Your private work stays private
Linked adults do not receive journal entries or Safe Chat transcripts.
Safety themes can create an alert
If wording suggests serious risk, the linked adult may receive a theme-only prompt to check in.
You can ask questions
Young people can ask a trusted adult or contact us for this information in plainer words.
Who is responsible
Happy Mind Society is the data controller for HMS Jr. Privacy questions, rights requests, or complaints can be sent to info@happymindsociety.com.
Information we use
We use adult account details such as name, email and authentication records; child profile details such as a chosen name, access code, age band, pronouns and delivery preferences; and the consent trail that links or disconnects an adult and child.
To provide the service, we also keep purchases, course entitlements, progress, XP and rewards. Private journals and Safe Chat content are processed only to provide those features and apply the stated safety rules. We may keep the resulting risk category, alert status and an audit record without showing the linked adult the private words.
Basic device, security, diagnostic and privacy-respecting usage information may be used to keep the service reliable and understand whether public pages work.
Why we use it
We process account, course and purchase information to provide the service you request and fulfil our contract. We use proportionate security, fraud prevention, service improvement and safety processing for our legitimate interests, while prioritising the best interests and privacy of children. We keep records where tax, accounting, consumer or other law requires it. Where consent is the appropriate basis, it can be withdrawn.
HMS Jr does not use private journals or chats for advertising, sell personal information, or use emotional information to manipulate engagement.
What a linked adult sees
A child must approve the account link. Once linked, the adult can see course access, progress signals, earned rewards, purchase requests and support guidance. They cannot enter the child lesson space or read private journals and chats.
Safety alerts are designed to share the minimum useful theme and urgency, not the private transcript. No automated wording check is perfect, and HMS Jr is not monitored crisis care.
Services that help us run HMS Jr
KH Digital Studio infrastructure hosted on DigitalOcean supports accounts and course records. Vercel hosts the website. Stripe processes payments. Resend delivers service emails. Each provider receives only the information needed for its job and acts under its own security and data-processing terms.
Some providers may process information outside the UK. Where required, we rely on recognised transfer safeguards and contractual protections.
How long we keep information
We keep account and learning information while access is active and only as long afterwards as needed to provide access, resolve a request, protect the service, or meet legal obligations. Financial records may need to be retained for statutory accounting periods. Disconnecting an adult removes their link; it does not automatically delete the child account. Account deletion can be requested by contacting us.
Your choices and rights
Depending on the circumstances, you can ask for access, correction, deletion, restriction, portability, or object to processing. You can also raise a data protection complaint with us. We may need to confirm identity and explain if a legal exception applies.
If you remain unhappy, you can complain to the Information Commissioner's Office. See our contact page for help.