Last updated: October 2026
In short: Pupil data is stored in the UK and EU on Google's infrastructure, with some server-side processing in the US. Connections and cloud storage are encrypted. We collect first names, maths performance, login and preference information, and in-app rewards and seat designs. Schools can also choose to record pupil premium, SEND or EAL group flags for their reporting. There are no ads or advertising trackers, and we use service providers only as needed to run, protect and support the app. The Privacy Policy lists the details.
| What | Where | Provider |
|---|---|---|
| Pupil records and results | London, UK | Google Firebase Firestore |
| Live session data (who's logged in) | Belgium, EU | Google Firebase Realtime Database |
| Teacher login accounts | Google infrastructure (may involve processing outside UK/EU with safeguards) | Google Firebase Authentication |
| Server-side processing | US | Google Cloud Functions |
Google is certified under the EU-US Data Privacy Framework, and processing is covered by Standard Contractual Clauses with the UK International Data Transfer Addendum where data leaves the UK.
The app uses role-based access. Each role can only see what it needs to:
Teacher and school lead access is managed through Firebase Authentication and role assignments stored in Firestore.
Teacher and admin actions are logged automatically, including:
Audit logs are kept for 90 days, then automatically deleted. They can be used to investigate any security concerns.
We do not log children's IP addresses.
The app keeps a short diary of connection timings, errors and device/browser details so we can investigate slow classroom connections. It uses a random browser label linked to the class, with no pupil names, pupil numbers or answers. This is for technical support, not advertising. Unsaved results can also be held on the device until they are successfully sent. See the Privacy Policy for browser storage details.
Data is stored on Google Firebase, which provides built-in infrastructure redundancy - Google automatically replicates data across their servers to protect against hardware failures.
When a school lead or teacher deletes a class, the class data (pupil names, scores, results) is kept for 30 days before permanent deletion, so accidental deletions can be recovered. Teacher account deletions are immediate and permanent (audit logs containing the teacher's IP and actions are retained separately for 90 days).
All user input (such as pupil names) is sanitised before being displayed. This prevents code injection attacks.
The app uses these external services:
No pupil data is shared with anyone else. There are no analytics platforms, no advertising networks, and no tracking tools.
In the interest of being upfront:
We have a documented incident response plan covering:
For full details on breach notification, see our Data Processing Agreement.
If you have security questions or need to report a concern:
Sear Education
Email: info@mrsearmtc.uk