Privacy Notice

Kinson Management Limited, trading as Tangent, is the data controller for the personal data described in this notice. That means we decide how and why your data is used, and we're responsible for looking after it. Contact us at email us.

• Account details — parent name, email address and login credentials.
• Child profiles — first name, age or year group, chosen subjects, topics, interests and learning preferences, plus the username and PIN a child uses to sign in.
• Learning activity — journeys started and completed, quiz and written answers, scores, reward settings and progress.
• Uploads — homework documents and images you choose to upload.
• Support messages — anything you send us when you get in touch.
• Usage and device data — IP address, device and browser type, and how the service is used, for security and improvement.

Payment card details are collected and processed by Paddle, our Merchant of Record — we never see or store your full card details.

• Providing the service — creating accounts, generating learning journeys, checking answers and tracking progress. Legal basis: performing our contract with you.
• Security and fraud prevention — protecting accounts and the service. Legal basis: legitimate interests.
• Improving the product — understanding how families use Tangent. Legal basis: legitimate interests.
• Customer support — responding to your messages. Legal basis: contract and legitimate interests.
• Marketing — occasional emails about Tangent, only where you've opted in. Legal basis: consent, which you can withdraw at any time.

• Service providers — hosting, database and analytics providers who process data on our behalf under contract.
• Paddle — our Merchant of Record, for the sale of the product, subscription management, payments, tax compliance and invoicing.
• Professional advisers — legal and accounting, where needed.
• Authorities — where the law requires it.

We never sell personal data.

Child profiles are created and managed by a parent or guardian, who controls what is entered. Children sign in with a username and PIN, not an email address. We collect only what is needed to personalise and deliver the learning, and we do not show advertising or use children's data for marketing.

Some of our service providers process data outside the UK/EEA. Where that happens, we rely on appropriate safeguards such as adequacy decisions or standard contractual clauses.

We keep personal data for as long as your account is active and as needed to provide the service. When data is no longer needed — for example after you delete your account — we delete or anonymise it, subject to any legal retention obligations (such as tax records held by Paddle).

Under UK GDPR you have the right to access, rectify or erase your personal data, to restrict or object to processing, to data portability, and to withdraw consent where processing is based on consent. To exercise any of these, email email us — we respond within one month. You also have the right to complain to the Information Commissioner's Office (ICO).

We use appropriate technical and organisational measures, including encryption in transit, access controls and row-level isolation of each family's data, to keep personal data safe.

We use essential cookies and storage to keep you signed in and remember your preferences. We do not use advertising cookies. You can clear cookies and site data in your browser settings at any time.