Privacy Policy

ReadingSteps ("we", "us", or "our") is a reading management platform for UK primary schools. This Privacy Policy explains how we collect, use, and protect personal information when schools, staff, and students use ReadingSteps.

We are committed to protecting the privacy of children and comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Account information — school details, staff names and email addresses, and student usernames created by schools.

Reading activity — books read, pages and minutes logged, reviews, and reading progress data.

Usage data — basic technical information such as device type and pages visited, used to keep the service secure and reliable.

To provide the ReadingSteps service, including tracking reading progress and generating reports for teachers and school leaders.

To keep accounts secure, prevent misuse, and maintain the reliability of the platform.

To improve ReadingSteps based on how the service is used. We never sell personal data.

Student accounts are created and managed by schools acting as the data controller. ReadingSteps acts as a data processor on behalf of the school.

We collect the minimum information needed for students to use the service and never use children’s data for advertising or marketing.

Student data is scoped to each school — staff can only access students within their own school.

We use trusted service providers (such as our hosting and database providers) to operate ReadingSteps. These providers process data only on our instructions.

All data is protected with Row Level Security and encrypted in transit. Access to personal data is restricted to authorised users only.

You have the right to access, correct, or delete personal data, and to restrict or object to certain processing. Schools can manage student accounts directly, or contact us for assistance.

If you have any questions about this Privacy Policy or how we handle personal data, please contact us via our support page.