Lost Marks1. Who we are
Lost Marks is an app run by Henley Education Ltd (company number [company number], registered office [registered office address]). Henley Education Ltd decides how your personal data is used, which makes it the "data controller" under UK data protection law. We are registered with the Information Commissioner's Office (ICO) under number [ICO registration number].
To ask anything about your data, email privacy.info@henleyed.co.uk. We reply within one month, and usually much sooner.
This policy covers the Lost Marks app only. The Henley Education platform at henleyed.co.uk has its own privacy policy.
2. Who Lost Marks is for
Lost Marks is for students aged 13 and over in the UK who are studying GCSE science or maths. You must be 13 or over to make an account, and you agree to this policy yourself when you sign up. Because many of our users are under 18, we follow the ICO's Age Appropriate Design Code (the Children's Code).
3. What we collect
| What | Examples | Where it comes from |
|---|---|---|
| Account details | Your email address, or the private relay address Apple gives us if you hide your email; an Apple sign-in identifier; a scrambled (hashed) password for email accounts | You, or Apple when you use Sign in with Apple |
| Your subjects | Exam board, subject and tier for each subject you take | You |
| Photos of your work | The question and your handwritten answer | You. Read, then discarded: never stored (see section 5) |
| Your answers and results | The question and answer text we read from the photo, your marks, feedback, reasons marks were lost, and hints | Created by Lost Marks from your photo |
| Your consent | The consent wording you agreed to, its version and the time | You, at sign-up |
| Subscription status | Whether you have free marks left or a subscription, and when it renews | Apple. We never see your card details |
| Device check | A flag held by Apple saying whether this iPhone has used its free marks | Apple DeviceCheck. It holds no personal details |
| Security and running records | App version, the time of each request and an internet (IP) address, to keep the service safe and working | Your iPhone, automatically |
We do not collect your name, school, location, contacts or anything from the rest of your phone. We do not use advertising, tracking or analytics companies.
4. How we use your data, and why we're allowed to
UK data protection law says we need a lawful reason for each use. [Lawful reasons to be confirmed by the adviser.]
| What we do | Why we're allowed to |
|---|---|
| Read and mark your photos, and show your results, history and lost marks profile | To provide the service you signed up for (contract) |
| Send your photos to our AI provider to read and mark them | To provide the service (contract). We also ask you to agree to this at sign-up, so it is never a surprise |
| Manage your free marks and subscription | To provide the service (contract) |
| Stop misuse, such as repeat free accounts or automated requests, and keep the service secure | Our legitimate interest in running a safe, fair service |
| Work out overall accuracy and costs from anonymous totals, to improve marking | Our legitimate interest in improving Lost Marks. These totals never identify you |
| Email you about your account (confirming your email, deletion, important changes) | To provide the service (contract) |
We never sell your data, use it for advertising, or build a profile of you for anyone but you.
5. Your photos and the AI
To mark your work, Lost Marks sends each photo to Mistral AI SAS, an AI company in Paris, France. This is how it works:
- As soon as the photo reaches our server, and before it goes anywhere else, we remove its hidden details, such as location (GPS) and camera information.
- Mistral AI reads the question and your answer. Our instructions tell it to read only the question and answer text, and to ignore names, faces and school details.
- Lost Marks keeps the text it read, your marks and feedback. The photo itself is never stored by Lost Marks. It is processed in memory and then discarded.
- Under its terms for business customers, Mistral AI does not use what we send it to train its AI models, and keeps it only for a short period. [Confirm Mistral's current retention period.]
Your marks are AI estimates. They are not marked by a teacher or an exam board, and they are for guidance only. They have no legal or other significant effect on you. If you think a mark is wrong, tap Report this mark on the result and we will look at it.
6. Who we share data with
We use a small number of companies to run Lost Marks. They act on our instructions, under contracts that protect your data. Apple acts on its own account for purchases and sign-in.
| Company | What they do for Lost Marks | What they get | Where | Protection for transfers |
|---|---|---|---|---|
| Mistral AI SAS | Reads and marks your photos | Your photos and the question text | France (EU) | UK adequacy regulations (EU) |
| Supabase Inc. | Our database | Your account, subjects and results | US company; data stored in London | UK International Data Transfer Agreement (IDTA) [confirm] |
| Render Services Inc. | Hosts our server | Everything passing through the app, in transit | [Region to confirm] | UK International Data Transfer Agreement (IDTA) [confirm] |
| Apple | App Store purchases, Sign in with Apple, DeviceCheck and App Attest | Purchase and sign-in records; a device flag | US company | Apple's own privacy terms; UK-US data bridge [confirm] |
| [Email provider, for example SendGrid] | Sends account emails | Your email address | US company | UK-US data bridge [confirm] |
We may also share data if the law requires it, for example a court order. We do not share your data with schools, parents or anyone else unless you ask us to.
7. How long we keep it
| Data | How long |
|---|---|
| Photos | Not kept at all: discarded once read |
| Your results (answer text, marks, feedback, reasons, hints) | 6 months, then deleted automatically. Your lost marks profile covers the same 6 months |
| Your account and subjects | Until you delete your account. If you don't use Lost Marks for 18 months, we email you, then delete the account if you don't reply [confirm] |
| Your consent record | For as long as your account exists, so we can show you agreed [confirm whether to keep longer] |
| Security and running records | [30 days, to confirm] |
| Backups | Deleted data disappears from backups within [number to confirm] days |
| Anonymous cost and accuracy totals | Kept, as they do not identify anyone |
8. Your rights
You have the right to:
- see the personal data we hold about you, and get a copy;
- correct anything that is wrong;
- delete your data. The quickest way is Account, then Delete my account in the app. It deletes your account, results and history straight away. Your subscription is separate: cancel it in your iPhone's Apple settings;
- ask us to limit how we use your data, or object to how we use it;
- take your data to another service in a common format.
To use any of these rights, email privacy.info@henleyed.co.uk. We reply within one month. If you delete your account, the flag Apple keeps saying this iPhone has used its free marks stays, but it holds no personal details.
If you're unhappy with how we've handled your data, please tell us first. You can also complain to the Information Commissioner's Office: ico.org.uk, or 0303 123 1113.
9. Children, security and changes
Children. Following the Children's Code, Lost Marks is private by default: there are no adverts, no sharing with other users, no location tracking, and no nudges to give us more data than the app needs. Your results are only shown to you.
Security. Data is encrypted while it travels between the app and our server. Access to the database is limited to the people who run Lost Marks. Passwords are stored scrambled (hashed), never as plain text. Apple's App Attest checks that requests come from the genuine Lost Marks app.
Changes to this policy. If we change how we use your data, we will update this page and tell you in the app. If the change is about what is sent to the AI, we ask you to agree again before your next photo is sent.
Contact. privacy.info@henleyed.co.uk, or Henley Education Ltd, [registered office address].
Subscription terms
- Free marks: each iPhone gets 3 free marks. Making a new account on the same iPhone does not give more.
- Price: Lost Marks Monthly costs £3 a month, including VAT, charged to the Apple ID on your iPhone.
- Renewal: it renews automatically each month unless you cancel at least 24 hours before the renewal date.
- Cancelling: in your iPhone's Settings, under your name, then Subscriptions. You keep access until the end of the month you've paid for.
- Refunds: handled by Apple, through reportaproblem.apple.com.
- What you get: marking of GCSE science and maths answers from photos, feedback, your results history and your lost marks profile, within fair use [fair use terms to confirm].
- Marks are estimates: Lost Marks gives AI estimates for revision. They are not official marks from an exam board or a teacher.
- Changes: if the price changes, Apple tells you first and you choose whether to continue.
Apple's standard licence terms for apps also apply. [Decide whether to use Apple's standard terms or write our own.]