Privacy Policy
For parents, guardians and children who use MockMode Last updated: 23 October 2026
1. Who we are
MockMode Ltd (company number 17537972), registered in England and Wales with registered office at Suite RA01, 195-197 Wood Street, London, E17 3NU, operates MockMode at https://mockmode.app ("MockMode", "we", "us" and "our").
For the personal information described in this policy, MockMode is generally the data controller. Privacy enquiries, rights requests and data-protection complaints can be sent to support@mockmode.app.
MockMode is legally and operationally separate from Bright Bridge 11+ Tuition. We do not share parent or child personal information with Bright Bridge and there is no cross-marketing between the businesses.
2. Who this policy is for
MockMode is an online 11+ practice platform designed for children aged 9 to 13. The account is created and controlled by an adult parent or guardian who must be at least 18. At launch, each account has one child profile. Children do not create their own account, provide their own email address or enter into the subscription contract with MockMode.
Although the adult controls the account, information generated by the child while using MockMode - such as answers, results and progress - is personal information about the child. Children have their own data-protection rights.
Because MockMode is designed for children, we apply the ICO Children's Code (Age Appropriate Design Code) and provide a shorter child-friendly privacy notice alongside this policy.
3. Personal information we collect
Parent or guardian account information
- email address;
- password/authentication credentials (handled through our authentication provider and not stored by us in readable form);
- subscription plan, subscription status and billing status;
- marketing preference; and
- support, complaint and privacy-request correspondence.
Child profile and learning information
- child's first name;
- optional target school or region and optional exam date, used to show relevant exam-format information and a countdown;
- questions attempted and answers given;
- whether answers were correct or incorrect;
- time taken to answer each question and to complete each session;
- bookmarked questions, badges and certificates;
- practice and mock-exam activity and results; and
- progress analytics generated from the above, including accuracy by topic and difficulty, trends, and areas of relative strength or weakness.
MockMode records how long the child takes to answer each question and to complete each practice session or mock exam. This timing is shown to the parent and child in results and progress (for example, average time per question) and is not used for any other purpose. At launch we do not collect the child's date of birth, age, gender, current school, postcode, photograph, precise location, email address, phone number or login credentials.
Payment and billing information
Payments are processed using Stripe-hosted checkout. MockMode does not receive or store full payment-card numbers. We receive information needed to administer the subscription, such as plan, payment status, transaction references and Stripe customer/subscription identifiers. Stripe may process some payment information for its own legal, fraud-prevention and platform purposes.
Technical and security information
- IP address;
- browser and device information;
- authentication and session information;
- security, diagnostic and error information; and
- records of worksheet downloads (which account, which worksheet, when and whether it was allowed), used to apply download limits and prevent bulk copying of our content;
- information stored on or accessed from a device where permitted under PECR, as explained in our Cookie and Storage Technologies Notice.
MockMode's web fonts are stored on and served from MockMode's own hosting, so loading them does not send information to Google or another font provider.
4. Why we use personal information and our lawful bases
We identify a lawful basis before using personal information. For core child learning information, the child is not the contractual customer, so we do not rely on the parent's contract as the lawful basis. We instead rely on legitimate interests where the processing is necessary and proportionate, after considering the child's rights and best interests.
| Purpose | Information | Lawful basis |
|---|---|---|
| Create and manage the adult account, Free tier and no-card trial | Parent email, authentication and account information | Contract |
| Provide and administer a paid Premium subscription | Parent email, account and subscription information | Contract |
| Provide practice, marking and progress tracking to the child | Child first name, attempts, answers, results, bookmarks, badges and progress information | Legitimate interests |
| Show optional target-school/region information and exam countdown | Target school or region and exam date | Legitimate interests |
| Generate progress dashboards and strength/weakness heat-maps | Child learning activity and performance analytics | Legitimate interests |
| Process and administer payments | Adult account details, subscription and transaction references | Contract; legal obligation for required records |
| Keep MockMode secure, prevent misuse and investigate technical problems | Account, IP, device, session and security information | Legitimate interests |
| Send account and service messages | Adult email and account information | Contract and/or legitimate interests |
| Send marketing to an adult who has actively opted in | Adult email and marketing preference | Consent |
| Meet tax, accounting, consumer and regulatory duties | Relevant account, payment and transaction records | Legal obligation |
| Handle rights requests and data-protection complaints | Contact, identity and request/complaint information | Legal obligation; legitimate interests where appropriate |
Where we rely on legitimate interests for child data, our interests are to provide the educational service requested by the parent, record the child's work, show useful progress information and keep the platform secure. We document a legitimate-interests assessment and give particular weight to the child's best interests.
5. Children's privacy and the Children's Code
We design MockMode on the basis that children aged 9 to 13 will use it. Our approach includes:
- putting the child's best interests at the centre of decisions about personal information;
- maintaining a Data Protection Impact Assessment (DPIA) covering the child-facing service;
- requiring an adult account holder and applying child-protective settings to all child profiles;
- collecting only information needed for the educational service;
- keeping child profiles and results private by default;
- not providing child-to-child messaging, chat, forums or public profiles;
- not using precise geolocation;
- not using children's data for behavioural advertising or third-party marketing;
- not selling parent or child personal information;
- not sending marketing directly to children;
- not using nudges that encourage children to weaken privacy protections or provide unnecessary information; and
- providing age-appropriate information about how the child's data is used and how they can ask for help.
The parent or guardian can see the child's activity, results and progress through features such as the progress dashboard, mistakes review and PDF report. We explain this to children in the child-friendly privacy notice.
6. Progress analytics and profiling
MockMode uses a child's answers and results to calculate progress information such as accuracy by topic and difficulty, trends and a colour-coded view of areas of relative strength or weakness. Because these calculations assess aspects of the child's learning performance, they may amount to profiling under data-protection law.
MockMode shows up to three "Practise next" suggestions based on the topics and difficulty levels where the child's recorded accuracy is lowest. These are suggestions only: the parent and child decide what to practise. MockMode does not change question difficulty automatically and does not predict a child's 11+ score, chance of passing or chance of admission to a school. It does not make solely automated decisions that have legal or similarly significant effects on the child.
7. Artificial intelligence
MockMode does not use live AI features to mark children's work, provide personalised feedback or analyse individual child performance. No child name, answer, score, progress record or other user personal information is sent by the MockMode app to OpenAI, Anthropic or another external AI provider.
AI tools including ChatGPT and Claude may be used internally to assist with drafting educational questions and explanations. That content is reviewed before it is added to MockMode. This internal content-development process does not involve sending MockMode user data to those AI tools.
8. Special-category information
MockMode does not ask for health information, SEND information, disability information, ethnicity, religion, biometric data or other special-category information as part of the core service. Parents and children should not send this information unless we specifically ask for it for a stated lawful reason. If we later introduce a feature that needs or could infer sensitive information, we will assess it before launch and update our privacy information and DPIA where required.
9. Who we share information with
We only share personal information where needed to provide or secure MockMode, administer payments, comply with law, obtain professional advice or complete a genuine corporate transaction. Current or expected recipient categories include:
- Supabase - database, authentication and storage infrastructure. MockMode's core production database is hosted in Frankfurt, Germany (AWS eu-central-1);
- Lovable and associated infrastructure - hosting and operation of the MockMode web application;
- Stripe - hosted checkout, subscription billing, payment processing and the Stripe Customer Portal. Stripe may act as our processor for some activities and as an independent controller for certain activities it carries out for its own purposes;
- transactional email infrastructure used for account confirmation, password reset, receipts and service messages;
- Cloudflare (Turnstile) - bot protection on sign-up, sign-in and password-reset forms;
- professional advisers such as lawyers, accountants and insurers where necessary;
- regulators, courts, law-enforcement bodies or public authorities where disclosure is legally required or otherwise lawful; and
- a buyer, investor or successor as part of a genuine sale, investment or reorganisation, subject to appropriate safeguards.
Where a supplier acts as our processor, we put in place the data-processing terms required by UK data-protection law and carry out proportionate supplier due diligence. We do not share child information with advertisers and do not sell personal information.
10. International transfers
Our core Supabase database is hosted in Germany, within the EEA. Some other suppliers or their subprocessors may process personal information in countries outside the UK. Where a transfer is restricted under UK data-protection law, we use a lawful mechanism such as UK adequacy regulations or appropriate contractual safeguards, together with any assessment required by law. You can contact us at support@mockmode.app for more information about safeguards relevant to your information.
11. How long we keep information
We keep personal information only for as long as reasonably needed for the purpose for which it was collected, taking account of legal, accounting, security and dispute-resolution requirements.
| Information | Typical retention |
|---|---|
| Open account and child learning/progress data | For as long as the account remains open and the child profile is in use. Cancelling Premium does not delete the account; it reverts to the Free tier. |
| Closed account and child learning/progress data | Normally deleted or anonymised from active systems within 30 days of account closure, unless a longer period is needed for a legal claim, security matter or other lawful reason. |
| Backups | Deleted information may remain in rolling backups for up to approximately 14 additional days before it is overwritten through the normal backup cycle. |
| Payment, tax and accounting records | Kept for the period required by applicable tax, accounting and company-law obligations, commonly up to 6 years where relevant. |
| Support communications | Normally up to 24 months after the issue is resolved, unless a longer period is reasonably needed for a dispute or legal requirement. |
| Security and authentication logs | Kept for a limited period appropriate to security and troubleshooting needs and provider settings; longer where reasonably required to investigate a security incident. |
| Marketing preference / suppression record | Kept while relevant to the marketing relationship and as necessary to respect an opt-out. |
If you ask us to erase information, we will handle the request under applicable data-protection law. Some information may need to be retained despite account deletion where a legal exception applies.
12. Your rights and your child's rights
Depending on the circumstances, data-protection law may give you or your child rights to:
- ask for access to personal information;
- ask for inaccurate information to be corrected;
- ask for information to be erased;
- ask us to restrict certain processing;
- object to processing based on legitimate interests;
- receive certain information in a portable format where the legal conditions apply; and
- withdraw consent at any time where we rely on consent, without affecting processing that was lawful before withdrawal.
These rights are subject to legal conditions and exceptions. The rights relating to a child's information belong to the child. A parent or guardian can usually make a request on behalf of a younger child, but we may take account of the child's age, understanding, wishes and best interests.
To exercise a right, contact support@mockmode.app. We may need information to verify the request and protect the account from unauthorised disclosure.
13. Marketing
We may send promotional emails to an adult parent or guardian only where we have a lawful basis and the PECR rules are met. At launch, our sign-up/checkout flow uses a separate unticked marketing opt-in. Marketing is not a condition of opening an account or buying Premium.
Every marketing email will provide an easy way to unsubscribe. We do not send marketing directly to children and do not upload customer details to Meta or Google to create advertising audiences at launch.
Account-security messages, password resets, receipts, payment-failure notices, renewal notices and other necessary service communications are not treated as marketing simply because they are sent by email.
14. Cookies and storage technologies
MockMode uses browser storage and similar technologies where needed to keep the parent signed in, maintain session security and provide requested account functions. We do not use Google Analytics, Google Tag Manager, Meta Pixel, TikTok Pixel, Microsoft Clarity, Hotjar, Google Ads tracking, Meta retargeting or similar advertising/session-replay technologies at launch.
Our Cookie and Storage Technologies Notice explains the technologies used on MockMode pages. Stripe operates a separate hosted checkout and Customer Portal and may use technologies on its own pages under its own privacy and cookie information.
15. Security
We use appropriate technical and organisational measures designed to protect personal information. These include authentication controls, password hashing through our authentication provider, row-level database security, access restrictions and encryption in transit where supported by the production service. Full payment-card details are entered on Stripe-hosted pages rather than stored by MockMode.
No internet service can guarantee absolute security. We review access and security controls as MockMode develops and respond to incidents in line with applicable legal duties.
16. Data-protection complaints
If you think we have handled your or your child's personal information incorrectly, email support@mockmode.app and tell us what has happened. You do not need to use legal language.
We will acknowledge a data-protection complaint within 30 days, investigate it appropriately without undue delay, keep you informed as appropriate and tell you the outcome. You also have the right to complain to the UK Information Commissioner's Office (ICO) at https://ico.org.uk.
17. Changes to this policy
We may update this policy when the service, suppliers or law changes. If a change materially affects how we use personal information, we will give account holders appropriate notice before or when the change takes effect, depending on the circumstances. If a new use requires consent, we will obtain consent rather than treating a policy update as consent.
18. Contact
MockMode Ltd Company number: 17537972 Registered office: Suite RA01, 195-197 Wood Street, London, E17 3NU Email: support@mockmode.app Website: https://mockmode.app