Privacy notice

Last reviewed: 14 October 2026. Klimup (klimup.co.uk) is run by Netklip Software Limited (registered in Nigeria, RC 1959359). Questions about your data: [email protected].

What we keep

Your account: your name, sign-in name, email address, a securely hashed password (we can't read it), and anything you write in "About you".
Your learning: the answers you give, your marks, how long you spent, how sure you said you were, the reasons you choose for lost marks, your progress through each topic, and the atoms and badges you earn.
Technical: sign-in cookies that keep you signed in, and basic server logs.

Why

To run your account and show your progress, reviews and rewards.
To let the person who runs this site, and any parent or guardian linked to your account, see your progress and support you.
To email you about your account (for example, when it is approved).

Who else sees it

AI marking and tutor: when the AI features are switched on, the question, your typed answer or photo of your working, and messages you send the tutor are sent to Anthropic (the company behind Claude) to be marked or answered. Your name and email are not sent.
Email: account emails are sent through Netklip's email provider.
The site owner and a child's parents can see their progress; we keep a log of who looked. Whenever the site owner, or a parent who is not the child's main parent, opens a child's progress, answers or report, we record who it was and when (kept for 12 months), so we can always answer "who has seen my child's work?".
We don't sell your data or use it for advertising.

How long

We keep your data while your account is open. A request for a parent account that is never confirmed by email is deleted after 7 days. Ask us at [email protected] to see a copy, correct it or delete your account and its data.

Cookies

We only use cookies needed to sign you in and keep forms secure. There are no advertising or tracking cookies.

The sign-in cookie lasts 14 days if you tick "Keep me signed in" (only on your own device), otherwise 12 hours; admin accounts are signed out after 1 hour without use or 8 hours in total. Logging out ends the session on every device. To protect accounts from guessing, we count wrong passwords for each sign-in name (we store a scrambled code for the name, never what was typed, and the network address of the last attempt) and pause sign-in for that name for a while after 8 in a row; the record is removed when you next sign in, or two days after the last attempt. Parents and admins can turn on two-step sign-in with an authenticator app.

This notice will be updated if what we collect or how we use it changes; check the date above.