Privacy Notice

This Privacy Notice explains how Built by swift, trading as TimesX ("TimesX", "we", "us"), collects and uses personal data through the TimesX platform at timesx.co.uk. We are the data controller for the personal data described here, which means we decide how and why it is used. You can contact us at builtbyswift@gmail.com.

• Parent account details: name, email address and password used to create and manage your account.
• Child account details: the username chosen for your child (we do not require an email address for child accounts) and optional display name and avatar choices.
• Learning data: quiz answers, times tables progress, game scores, XP, coins, streaks, achievements and playtime recorded while using the Service.
• Class and family links: class membership (for teacher accounts) and parent–child links, so the right people can see the right progress.
• Usage and technical data: device and browser type, IP address, and how the Service is used, which helps us keep it secure and improve it.
• Support messages: anything you send us when you get in touch.

Payment card details are not collected by TimesX. Payments are handled by Paddle.com as Merchant of Record, and Paddle collects payment data directly under its own privacy policy.

• To provide the Service — creating accounts, saving your child's progress, running games and activities, showing parents and teachers their child's or students' progress. Legal basis: performance of our contract with you.
• To handle payments and subscriptions — working with Paddle to process orders, subscriptions, refunds and tax. Legal basis: performance of our contract.
• To keep the Service safe — fraud prevention, account security and enforcing our terms. Legal basis: our legitimate interests.
• To improve the Service — understanding which activities help learning so we can make TimesX better. Legal basis: our legitimate interests.
• To support you — answering emails and resolving issues. Legal basis: performance of our contract or our legitimate interests.
• To comply with the law — keeping records and responding to lawful requests. Legal basis: legal obligation.

Where we rely on consent (for example for optional future features), you can withdraw it at any time.

TimesX is designed for children, and we treat their data with extra care. Child accounts use a username only — no email address or full name is required. Children's progress and learning data are visible only to their parent or guardian and, where relevant, their class teacher. Children cannot make payments or change account settings themselves.

We share personal data only with the following categories of recipients:

• Service providers — companies that host the Service and its database, provide authentication, and support email delivery, each under contract and only as needed to run the Service.
• Paddle.com — our Merchant of Record, which handles the sale of subscriptions, payments, subscription management, tax compliance and invoicing.
• Professional advisers — lawyers, accountants and insurers where needed.
• Authorities — where required by law, regulation or valid legal process.

We never sell personal data, and we do not use it for third-party advertising.

Our service providers may process data outside the UK and EEA. Where that happens, we rely on recognised safeguards, such as the UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses, or an adequacy decision, to make sure your data stays protected.

We keep account and learning data for as long as your account is active. When you close an account or cancel a subscription, we delete or anonymise personal data within 12 months, except where we must keep it longer for legal, tax or dispute purposes. Support emails are kept for up to 2 years.

Under the UK GDPR you have the right to: access the personal data we hold about you; correct inaccurate data; erase your data; restrict or object to processing; data portability; and withdraw consent where we rely on it. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk. To use any of these rights, email builtbyswift@gmail.com — we'll respond within one month.

We use appropriate technical and organisational measures to protect personal data, including encryption in transit, access controls, and separating who can see which data through database-level permissions. No system is perfectly secure, but we review and improve our safeguards regularly.

TimesX uses only essential cookies and browser local storage to keep you signed in and remember preferences like your child's sound settings and theme. We do not currently use advertising or analytics cookies. You can clear cookies and local storage in your browser settings at any time; clearing the sign-in cookie simply logs you out.

We may update this Privacy Notice from time to time. The latest version is always on this page with its "last updated" date. If a change materially affects how we use your data, we'll let you know by email where we have your address.