Privacy notice
How we look after your family's data
Last updated 23 September 2026
Who we are
Mizasi is run by Mizasi Ltd, a company registered in England and Wales (company number 17412116). Our registered office is Unit 16, Slough Business Park, 94 Farnham Road, Slough, England, SL1 3FQ. We are the data controller for the information described here.
Our Data Protection Officer is Farrukh Mian. You can contact them about privacy or your data at stealth@mizasi.com, or call us on 07951 005721.
What we collect
About you (the parent or guardian): your name, email address, password or sign-in provider, billing details (handled by our payment provider, so we never see full card numbers), your parent PIN (stored securely as a hash), and your settings.
About your child: their first name, year group, exam board, exam date and target schools, their Mizmate avatar, and learning data such as answers, timings, hints used and progress. We do not collect a child's surname, email address, photo, precise location or contacts.
On our website: your email address if you join the founding list, and essential cookies. Analytics cookies are only used if you allow them.
Why we use it, and our lawful basis
To provide Mizasi, including personalising your child's learning path. This is necessary to perform our contract with you.
To send you service emails, such as receipts, security messages and reminders before a free period ends. This is also necessary for the contract.
To send weekly progress reports, 11+ tips and marketing emails. We only do this with your consent, which you can withdraw at any time.
To improve our questions using anonymised answer data, only if you switch on 'Help improve questions'. It is off by default.
To keep the service secure and meet our legal obligations, such as tax records. This is our legitimate interest or legal obligation.
Children's privacy
Mizasi is designed to follow the ICO's Age Appropriate Design Code (the Children's Code). Only a parent or guardian can create an account and add a child, after giving consent. Children cannot sign up themselves.
The child's space has high privacy settings by default: no adverts, no chat, no public profiles or leaderboards, no third-party advertising or analytics trackers, and no location tracking. Children never see prices or payment prompts.
We explain to children, in child-friendly words, what Mizasi knows about them and why.
How our AI uses learning data
Mizasi builds a learning profile of your child so it can choose what to teach next. This is profiling, but it has no legal or similarly significant effect. It only affects which practice questions and lessons are suggested.
In the Parent zone you can always see why Mizasi changed the plan. You can also reset your child's profile, or ask us to review any decision.
How long we keep it
We keep your account data while your subscription is active. If a child profile has been inactive for 24 months, we warn you and then delete it.
When you delete a child profile, we keep it for 30 days in case you change your mind, then erase it permanently and email you to confirm. Billing records are kept for 6 years to meet tax law.
Your rights
You can access, download, correct, restrict or delete your data and your child's data, object to processing, and withdraw consent. Most of these take two taps in Parent zone → Account → Privacy & data. For anything else, email stealth@mizasi.com. We reply within one month.
If you're unhappy with how we handle your data, you can complain to the Information Commissioner's Office at ico.org.uk. We'd appreciate the chance to put things right first.
Security
Data is encrypted in transit and at rest. The Parent zone is protected by a PIN or Face ID. Staff access to children's data is limited, logged and reviewed.