Last updated: 10 November 2026
This policy covers GMHSC Tutor, GMHSC Coach and the GMHSC shop. It explains what we collect, why, who we share it with, how long we keep it and what your rights are.
1. Who we are
Graham Herstell, trading as GMHSC, is the data controller. Contact: support@gmhsc.co.uk.
We follow UK GDPR, the Data Protection Act 2018 and the ICO’s Children’s Code (the Age-Appropriate Design Code).
Parents and guardians: GMHSC Tutor can be used by children from age 5. Please read this policy and our Safeguarding Policy before your child uses it.
2. What we collect
All apps: your account
When you sign in with Google, Apple or Microsoft, we get your email address, name, profile photo (if your provider has one) and a user ID. One sign-in works across all GMHSC apps.
We also keep basic technical data: browser and device type, when you sign in, and your IP address (for security, and to tell roughly which country you’re in).
GMHSC Tutor
- What you ask for: subject, topic, age or level, exam, and language.
- What’s made for you: your lessons, quiz answers and scores, and the lessons you save (you can delete them at any time).
- Badges and certificates you earn.
- Your credit balance and how many free lessons you’ve used.
- Teacher Mode: the teacher’s name, school or organisation name and subject. For each class: its name, join code and assignments. For each pupil who joins a class: their name, email, quiz scores and written answers, which the teacher can see.
- Family accounts: the parent’s details and each child’s name, assignments, scores and answers, which the parent can see.
GMHSC Coach
- What you ask for: sport, age group, level, skill or focus, number of players, time, space and equipment. For game day and the mental game, also what you type in to describe the situation.
- What’s made for you: the drills, sessions and plans saved in My library (you can delete them at any time).
- Your credit balance and how many free goes you’ve used.
- Safety records: if a request is stopped by our safety checks, we record which tool was used, the reason, the age group and when it happened. We don’t keep the words you typed.
Please don’t enter players’ names or other personal details into Coach. It doesn’t need them.
The GMHSC shop
- Orders: what you bought, for which app, the amount, the date, and whether it was paid or refunded.
- Payment: taken by Stripe. Stripe gives us your email and the payment status. We never see or store your card number.
- Codes you redeem, if any.
3. Why we use it (and our legal basis)
| We use your data to… | Legal basis |
|---|---|
| run your account and make the lessons, plans and drills you ask for | providing the service you asked for (contract) |
| let teachers and parents set work and see results | providing the service the teacher, school or parent asked for (contract / legitimate interests) |
| take payments, add credits and keep tax records | contract and legal obligation |
| keep the apps safe: block harmful requests, prevent fraud, act on safeguarding concerns | legitimate interests and legal obligation |
| fix problems and improve the apps | legitimate interests |
| answer your messages and tell you about important changes | contract and legitimate interests |
Schools: when a school uses Teacher Mode, the school is the controller for the class data it puts into Tutor (its classes, the work it sets, and its pupils’ results and answers), and GMHSC handles that data on the school’s behalf as its processor. Our data processing agreement for schools is available on request from support@gmhsc.co.uk.
We don’t sell your data, use it for advertising, or build marketing profiles, and we never do any of these with children’s data.
4. Children
- Anyone under 18 needs a parent’s or guardian’s permission to use Tutor.
- For children we collect only what the app needs, never track location beyond the country, and don’t use their data for marketing or profiling.
- Parents and guardians can ask to see, correct or delete their child’s data at any time, by emailing support@gmhsc.co.uk.
- Coach is for people aged 14 and over who coach or help to coach. Anyone under 18 needs a parent’s or guardian’s permission. Coach doesn’t ask for players’ personal details, and you shouldn’t enter any.
5. Who we share it with
Only with the services that run the apps for us. Each one may use the data only to provide that service.
| Service | What for | What they get |
|---|---|---|
| Google Cloud / Firebase | hosting, database, sign-in | everything stored in the apps (kept secure) |
| Google Gemini | writing lessons, plans and drills | what you asked for (topic, age, level and so on), not your name or email |
| Google Imagen (Tutor only) | drawing lesson diagrams | a description of the diagram only |
| Stripe | taking payments | your email, the amount and the payment status |
| Google, Apple, Microsoft | signing you in | your email, name and user ID |
Within the apps, a teacher sees their own pupils’ names, emails, scores and answers, and a parent sees their own children’s. The apps don’t show your content to anyone else.
We may also share data if the law requires it, to protect someone’s safety (including reporting a safeguarding concern), or to stop fraud.
6. Where it’s kept and how it’s protected
- Data is kept on Google Cloud, in UK or EU data centres where possible (our app servers are in London).
- Everything is encrypted when it’s sent and when it’s stored.
- Sign-in uses Google, Apple or Microsoft. We never see or store passwords.
- Only authorised people can see user data.
- If data does leave the UK or EU, we make sure it’s protected by approved safeguards (such as Standard Contractual Clauses).
7. How long we keep it
| Data | How long |
|---|---|
| Your account | until you delete it |
| Saved lessons, Coach library, badges | until you delete them or your account |
| Teacher Mode and Family data | until the teacher or parent deletes it, or closes their account |
| Coach safety records (no free text) | 2 years |
| After you delete your account: a scrambled code made from your email, and how many free goes you’d used | 12 months, so free goes can’t be claimed twice |
| Shop orders and payment records | 7 years (UK tax law) |
| Support emails | 3 years |
| Usage statistics | 2 years, with personal details removed |
8. Your rights
You have the right to:
- see the data we hold about you;
- correct it if it’s wrong;
- delete it (see below);
- limit how we use it, or object to how we use it;
- get a copy in a format you can take elsewhere;
- withdraw consent at any time.
To delete your account and your data: sign in to GMHSC Tutor and press Delete Account at the bottom of the page. Because one account is used for Tutor, Coach and the shop, this deletes it from all three, straight away: your sign-in, saved lessons, Coach library, badges, settings and any unused credits. If you run a Teacher Mode group or a Family, that goes too (your pupils and children keep their own accounts). You’ll see exactly what will be deleted before you confirm.
Or email support@gmhsc.co.uk from the email address on your account. We’ll check it’s you, then do the same within 30 days.
Either way, we have to keep payment records for 7 years for tax, and Coach safety records (which never include what you typed) for 2 years. We also keep, for 12 months, a scrambled code made from your email with how many free goes you’d used, so free goes can’t be claimed twice. It can’t be turned back into your email.
To use any of these rights, email support@gmhsc.co.uk. We’ll reply within 30 days (we may need to check it’s you first).
9. Cookies
We only use what the apps need to work:
- sign-in tokens to keep you signed in;
- settings such as your language and light/dark mode.
We don’t use analytics, advertising or social-media tracking cookies. If that ever changes, we’ll update this policy first.
10. Changes
If we change this policy we’ll update the date at the top and email you about anything significant before it takes effect.
11. Complaints
Please contact us first at support@gmhsc.co.uk and we’ll try to put it right. You can also complain to the Information Commissioner’s Office (ICO): ico.org.uk · 0303 123 1113 · Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF.
12. Contact
support@gmhsc.co.uk · Graham Herstell, trading as GMHSC