Log inJoin the waitlist

Trust

How we protect your child

Last checked 19 October 2026

You're trusting us with your child's practice, so here is exactly what we keep, who can see it and how we look after it. This page is the short version. The full detail is in our privacy notice.

What we keep, and what we don't

We keep as little about your child as we can:

  • their first name and school year, which you type in
  • their month and year of birth, only if you choose to give it, so mock exam scores allow for age
  • the answers they give, their working notes and their scores, so we can choose their next question and show you their progress

We never ask for or keep:

  • an email address for your child
  • their surname
  • a photo of your child

There are no adverts on NextJen and no advertising or tracking cookies. We never sell information and never use your child's information to market anything to them.

Who can see it

  • You. Your child practises inside your account, and you can see their answers, notes and scores in your parent area.
  • A GCSE Maths student. They can have their own sign-in, but only on a device you link, opened with a PIN they choose. It needs no email address and you can remove the device at any time. Their typed answers and working notes stay private to them. You see their marks and estimated grades.
  • No other family. Nobody else ever sees your child's name, answers or scores.
  • Our team. NextJen is run by Tom, the owner, who is the only member of staff today. Access is set by role in the database itself. Question writers and checkers never see any child's details.
  • The AI assistant that helps build NextJen. We use Claude, an AI assistant made by Anthropic, to write and test our software. Our written rule says it works with totals only, such as how many questions were answered this week. It never reads a child's name, answers or working notes.

Where it's stored

  • Our database is stored by Supabase in London.
  • Our website runs on Vercel's London servers.
  • Stripe takes payments and holds card details. Card details never reach us.
  • Resend, in the United States, sends our emails, including your weekly summary, which has your children's first names and how their practice went.
  • Cloudflare runs our domain name, passes on emails sent to us, and checks some forms to stop automated tools.
  • Microsoft Outlook holds any emails you send us.

When a supplier based in the United States can see information, the transfer is protected by safeguards approved under UK law. Each supplier may only use information to provide its service to us.

How long we keep it

  • While your plan is running, your child's progress stays so they can carry on.
  • When your plan ends, we keep it for 12 months in case you come back. Then it's deleted automatically.
  • If you only book mock exams, results are deleted 12 months after your last mock exam weekend.
  • You can ask us to delete everything sooner, and we'll do it within one month.
  • We keep payment records, without your child's details, for 6 years because the law requires it.

How we keep it safe

  • Every table in our database has rules that let a family reach only its own records. Automatic tests check those rules before every change to the database.
  • Passwords are stored scrambled, so nobody at NextJen can see yours.
  • Your child practises in child mode. Leaving it needs your 4-digit PIN or your password. The PIN is stored scrambled too, and after 5 wrong tries it rests for 15 minutes.
  • The site uses only the cookies it needs to work, such as the one that keeps you logged in.

The Children's Code

The Information Commission (the ICO) has a code of practice for online services children use, called the Age Appropriate Design Code or Children's Code. We follow it. We've written a data protection impact assessment, which checks every feature against the code's 15 standards, and we update it whenever we add something new for children. In practice this means privacy is set high from the start, children are never compared with each other in front of them, streaks never tell a child they've lost something, and nothing is used to profile your child for marketing.

How we use AI

We use Claude to help draft some extra explanations of our own questions. A person checks every one before any child sees it. Only our questions are sent, never anything about you or your child. Your child doesn't chat with an AI on NextJen.

The Read to me button and spoken mock exam instructions use your device's own voice. Nothing they read is sent to us or anyone else.

Download or delete your data

In the Your data section of your parent area, Download my data gives you a file of everything we hold about your family straight away. Delete my account asks us to delete your account and your children's details and progress, which we do within one month. A GCSE student can download their own practice data in student mode.

Who we are and how to contact us

NextJen is run by Thomas Jenner, who decides how information is used (the controller). Our registration number with the ICO is ZC277477.

Questions about your child's information go to hello@nextjentuition.co.uk, or use our contact page. If you're unhappy with our answer, you can complain to the ICO at ico.org.uk/make-a-complaint.

Read more

Join the waitlist