This Privacy Policy explains how Triominds collects, uses, stores, and shares personal information when you use our website, parent account system, child profile setup tools, messaging-linked learning features, and related services (the “Services”).

1. Who we are

Triominds provides a parent-managed learning support platform designed to help families configure child learning profiles, manage schedules, connect messaging delivery channels, and receive AI-supported learning services.

For the purposes of applicable data protection law, Triominds is the controller of the personal data described in this Privacy Policy unless stated otherwise.

2. Whose data we collect

We may collect personal information about:

• parents, guardians, and other adult account holders;
• children whose profiles are created by authorised adults;
• prospective users who begin but do not complete registration;
• users who contact us;
• users who connect supported messaging channels.

3. The personal data we may collect

Depending on how you use the Services, we may collect:

Parent account data

• parent name;
• email address;
• password hash;
• account verification status;
• consent records;
• session and login information;
• referral code or invite-related data.

Child profile data

• child name or nickname;
• school;
• year group;
• gender;
• country;
• timezone;
• target exam;
• target school;
• self-reported ability level;
• enabled subjects;
• morning and evening schedule preferences;
• messaging link status.

Verification and operational data

• email verification codes or verification records;
• resend timing and verification attempt controls;
• account creation timestamps;
• linked messaging identifiers where applicable;
• service activity and operational records.

Device, technical, and usage data

• basic request, log, and technical data reasonably needed to operate, secure, and improve the Services.

4. How we collect personal data

We collect personal data:

• directly from you when you register, log in, add child information, configure settings, or contact us;
• when you connect or use supported messaging channels;
• automatically through normal website and service operation;
• from service providers who help us deliver the Services.

5. How we use personal data

We use personal data to:

• create and manage accounts;
• verify email addresses and secure registration;
• provide and operate the Services;
• create and manage child learning profiles;
• configure schedules and messaging delivery;
• deliver learning sessions and related operational communications;
• provide progress-related information;
• maintain platform security, integrity, and abuse prevention;
• provide customer support;
• improve, monitor, and develop the Services;
• comply with legal and regulatory obligations;
• administer promotions, referral systems, or rewards where offered.

6. Lawful bases for processing

Depending on the context, we rely on one or more of the following lawful bases:

• performance of a contract or steps requested before entering into a contract;
• legitimate interests, including service security, fraud prevention, service improvement, and operational management;
• compliance with legal obligations;
• consent, where consent is required.
• Where consent is relied upon, you may withdraw it at any time, although this will not affect processing already carried out lawfully before withdrawal.

7. Children’s data

Our Services involve information relating to children, but parent or guardian accounts are intended to be created and managed by authorised adults.

We expect the adult registering the account to have authority to provide the child information submitted to us.

Because children’s data requires particular care, we aim to minimise the personal data collected, use it only where reasonably necessary for the service, and design relevant features with child protection and parental oversight in mind. Services likely to be accessed by children should take the child’s best interests into account under the UK Children’s Code. (ICO)

8. Email verification and service emails

We may send transactional emails needed to operate the service, including:

• verification codes;
• login and account-related notices;
• important operational updates;
• legal or policy notices.
• These service emails are distinct from optional marketing communications.
• If we send marketing emails in the future, we will do so in accordance with applicable rules and manage preferences appropriately. ICO guidance states that unsolicited marketing emails to individuals generally require specific consent unless a limited exception applies. (ICO)

9. Messaging delivery channels

If you choose to connect a supported messaging platform such as Telegram, we may process the identifiers and status information necessary to:

• link your account or child profile to that messaging channel;
• deliver scheduled learning activity;
• send progress-related or service-related messages;
• monitor delivery and operational status.
• We may also store linking status, timestamps, and limited operational metadata required to manage that connection.

10. Sharing personal data

We may share personal data with service providers that help us operate the Services, such as providers for:

• hosting and infrastructure;
• database services;
• email delivery;
• messaging integrations;
• analytics or monitoring;
• payment processing, if paid plans are introduced;
• support and technical operations.
• We may also disclose information:
• where required by law;
• to protect rights, safety, and security;
• in connection with a reorganisation, sale, or business transfer.
• We do not sell personal data in the ordinary sense of selling user lists.

11. International transfers

Some service providers may process data outside the UK. Where applicable, we will take reasonable steps to ensure appropriate safeguards are used for relevant international transfers.

12. Data retention

We keep personal data only for as long as reasonably necessary for the purposes described in this Privacy Policy, including:

• account operation;
• child profile management;
• security, fraud prevention, and audit purposes;
• legal, regulatory, tax, or dispute-related requirements.
• Different categories of information may be kept for different periods.

13. Security

We use reasonable technical and organisational measures designed to protect personal data. However, no system can guarantee absolute security.

You are responsible for maintaining the confidentiality of your account credentials and for notifying us if you believe your account has been compromised.

14. Your rights

Depending on applicable law, you may have rights to:

• access personal data;
• request correction;
• request deletion;
• object to certain processing;
• request restriction;
• request data portability;
• withdraw consent where consent is used.
• You may also have the right to complain to the Information Commissioner’s Office (ICO) in the UK.

15. Third-party links and services

Our Services may link to or depend on third-party services. Their privacy practices are governed by their own policies and terms.

16. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. We will publish the latest version on this page and update the effective date above.

17. Contact

If you have questions or requests relating to privacy or data protection, please contact:

• Triominds
• Email: hhrzuk@gmail.com