Privacy Policy

1. Who we are

STEMTrack (the “Platform”, “we”, “us”) provides a tracking and progress platform for STEM and robotics clubs.

Contact: kelvin101udoh@gmail.com

Jurisdiction: United Kingdom

2. What data we collect

Depending on enabled features, we may collect:

• Account data (e.g., name, email, role, organisation/club).
• Learner data (e.g., learner name/initials, cohort/group, attendance, challenge attempts, outcomes).
• Coach/mentor notes (optional observations and guidance).
• Uploads / artefacts (e.g., photos/videos, code snippets, project files) if storage is enabled.
• Usage and device data (e.g., logs, basic analytics, approximate location from IP) to secure and improve the Platform.

We recommend clubs avoid unnecessary sensitive personal data and use IDs/initials where practical.

3. Children’s data and safeguarding

The Platform may be used for children’s learning records. Clubs/schools are responsible for:

• Obtaining required parental/guardian permissions and providing notices.
• Following safeguarding policies and applicable education rules.
• Minimising personal data (use IDs/initials where possible).

If you believe a child’s data has been uploaded without permission, contact us at kelvin101udoh@gmail.com.

4. How we use data

• To provide core features (logging, viewing progress, summaries, exports).
• To maintain safety, prevent abuse, and monitor security.
• To improve the Platform’s usability and performance.
• To support onboarding and customer support requests.

5. Legal bases (UK GDPR / GDPR)

Where applicable, we process personal data under one or more legal bases, such as:

• Contract (to provide the Platform to clubs/users).
• Legitimate interests (security, improving the Platform, preventing misuse).
• Consent (where required, e.g., certain marketing or optional features).

6. Supabase and service providers

We use third-party processors to operate the Platform, which may include:

• Supabase (database, authentication, storage).
• Hosting (e.g., Vercel) to deliver the web application.

These providers process data on our behalf under appropriate contractual terms. Data may be stored in regions configured for your Supabase/hosting project.

7. Sharing

We do not sell personal data. Data is shared only:

• With service providers needed to run the Platform.
• With your club/school users according to their role-based access.
• When required by law or to protect rights, safety, and security.

8. Data retention

We retain data for as long as necessary for the Platform’s purpose, then delete or anonymise it where feasible. Clubs may request deletion or export of data subject to verification and role permissions.

9. Security

We use reasonable security measures such as role-based access, authentication controls, and secure storage practices. No system is 100% secure, but we work to protect data from unauthorised access.

10. Your rights

Depending on the law that applies to you, you may have rights to access, correct, delete, restrict, or object to processing, and to request portability.

To make a request, email kelvin101udoh@gmail.com.

11. Cookies

We use cookies and similar technologies for essential functionality and, if enabled, analytics. See our Cookie Notice.

12. Changes

We may update this Privacy Policy. Updates will be reflected by the “Last updated” date above.