence, security logs and financial records have separate retention purposes.

Deleted learning records may remain in restricted backups until those backups expire. They must not be used for normal service, and deletion records must be reapplied before a restored backup is put back into use. Contact us for the retention arrangements relevant to your information.

Your rights and how to ask

Depending on the information and lawful basis, you can ask to access or correct it, erase it, restrict its use, receive portable information, or object to processing based on legitimate interests. Where we rely on consent you can withdraw it without affecting the lawfulness of earlier processing.

Email privacy@mocknest.co.uk. Tell us what you need and enough information to find the account; do not send passwords or identity documents unless we explain why additional verification is necessary. We will use proportionate identity checks and normally respond within one month. If a lawful extension or exception applies, we will explain it.

Children have their own data-protection rights. We consider their understanding and best interests, and a parent's authority where a parent acts on their behalf. We do not automatically reject a request just because a child contacts us directly.

You can complain to the Information Commissioner's Office at ico.org.uk/make-a-complaint/. You do not have to contact us first, although we welcome the chance to resolve a concern.

Personalised PDF downloads

Parent-managed PDF downloads show the authorised account email and a download reference to discourage unauthorised sharing. Do not post these personalised copies publicly. The original stored paper is not changed.

We record download allowances and references to protect access and investigate misuse. A footer discourages sharing but does not prevent copying. Printed papers are for the eligible child’s personal educational use.

Devices and notice updates

Our Cookies and device storage notice explains sign-in cookies and locally saved practice state. We will update this notice when our data use changes and draw material changes to families' attention. New uses that require consent will not be introduced merely by changing this notice.