How we handle your data.

Who we are, and how to reach us

Kerfox is run by Kerfox Ltd, a private limited company registered in England and Wales under number 17429118. Kerfox Ltd is the controller of your information, which is the legal term for whoever decides what happens to it, and it is the company you are dealing with whenever this page says "we".

You can write to us at eivan.kolchin@gmail.com. We are a small company and a reply can take a day or two. Our registered office address is published in the footer of every page of this site, and you can write to us there for anything formal.

We have not appointed a data protection officer. UK law requires one only in particular circumstances, and Kerfox Ltd does not fall into them: we are not a public authority, monitoring people on a large scale is not what we do, and we do not handle special category data as a core activity. Any question about your information goes to the address above and is answered by us directly.

What this policy covers

This policy covers the Kerfox website at kerfox.app, the first-batch signup on it, and the interest you can express here in the insight programme, and it stops there.

The Kerfox app is a separate thing. It has accounts, saved progress and services of its own, and it carries its own privacy notice, published at kerfox.app/app-privacy so you can read it before installing anything. Nothing you send through this website is put into the app.

The one place the two meet here is the insight programme, described further down, because you can express interest in it on this website and it happens inside the app.

How the signup actually works

This part is unusual, so it is worth being exact about it. The signup form has no server behind it. Nothing you type is sent anywhere while you type it, and nothing is saved in your browser.

When you press "Save my seat", the page gathers your answers into an ordinary email and opens it in your own email app, addressed to us. Nothing has reached us at that point. You can read it, change it, delete anything you would rather not send, or close it and walk away. It reaches us only when you press send yourself.

Because it is an ordinary email, it travels the way your email always travels: out through your own email provider, and into our inbox. Our inbox is a Gmail account, so Google holds the message for us. There is no Kerfox database and no Kerfox server anywhere in this.

It is also worth saying what that means for security. A normal email is not private in the way a sealed letter is. Your provider and ours can technically see it, and it is not encrypted end to end. Please keep that in mind when deciding what to write in the open box.

Cookies, tracking, and the website itself

This website sets no cookies. It has no analytics, no tracking pixels, no advertising tags and no third-party scripts, and it stores nothing in your browser. There is no cookie banner because there is nothing to ask you about.

The contact form is the one part of this site that sends something by itself. When you press send, what you typed, the name you gave and the address you asked us to reply to are posted to our backend, which is hosted by Supabase, and relayed straight into the private channel the same person reads. To satisfy the backend that the request is a real one, the page signs in as an anonymous user for the moment it takes to send; that session lives in the page’s memory and is gone when you close the tab. Nothing about it is written to your browser, and the form is not linked to any account.

We should be straight about one thing that is not ours to switch off. The website is a set of static files hosted by Cloudflare, and like any web host, Cloudflare’s servers see the requests that arrive: your IP address, the browser and device you are using, and the time of the request. That is simply how a page is delivered to you, and it happens whether or not you sign up. We do not build profiles from it, and we get no report about you from it.

One consequence, which we quite like: beyond the plain traffic counts our host shows any site owner, we have no idea who visited this page or what any one visitor did here.

What we ask you for, and what we ask you to leave out

The signup asks for:

• Your first name and email address. These are the only required fields, because without them there is no seat and no way to write to you.
• Who the seat is for: a student, a teacher, a parent, or someone else, with a box to say what "someone else" means.
• The level you are at, or teach, or are interested in.
• Your main subjects, which is optional.
• What brings you to Kerfox, chosen from a short list.
• An optional open answer about the biggest challenge you face with studying.
• Whether you want to join the insight programme. That box is never ticked for you.

None of this is required by law and none of it is part of a contract. The form does ask you to pick a role, a level and a reason before it moves on, because those three shape the questions it asks you next. Your subjects and the open answer are entirely up to you, and leaving them blank means we simply know less about who is waiting. It does not affect your place and we will not treat you differently for it.

Two things we would ask of you before you send it. Please enter only your own details. If you are a parent or a teacher, you are signing yourself up rather than your child or your class, so please use your own name and email and describe the situation without naming anyone else.

And please leave out anything sensitive. The open box invites an honest answer, and honest answers are genuinely useful, but do not include health information, a diagnosis, or anything about anyone else’s health. We are not set up to hold that kind of information. If it arrives anyway, we will read past it, we will not copy it anywhere, and we will delete the message sooner than we otherwise would. You are also welcome to ask us to delete it at once.

Why we hold it, and what allows us to

UK law asks us to say, separately for each thing we do, why we do it and what permits it. There are three here.

• To hold your place and write to you once, on the morning the first release opens. What permits this is your consent, which you give by ticking the consent line on the form before your email app opens, and the exact wording you agreed to is copied into the email itself, so that you and we end up holding the same record of what was asked and what was answered.
• To understand who is waiting and what they find hard, from your role, level, subjects, reason and open answer, so the app is shaped around real difficulty rather than guesses, which is a use we also state on the form itself so that you know about it before you send anything.
• To record how the app is used in more detail, if you join the insight programme. What permits this is your consent: ticking the box here is an expression of interest, and the app will ask you again before any extended recording starts. The app’s own ordinary record of use is a separate matter, covered by the app rather than by this page.

Nothing here is decided about you by a machine. There is no automatic sorting, scoring or ranking of who gets a seat, and no profiling. The app itself does adapt to you, since its memory engine notices which questions you find hard and changes what it shows you next, but that is the product working. It has no legal or similarly serious effect on you, and the app’s own terms describe it.

The insight programme

The insight programme is optional, it is off unless you choose it, and where the person using the app is under 18 it stays off unless they choose it again inside the app after reading a plain explanation written for that age, because a detailed record of when a young person studies and when they stop deserves that much care.

If you join, early test builds of the app may record how the app is used, in more detail than usual. In practice that means things like:

• how long you use it, and how often
• what times of day you study, and which days you skip
• whether your use is steady or comes in bursts
• which parts of the app you spend your time in, and when
• how your streaks build, and where they break

The reason is simple. Nobody has watched Kerfox being used in real life yet, and we would rather learn from what actually happens than from what we imagine happens.

Ticking the box on this website starts no recording at all, though the tick itself travels in your email and we keep it alongside your other answers, so that we know to expect you and can show later what you agreed to.

Your seat does not depend on this. Saying no changes nothing about when you hear from us, or what you get.

If we ever wanted to record something meaningfully beyond the list above, that would be a new question and we would ask it fresh rather than quietly widening this one.

Who else can see it

Inside Kerfox Ltd, only the people who need to in order to answer you, and today that is a very short list. Beyond that, three others are involved simply by carrying the message or serving the page:

• Google, because our inbox is a Gmail account and your signup email sits on Google’s systems.
• Your own email provider, whoever that is, because it is your email app that sends the message. That part is outside our reach entirely.
• Cloudflare, which hosts the website’s files and therefore sees requests arriving, as described above.

We never sell your information and we never share it for advertising. We do not pass it to schools, colleges or exam boards. Kerfox has no partnership with any exam board, school or university, and writing to us does not tell anyone at your school anything.

The app uses more services than this, including a backend for accounts and a feature that uses AI. They belong to the app, not to the waitlist, and the app’s own privacy notice will describe them when it is written.

If the law ever required us to hand something over, we would have to. We would tell you, unless we were forbidden from telling you.

Where it goes in the world

Some of this leaves the UK. Google and Cloudflare are large international providers, and their systems are not confined to Britain. We cannot honestly promise that your information stays here, so we will not.

Some of this leaves the UK, and we should be exact about what protects it. For the website’s host we rely on the transfer terms Cloudflare publishes for its services. For the inbox we have to be straight with you: it is an ordinary personal Gmail account, which carries no separate data processing agreement, so your message abroad has whatever protection Google’s consumer terms give any personal mailbox and no more. Please keep that in mind when deciding what to write.

If you want to know exactly what covers your information on its way abroad, write to us and we will tell you plainly what we have and what we do not.

How long we keep it

We keep your signup email until the first release has opened and we have written to you, and then for three months after that, in case you reply or something goes wrong with the launch email. Then we delete the message and empty it from the bin.

If the first release has not opened by 15 August 2027, we will delete the list anyway rather than sit on answers that have gone stale.

One short record is kept a little longer. We keep your name, your email, the date you signed up and a dated copy of the wording you agreed to, because the law asks us to be able to show what you agreed to, and we delete it one year after the launch email goes out. We keep that record by hand alongside the signup emails, because there is no database here to keep it for us.

An honest note about deleting. When a message is deleted from a Gmail account it goes from the mailbox, but Google holds copies in its own backups for a period afterwards before they age out. That part is not in our hands, and nobody at Kerfox can see or reach those copies.

Ask us to delete your information and we will, whenever you ask, and the only thing we may keep afterwards is the short consent record described above, because the law asks us to be able to show what you agreed to, and that goes on the date already given.

Your rights, and changing your mind

You have these rights over information we hold about you, and all of them are easy to honour here, because what we hold is a handful of emails in one inbox. If we ever had to refuse a request, we would tell you why, and we would tell you at the same time that you can take it to the ICO or to a court.

• See it. Ask for a copy of what we hold about you.
• Correct it. Tell us something is wrong and we will fix it.
• Delete it. Ask us to remove you, and the email and the record go.
• Restrict it. Ask us to keep it but stop using it while something is being sorted out.
• Take it with you. Ask for your answers in a form you can reuse somewhere else.
• Object. Tell us to stop reading your answers to shape the product, which is the purpose resting on legitimate interests, and we will stop. You can also object to the launch email itself at any time, and that one we must always honour, with no balancing and no questions asked.

To use any of them, write to eivan.kolchin@gmail.com. There is no form and no fee. We will answer within one month, and usually much sooner, because the request lands in the same inbox your signup did.

You can also withdraw your consent whenever you like, and it is as easy as giving it. Reply to any email from us, or write to the address above, and we will take you off the list. For the insight programme, turn the switch off in the app.

Withdrawing stops things from that moment onwards. It does not make what happened before unlawful, and there is nothing you need to do about that.

If you are unhappy with something

Please tell us first. Write to eivan.kolchin@gmail.com, or say it in a reply to any email from us. It counts as a complaint however it arrives, and you do not need to call it a complaint or use any particular words.

Since June 2026 the law gives you a right to complain directly to us about how your information has been handled, and it sets out what we owe you in return: we will acknowledge your complaint within 30 days of receiving it, look into it without undue delay, and write to tell you the outcome.

You also have the right to complain to the Information Commissioner’s Office, the UK’s data protection regulator. You can complain to the ICO at any time, although since June 2026 it normally expects you to have raised the matter with us first and given us a reasonable period, usually around forty five days, to answer, and it can decline to take a complaint further if you have not, so writing to us first is both the quicker route and the one that keeps the ICO route open to you.

• ico.org.uk/make-a-complaint
• Helpline 0303 123 1113
• Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF

If you are under 13

You should be 13 or over to send us the signup yourself. That is the age UK law sets for agreeing to something like this on your own.

If you are younger than 13, please ask a parent or guardian to sign up in their own name and with their own email address, and to leave your name and details out of the message entirely, because the seat is theirs to hold and we would rather hold nothing about you at all until you are old enough to ask for it yourself.

We do not ask for your date of birth and we would rather not know it. Asking children to hand over more information about themselves in order to protect them is the wrong trade, so we ask the question here instead and trust the answer.

Kerfox is built for students, and many of the students it is built for are 14, 15 and 16.

Changes to this page

The site is changing quickly at the moment, so this page will change too. When it does, we will update the date at the top.

If a change actually affects you, for instance if we ever wanted to use your answers for something new, we will not do it quietly. We will write to you and ask.

This page is governed by the law of England and Wales, and nothing on it takes away rights you have under UK law.