Data protection

Who does what

Your school decides which pupils use UniGenius and sees their progress. Uni Admissions Prep Ltd runs the courses and the dashboard, and uses pupils' data only for that. Each pupil also has their own account, covered by our privacy policy at unigenius.co.uk/privacy.

What we hold

• Pupils: name, email, class, and their work on the courses (answers, lessons finished, mock results and when they studied).
• Teachers: name, email and school, and the order and payment record.
• A roster you import: each pupil's name, email and class, until they join.

We do not ask for dates of birth, addresses, phone numbers, or special needs or other sensitive information. We do not connect to your MIS.

Who sees it

• Whoever holds your dashboard link: each pupil's name, email, last activity, lessons, questions, accuracy, mocks and set work. Share the link only with staff who should see this.
• A class or school link shows only that class's or school's pupils.
• Pupils see their own work, never anyone else's.

We do not sell pupil data or use pupils' work for advertising.

Where it is kept

Supabase hosts the database and Vercel hosts the site. Stripe handles payments (teachers only). Resend sends sign-in and service emails. Google handles sign-in only for pupils who choose it. Rosters and progress can be read only by our servers, never directly from a browser.

How long

• Names on an imported roster of pupils who never joined are deleted when the licence ends.
• When a licence ends, course access ends. Pupils keep their own accounts and work; your dashboard stays so you can export the record.
• Removing a pupil from your dashboard ends their access at once.
• A pupil can delete their account themselves at any time, which deletes their work and their place on your roster.

Requests and problems

To see, correct or delete data, or to report a concern, email support@unigenius.co.uk with the school and the pupils concerned. If a breach affects your pupils' data, we tell you without undue delay.