Back

Privacy Policy

Last updated: March 2026

Transfer With Me is operated by Moyola AI (“we”, “us”, “our”). We are committed to protecting the privacy of our users, particularly children. This policy explains how we collect, use, and safeguard your information.

1. Information We Collect

Account Information

  • Parent email address and name (required for account creation)
  • Child's first name, year group, and school (provided during onboarding)
  • Companion owl name (chosen by the child)

Usage Data

  • Practice session results (questions answered, scores, time taken)
  • Progress metrics (streaks, XP, topic performance)
  • AI companion interactions (used to personalise guidance)

Payment Information

Payment details are processed securely by Stripe. We do not store card numbers, CVV codes, or bank details on our servers. We retain only the subscription status and Stripe customer ID.

2. How We Use Your Information

  • To provide and personalise the practice experience for your child
  • To generate progress reports and weekly digest emails for parents
  • To process subscription payments via Stripe
  • To improve the quality of our questions and AI tutor responses
  • To communicate service updates or respond to support queries

3. Children's Data

We take the protection of children's data seriously, in line with the ICO's Age Appropriate Design Code and UK GDPR requirements.

  • We collect only the minimum data necessary to deliver the service
  • Children's accounts are managed by their parent or guardian
  • We do not sell or share children's data with third-party advertisers
  • AI companion conversations are not used for marketing purposes
  • Children cannot make purchases or share personal information publicly

4. Cookies

We use essential cookies to maintain your login session and remember your preferences. We do not use tracking cookies or third-party advertising cookies.

5. Data Sharing

We share data only with the following service providers, all of whom process data on our behalf:

  • Supabase — database hosting and authentication
  • Stripe — payment processing
  • Resend — transactional emails
  • Google (Gemini) — AI tutor responses (no PII is sent)
  • Vercel — website hosting

We do not sell your data to any third party.

6. Data Retention

  • Account data is retained while your subscription is active
  • After account deletion, we remove personal data within 30 days
  • Anonymised, aggregated analytics may be retained indefinitely

7. Your Rights

Under UK GDPR, you have the right to:

  • Access the personal data we hold about you and your child
  • Request correction of inaccurate data
  • Request deletion of your data (“right to be forgotten”)
  • Export your data in a portable format
  • Withdraw consent at any time

To exercise any of these rights, email us at help@transferwithme.com.

8. Data Security

We use industry-standard security measures including encrypted connections (TLS), row-level security in our database, and secure authentication via Supabase Auth. Access to production data is restricted to authorised personnel only.

9. Changes to This Policy

We may update this policy from time to time. We will notify registered users of material changes via email. The “last updated” date at the top of this page indicates when the policy was last revised.

10. Contact Us

If you have questions about this privacy policy or wish to make a data request, please contact us: