1. Who we are
Noggli is run by Chris Thrower, an individual based in England. In this policy, "we" means Noggli and its operator. Chris Thrower is the data controller for the information described here.
Contact us about anything in this policy at [email protected].
2. What we collect
About you, the parent or carer
- Your email address, used to sign you in and to send the emails described below.
- Your settings: whether you want the weekly note, and your curriculum region.
- Sign-in records: a one-time link token (kept for up to 24 hours) and a session that keeps you signed in for up to 90 days.
- If you set a grown-ups PIN, a scrambled (hashed) copy of it. We never store the PIN itself.
- For each tablet or phone you pair: a scrambled copy of its pairing key, a general device type such as "Samsung Galaxy tablet", and when it was paired and last used.
About each child you add
- A first name and a school year group. We ask you to enter a first name only.
- Practice records: the questions shown, the answer given, whether it was right, whether a clue was used and roughly how long it took.
- The levels Noggli works out for each topic, the explanation of where each subject started, and the notes written for you.
- Anything the child types to the helper, and the helper's replies. You can read all of these on your child's page.
- Answers the child types to reading and writing questions.
- The squishies they collect and, if they choose to tap one, a face at the end of a sitting.
If you contact us
If you use the contact form or email us, we receive your email address, your name if you give it, and your message. We use them only to reply. The contact form does not store your message on our servers: it is emailed to our inbox, where we keep it for as long as we need to deal with it and for up to two years after that.
If you ask about a paid plan
If you tap "Tell me when it launches" on the pricing page, we record which plan you asked about and email you once when it is available.
What we do not collect
No surname, date of birth, school name, photo, location, child email address or phone number. The read-aloud voice is your device's own and nothing is recorded. Children do not have accounts or passwords.
3. Why we use it, and our legal basis
| Purpose | Legal basis (UK GDPR) |
|---|---|
| Running your account and the game, adapting questions, and showing you your child's progress | Performance of our contract with you |
| Sending sign-in links, the welcome email and, if switched on, the weekly note | Performance of our contract with you |
| Keeping the service safe, fixing faults, preventing misuse and limiting AI use per child | Our legitimate interests in running a safe, reliable service |
| Replying to messages you send us | Our legitimate interests in answering you |
| Meeting legal obligations and responding to your requests | Legal obligation |
We do not use children's information for advertising, and we do not build profiles of children for any purpose other than choosing the next question and explaining progress to you.
Our welcome email includes one short mention of Orrla, a separate product from the same maker. We do not send any other marketing email.
4. How AI is used
Maths questions, and most English questions, are generated and marked by ordinary code. For the helper, explanations, reading passages, feedback on written answers, the placement summary and the weekly note, we send the relevant text to an AI model provided by Anthropic. That text can include the question, the child's typed message or answer, the child's first name and year group, and a summary of recent practice.
We send the minimum needed for each task. Replies are checked by our own code before they are shown, and each child has a daily limit. We do not use children's information to train AI models, and our agreement with our AI provider does not permit them to train their models on it.
5. Who we share it with
We do not sell personal information. We use a small number of service providers who process it on our instructions:
| Provider | What for | Where |
|---|---|---|
| Railway | Hosting the app and its database | European Union (Netherlands) |
| Cloudflare | Network security and delivery | Global network |
| Resend | Sending emails, including contact form messages | United States |
| Anthropic | The AI features described above | United States |
Where information is processed outside the UK, we rely on the safeguards UK data protection law provides for, such as adequacy regulations or the International Data Transfer Agreement or Addendum.
If you create a read-only link for a teacher, anyone with that link can see your child's first name, year group, skill tables and common mix-ups, and nothing else. You can switch the link off at any time.
We may disclose information if the law requires it.
6. Cookies and device storage
We set a cookie that keeps you signed in and, on a tablet or phone you pair, a cookie that links it to your child's game. Both are strictly necessary for the service you asked for, so no cookie banner is needed. We do not use advertising or analytics cookies.
The game also stores a little on the device itself so it works smoothly: the sound setting, the current mould and fluff, the chosen subject, and answers waiting to sync if the connection drops.
7. How long we keep it
- We keep your account and your children's information for as long as your account exists.
- You can delete a child at any time from their page. This permanently removes every answer, level, squishy, note and chat for that child straight away.
- You can delete your whole account from your family page. This removes you, every child and every session.
- Routine backups made by our hosting provider may hold deleted information for a short period before they are overwritten.
8. Children's privacy
Noggli is used by children but set up and controlled by an adult. We have designed it with the ICO's Age Appropriate Design Code in mind: we collect as little as we can, there is no advertising or data sharing for commercial purposes, there are no features that push a child to give more information or to keep playing, and parents can see and delete everything.
9. Your rights
Under UK data protection law you have the right to ask for a copy of the information we hold about you and your children, to have it corrected or deleted, to restrict or object to how we use it, and to receive it in a portable format. Email [email protected] and we will respond within one month.
If you are unhappy with how we have handled your information, please tell us first. You also have the right to complain to the Information Commissioner's Office at ico.org.uk.
10. Changes to this policy
If we change this policy in a way that matters, we will email you before the change takes effect. The date at the top shows when it was last updated. See also our terms.