Privacy

Nothing about the child leaves the device unless a grown-up links it to an account. Then only the child’s answers, the grown-ups’ settings and the device’s name go, and only to that account.

Who is responsible

Remelia is a trading name of Misheli Ltd (company number 13292776, registered in England and Wales), which is the data controller for everything on this page. Misheli Ltd is registered with the Information Commissioner’s Office, reference ZC250015.

To ask what is held about you or your child, to have it corrected or deleted, or with any question about privacy, email info@misheli.co.uk. If you are not happy with the answer, you can complain to the Information Commissioner’s Office.

This website

No cookies, no analytics, no adverts and no third-party requests. The fonts are served from this site. The server keeps a standard access log (address, time, page) for security, and nothing else.

A grown-up’s account

An account holds your email address and your password, and nothing else about you: no name, no phone number. The password is kept only as a one-way hash by Remelia’s own sign-in service, so nobody can read it. The only emails the account sends are one to check the address is yours and, if you ask, one to reset a forgotten password; they go through 20i, our email host in the UK. Remelia uses no service based in the United States.

What is sent when a grown-up links an account

Their answers: for each one the topic, whether it was right, how long it took, whether a hint was used and when, and, when a wrong answer matched a common mistake, which kind (such as adding the denominators) — never what they typed; the starting check and the six-weekly re-checks; the teaching notes they read, the worked examples they studied on meeting a topic, the strategy cards they played, the times a grown-up noted they explained a puzzle or a passage, and the topics they said school has started; each week’s different day — which kind, how many questions it asked and they answered, and whether they made up a question, never the question itself; each short writing piece they finished — which prompt, never what they wrote, which stays on paper — and the boxes a grown-up ticked for it; which reading passages they have been shown, and whether they read one with a grown-up or on the reading day, so that none is shown twice; and, once, their progress from before the answer log; and any question flagged as wrong, with its words, the answer expected, the answer given and why — the one place an answer they typed goes, and never with their world’s names in it. The grown-ups’ settings: the school plan and its dates, the school they attend (when it is chosen from the list), and the settings under Controls: pace, session length, puzzles, the pinned topic, breaks, the warm-up clock, the schools they are preparing for, the subjects they are studying, the weekly different day, the reading day, the pronouns the app uses for the child. The device’s name: the name typed when linking, with the code typed to link it, a random id for the device and the time of each change; nothing else about the device.

What is never sent

Their world: their name as typed on their device, and their friends, pet, team, places and hobbies. How sessions felt: their taps at the end of each session. Their sessions, warm-ups and streak as their device counts them: the warm-up times among them, and which of the occasional tricks and jokes at the end of a session they have been shown. The year group set on their device: the account keeps the one typed in the parents app; each check says which year’s topics it asked. A school typed by hand: when their school is not on the list and its name is typed instead. The errors their device has caught: listed under Devices and data on the device itself, and put only into a copy saved there. Saved copies and exports: the files stay wherever they are saved. Anything else their device keeps.

More than one device

Each device keeps its own record until a grown-up links it. Once it is linked, what is listed above goes to the grown-up’s account, and each linked device takes the others’ answers from it, so every one of them shows the same progress. A device that is unlinked stops sending, and what is already on it stays there.

Deleting

A deleted child or account is kept for 30 days in case of a change of mind, then deleted for good; the service’s own backups are overwritten within 35 days after that.

For children

Your answers stay on your device. If a grown-up links it to their account, your answers go to that account so they can see how you are doing. What you type about your world — your friends, pet, team and hobbies — never leaves your device.