How we handle your data.

Who we are, and how to reach us

Kerfox is run by Kerfox Ltd of 82A James Carter Road, Mildenhall, IP28 7DE, a private limited company registered in England and Wales under number 17429118. Kerfox Ltd is the controller of your information, which is the legal term for whoever decides what happens to it, and it is the company you are dealing with whenever this page says “we”.

You can write to us at support@kerfox.app, and on paper at Kerfox Ltd, 82A James Carter Road, Mildenhall, IP28 7DE. Email is much the faster of the two, and either reaches the same place.

Any questions about your information or requests regarding your data rights go to legal@kerfox.app and are answered by us directly.

What this policy covers

This policy covers the Kerfox website at kerfox.app, the first-batch signup on it, and the interest you can express here in the insight programme, and it stops there.

The Kerfox app is a separate thing. It has accounts, saved progress and services of its own, and it carries its own privacy notice, published at kerfox.app/app-privacy so you can read it before installing anything. Nothing you send through this website is put into the app.

The one place the two meet here is the insight programme, described further down, because you can express interest in it on this website and it happens inside the app.

How the signup actually works

It is worth being exact about this. Nothing you type is sent anywhere while you type it, and nothing is saved in your browser. Your answers leave the page only when you press the button that sends them.

When you do, the page sends your answers to our backend, which is hosted by Supabase. They are stored there, in one table, as your signup. A copy is emailed to our inbox through Resend, the service we use to send email, and Resend also sends you one email from hello@kerfox.app confirming that your seat is saved. To satisfy the backend that the request is a real one, the page signs in as an anonymous user for the moment it takes to send; that session lives in the page’s memory and is gone when you close the tab.

If sending fails, the page offers you another way instead: it gathers your answers into an ordinary email and opens it in your own email app, addressed to us. Nothing reaches us that way until you press send there yourself, and the email then travels the way your email always travels, out through your own email provider and into our inbox.

Our email is hosted by Zoho Mail, in Zoho’s EU data centre, so Zoho holds the copies of signups that arrive in our inbox, as our processor under its data processing terms.

It is also worth saying what that means for security. An email is not private in the way a sealed letter is. The copy in our inbox and the confirmation we send you are not encrypted end to end. Please keep that in mind when deciding what to write in the open box.

Cookies, tracking, and the website itself

This website has no analytics, no tracking pixels and no advertising tags, and it stores nothing of ours in your browser.

The one exception is security. Cloudflare, which hosts the site, checks whether each visitor is a person or an automated program, so that abuse is turned away before it reaches anything. To do that it runs a small script of its own on each page and sets two cookies: __cf_bm, which expires after 30 minutes without activity, and cf_clearance, which records that a check was passed so it is not asked again. Cloudflare uses them for that check and nothing else. They do not identify you, and Cloudflare does not use them to follow you from site to site.

Cookies that exist only to keep a service secure are treated as strictly necessary under UK law, and need no consent. That is why there is still no cookie banner: there is nothing to ask you about.

One exception, and only if you choose it. When you press the button to support Kerfox, the page loads Stripe’s payment form, which is Stripe’s own script, and Stripe sets its own cookies to prevent fraud. They are Stripe’s rather than ours, they are set only once you have chosen to pay, and Stripe’s privacy policy covers them. Nothing of ours is stored either way.

The contact form is the one part of this site that sends something by itself. When you press send, what you typed, the name you gave and the address you asked us to reply to are posted to our backend, which is hosted by Supabase, and handed from there to Resend, the service we use to send email, which delivers it to our inbox as an ordinary email. Nothing is sent back to the address you gave until a person writes you a reply. To satisfy the backend that the request is a real one, the page signs in as an anonymous user for the moment it takes to send; that session lives in the page’s memory and is gone when you close the tab. Nothing about it is written to your browser, and the form is not linked to any account.

We should be straight about one thing that is not ours to switch off. The website is a set of static files hosted by Cloudflare, and like any web host, Cloudflare’s servers see the requests that arrive: your IP address, the browser and device you are using, and the time of the request. That is simply how a page is delivered to you, and it happens whether or not you sign up. We do not build profiles from it, and we get no report about you from it.

One consequence, which we quite like: beyond the plain traffic counts our host shows any site owner, we have no idea who visited this page or what any one visitor did here.

What we ask you for, and what we ask you to leave out

The signup asks for:

• Your first name and email address. These are the only required fields, because without them there is no seat and no way to write to you.
• Who the seat is for: a student, a teacher, a parent, or someone else, with a box to say what "someone else" means.
• The level you are at, or teach, or are interested in.
• Which phone you use, Android or iPhone. Kerfox opens on Android first, and this is how we count how many people are waiting for an iPhone version.
• Your main subjects, which is optional.
• What brings you to Kerfox, chosen from a short list.
• An optional open answer about the biggest challenge you face with studying.
• Whether you want to join the insight programme. That box is never ticked for you.

One thing is not asked but recorded. If the link you followed to Kerfox carried a source tag, such as ?via=reddit at the end of the address, the signup records that tag, so we can tell which places people hear about Kerfox from. It says where the link was posted, never who you are; it can hold only letters, numbers and hyphens; and nothing is stored on your device to carry it.

None of this is required by law and none of it is part of a contract. The form does ask you to pick a role, a level, a phone and a reason before it moves on, because those shape the questions it asks you next and tell us which version of the app you are waiting for. Your subjects and the open answer are entirely up to you, and leaving them blank means we simply know less about who is waiting. It does not affect your place and we will not treat you differently for it.

Two things we would ask of you before you send it. Please enter only your own details. If you are a parent or a teacher, you are signing yourself up rather than your child or your class, so please use your own name and email and describe the situation without naming anyone else.

And please leave out anything sensitive. The open box invites an honest answer, and honest answers are genuinely useful, but do not include health information, a diagnosis, or anything about anyone else’s health. We are not set up to hold that kind of information. If it arrives anyway, we will read past it, we will not copy it anywhere, and we will delete the message sooner than we otherwise would. You are also welcome to ask us to delete it at once.

Why we hold it, and what allows us to

UK law asks us to say, separately for each thing we do, why we do it and what permits it. There are four here.

• To hold your place, to confirm it once when you sign up, and to write to you on the morning the first release opens. What permits this is your consent, which you give by ticking the consent line on the form; the form cannot be sent without it. Every version of the form’s wording is kept, dated, so that we can show what was asked on the day you answered.
• To see which places people hear about Kerfox from, from the source tag on the link you followed, if there was one, so that our effort goes where it reaches students. What permits this is our legitimate interest in that, and it uses nothing that identifies you.
• To understand who is waiting and what they find hard, from your role, level, phone, subjects, reason and open answer, so the app is shaped around real difficulty rather than guesses and built first for the phones people actually use, which is a use we also state on the form itself so that you know about it before you send anything.
• To record how the app is used in more detail, if you join the insight programme. What permits this is your consent: ticking the box here is an expression of interest, and the app will ask you again before any extended recording starts. The app’s own ordinary record of use is a separate matter, covered by the app rather than by this page.

Nothing here is decided about you by a machine. There is no automatic sorting, scoring or ranking of who gets a seat, and no profiling. The app itself does adapt to you, since its memory engine notices which questions you find hard and changes what it shows you next, but that is the product working. It has no legal or similarly serious effect on you, and the app’s own terms describe it.

The insight programme

The insight programme is optional, it is off unless you choose it, and where the person using the app is under 18 it stays off unless they choose it again inside the app after reading a plain explanation written for that age, because a detailed record of when a young person studies and when they stop deserves that much care.

If you join, early test builds of the app may record how the app is used, in more detail than usual. In practice that means things like:

• how long you use it, and how often
• what times of day you study, and which days you skip
• whether your use is steady or comes in bursts
• which parts of the app you spend your time in, and when
• how your streaks build, and where they break

The reason is simple. Nobody has watched Kerfox being used in real life yet, and we would rather learn from what actually happens than from what we imagine happens.

Ticking the box on this website starts no recording at all, though the tick itself is sent with your answers and we keep it alongside them, so that we know to expect you and can show later what you agreed to.

Your seat does not depend on this. Saying no changes nothing about when you hear from us, or what you get.

If we ever wanted to record something meaningfully beyond the list above, that would be a new question and we would ask it fresh rather than quietly widening this one.

Who else can see it

Inside Kerfox Ltd, only the people who need to in order to answer you, and today that is a very short list. Beyond that, a few others are involved simply by carrying the message or serving the page:

• Zoho, because our email is hosted on Zoho Mail and your message sits on Zoho’s systems, in its EU data centre, under its data processing terms.
• Your own email provider, whoever that is, but only if sending failed and you used your own email app instead. That part is outside our reach entirely.
• Cloudflare, which hosts the website’s files and therefore sees requests arriving, as described above.
• Supabase and Resend, which host the backend our forms post to and deliver our contact messages and waitlist confirmation emails.
• Stripe, but only if you choose to support Kerfox. The support page shows Stripe’s own payment form, and what you type into it, your card, your email address, your name and any billing address Stripe asks for, goes straight to Stripe and not to us. Stripe tells us the amount, the date, the name and the email address on the payment, and never your card details. Stripe handles your payment details under its own privacy policy.

We never sell your information and we never share it for advertising. We do not pass it to schools, colleges or exam boards. Kerfox has no partnership with any exam board, school or university, and writing to us does not tell anyone at your school anything.

The app uses more services than this, including a backend for accounts and a feature that uses AI. They belong to the app, not to the waitlist, and the app’s own privacy notice describes them, at kerfox.app/app-privacy.

If the law ever required us to hand something over, we would have to. We would tell you, unless we were forbidden from telling you.

Where it goes in the world

Some of this leaves the UK. Cloudflare, Supabase, Resend, Stripe and Zoho are international providers, and their systems are not confined to Britain. We cannot honestly promise that your information stays here, so we will not.

We should be exact about what protects it. For the website’s host we rely on the transfer terms Cloudflare publishes for its services, for the forms on the terms Supabase and Resend publish for theirs, and for support payments on the terms Stripe publishes for its own. Our inbox is held in Zoho’s EU data centre, and UK law recognises the European Union as protecting personal information adequately, which is what allows it to be sent there.

If you want to know exactly what covers your information on its way abroad, write to us and we will tell you plainly what we have and what we do not.

How long we keep it

We keep your signup, in our database and in our inbox, until the first release has opened and we have written to you, and then for three months after that, in case you reply or something goes wrong with the launch email. Then we delete it from both, and empty the inbox copy from the bin.

If the first release has not opened by 15 August 2027, we will delete the list anyway rather than sit on answers that have gone stale.

If you support Kerfox, the record of the payment stays in our Stripe account for six years after the end of the financial year it was made in, because UK tax law requires a company to keep its accounting records that long. A monthly supporter’s record also stays while the support is running. Asking us to delete your information cannot shorten that, but it does mean we will never use it for anything else.

One short record is kept a little longer. We keep your name, your email and the date you signed up, which together with the dated wording of the form on that day show what you agreed to, because the law asks us to be able to show that, and we delete it one year after the launch email goes out. We keep that record securely in our database alongside the signup details.

An honest note about deleting. When a message is deleted from our mailbox it goes from the inbox, but Zoho holds copies in its system backups for a retention period afterwards before they age out. That part is not in our hands, and nobody at Kerfox can see or reach those copies.

Ask us to delete your information and we will, whenever you ask, and the only thing we may keep afterwards is the short consent record described above, because the law asks us to be able to show what you agreed to, and that goes on the date already given.

Your rights, and changing your mind

You have these rights over information we hold about you, and all of them are easy to honour here, because what we hold is one row of answers in one database table and a copy of it in one inbox. If we ever had to refuse a request, we would tell you why, and we would tell you at the same time that you can take it to the ICO or to a court.

• See it. Ask for a copy of what we hold about you.
• Correct it. Tell us something is wrong and we will fix it.
• Delete it. Ask us to remove you, and the email and the record go.
• Restrict it. Ask us to keep it but stop using it while something is being sorted out.
• Take it with you. Ask for your answers in a form you can reuse somewhere else.
• Object. Tell us to stop reading your answers to shape the product, which is the purpose resting on legitimate interests, and we will stop. You can also object to the launch email itself at any time, and that one we must always honour, with no balancing and no questions asked.

To use any of them, write to legal@kerfox.app. There is no form and no fee. We will answer within one month, and usually much sooner, because the request lands in the same inbox your signup did.

You can also withdraw your consent whenever you like, and it is as easy as giving it. Reply to any email from us, or write to the address above, and we will take you off the list. For the insight programme, turn the switch off in the app.

Withdrawing stops things from that moment onwards. It does not make what happened before unlawful, and there is nothing you need to do about that.

If you are unhappy with something

Please tell us first. Write to legal@kerfox.app, or say it in a reply to any email from us. It counts as a complaint however it arrives, and you do not need to call it a complaint or use any particular words.

Since June 2026 the law gives you a right to complain directly to us about how your information has been handled, and it sets out what we owe you in return: we will acknowledge your complaint within 30 days of receiving it, look into it without undue delay, and write to tell you the outcome.

You also have the right to complain to the Information Commissioner’s Office, the UK’s data protection regulator. You can complain to the ICO at any time, although since June 2026 it normally expects you to have raised the matter with us first and given us a reasonable period, usually around forty five days, to answer, and it can decline to take a complaint further if you have not, so writing to us first is both the quicker route and the one that keeps the ICO route open to you.

If you are under 13

You should be 13 or over to send us the signup yourself. That is the age UK law sets for agreeing to something like this on your own.

If you are younger than 13, please ask a parent or guardian to sign up in their own name and with their own email address, and to leave your name and details out of the message entirely, because the seat is theirs to hold and we would rather hold nothing about you at all until you are old enough to ask for it yourself.

We do not ask for your date of birth and we would rather not know it. Asking children to hand over more information about themselves in order to protect them is the wrong trade, so we ask the question here instead and trust the answer.

Kerfox is built for students, and many of the students it is built for are 14, 15 and 16.

Changes to this page

The site is changing quickly at the moment, so this page will change too. When it does, we will update the date at the top.

If a change actually affects you, for instance if we ever wanted to use your answers for something new, we will not do it quietly. We will write to you and ask.

This page is governed by the law of England and Wales, and nothing on it takes away rights you have under UK law.