Stackr

Privacy & Data Protection

Privacy Policy

We believe in transparent, student-first privacy. Learn how your data is collected, protected, and controlled.

Last updated: November 5, 2026GDPR • COPPA • Store Compliant

Zero Data Selling

We never sell, rent, or monetize your personal data or student projects to advertisers.

Simple Account Deletion

Delete your account and all associated data anytime via app settings or a single email.

Children & Youth Safety

Compliant with UK Age Appropriate Design Code and COPPA for young coders and robotics students.

Store Policy Compliant

Strictly adheres to Apple App Store 5.1.1 and Google Play Store User Data safety requirements.

1. Data Controller & Overview

This Privacy Policy explains how Pocket Studios Group Ltd (“Stackr”, “we”, “us”, or “our”) collects, uses, protects, and discloses personal information when you use our mobile applications on iOS (Apple App Store) and Android (Google Play Store), our web platform at learn.stackr.site, our LMS dashboard, and related cohort learning services (collectively, the “Services”).

Pocket Studios Group Ltd is a company incorporated in England and Wales (Company No. 17339787), with registered office at Office 2011, 321-323 High Road, Essex, RM6 6AX, United Kingdom. We act as the Data Controller under the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and EU GDPR.

For any data protection inquiries, you may reach our Data Protection Officer at [email protected] or email us at [email protected].

2. Information We Collect

We collect only the personal information necessary to deliver educational and mentorship services:

A. Account & Identity Information

Your name, email address, password/authentication tokens, and optional phone/WhatsApp number used for cohort reminders and mentor communication. For minors, parent/guardian contact details are collected.

B. Academic & Learning Progress

Course registrations, live cohort attendance logs, video progress timestamps, quiz attempts and results, submitted code files, robotics schematics, milestone grades, instructor feedback notes, and issued credentials.

C. Technical & Device Information

IP address, operating system (iOS, Android, macOS, Windows), browser type, app version, session duration, and crash diagnostic logs. This data is transmitted exclusively via encrypted TLS 1.3 connections.

D. Payment & Transaction Records

Payment confirmation IDs, installment schedules, and billing timestamps. All card transactions are processed directly through PCI-DSS Level 1 compliant processors (such as Stripe, Apple In-App Purchase, or Google Play Billing). Stackr never stores raw credit card numbers or bank credentials.

3. Legal Bases & How We Use Your Data

Under UK and EU data protection laws, we process your information under the following lawful bases:

  • Performance of a Contract: To set up your account, enroll you in live cohorts, match you with 1-on-1 mentors, process trial deposits or split installments, grade assignments, and issue verifiable CPD certificates.
  • Legitimate Interests: To improve our software architecture, enhance educational curriculum, maintain platform security, detect fraudulent access, and provide customer support.
  • Legal Obligation: To maintain required accounting records, tax documentation, and safeguarding logs required by UK educational standards.
  • Consent: Where you have opted in to receive non-essential marketing newsletters or cohort batch announcements. You may withdraw consent at any time.

4. Mobile App Permissions (Apple & Google Play)

Our mobile application on the Apple App Store and Google Play Store operates with minimal device privileges. We explicitly disclose the purpose of any permission requested:

Camera & Photo Library (Optional): Used exclusively when you choose to photograph an Arduino/circuit board, upload a project screenshot, or set a profile avatar. We never access your photos without your direct selection.
Push Notifications (Optional): Used to notify you of upcoming live cohort classes, assignments due, or 1-on-1 mentor messages. You can disable notifications anytime in your device settings.
No In-App Tracking: Stackr does not use Apple IDFA (Identifier for Advertisers) or Google Advertising ID. We do not track your activity across third-party apps or websites for targeted advertising.

5. Account Deletion & Right to Erasure

In strict compliance with Apple App Store Guideline 5.1.1(v) and the Google Play Store Data Safety requirements, users can easily initiate account deletion at any time:

How to Delete Your Account & Data

  1. Directly from the App/Web: Navigate to Profile → Account Settings → Delete Account.
  2. Online Request Form: Submit an automated request directly through our Data & Account Deletion Form (also available at /data-deletion).
  3. Via Email Request: Send an email from your registered address to [email protected] with the subject line Account Deletion Request.

Upon receipt, all your profile details, login credentials, and code submissions will be permanently purged from our active servers within 30 days. If you hold an issued CPD certificate, a minimal hash is retained solely for cryptographic verification authenticity unless you request full revocation.

6. Children & Minors' Privacy

Stackr is committed to protecting young learners. We adhere to the Children's Online Privacy Protection Act (COPPA) and the UK Age Appropriate Design Code (Children's Code):

  • We do not knowingly collect personal data from children under 13 without verifiable parental or guardian consent.
  • We do not display public advertising, behavioral trackers, or gamified purchase incentives to minors.
  • Cohort chat rooms and live lab sessions are actively moderated by verified Stackr instructors.
  • Parents and guardians have the right to inspect, correct, or request the deletion of their child's personal data at any time by contacting [email protected].

7. Third-Party Service Providers

We partner with vetted, secure infrastructure providers who process data strictly under Data Processing Agreements (DPAs):

  • Supabase: Encrypted cloud database, user authentication, and secure file storage (AWS EU/UK regions).
  • Vercel & Cloudflare: Edge hosting, application delivery, and DDoS protection with TLS encryption.
  • Stripe / Apple / Google: Secure payment processing and subscription billing.
  • ZeptoMail: Automated transactional email delivery (progress reports and onboarding packets).

We never authorize third parties to use your personal information for their own commercial or advertising purposes.

8. Your Legal Rights Under GDPR & CCPA

Depending on your location, you have strong legal protections regarding your personal data:

Right to Access: Request a full copy of the personal data we hold about you.
Right to Rectification: Request correction of any inaccurate or incomplete details.
Right to Erasure: Request permanent deletion of your data (“Right to be Forgotten”).
Right to Portability: Receive your learning records and submissions in a standard format.

To exercise any of these rights, email us at [email protected]. We respond to all verified requests within thirty (30) days without charge. If you reside in the UK, you also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

9. Policy Updates & Contact

We may update this Privacy Policy periodically to reflect technological changes, new platform features, or evolving regulatory requirements. Significant revisions will be highlighted via in-app banner or email notification.

For questions, complaints, or feedback regarding our privacy practices:

Pocket Studios Group Ltd (Trading as Stackr)

Attn: Data Protection Officer

Office 2011, 321-323 High Road, Essex, RM6 6AX, United Kingdom

Email: [email protected]

Your Data Belongs to You

Need a copy of your records, or want to request account deletion? Our Data Protection Officer is ready to assist.

Contact Privacy Team ([email protected])