Privacy
Last updated 7 October 2026
If you're a child using Times Tables
We keep your first name and the sums you've practised, so the app knows which ones to ask you next. That's all we keep about you.
Your grown-up can see how you're getting on. Nobody else can. We never show you adverts, we never sell anything about you, and we never let anyone else use it to learn about you.
If you want something deleted, ask your grown-up to email us.
Who we are
Times Tables is run by CODEGOOD LIMITED, a company registered in England and Wales, number 09252467. Our registered office is Belmont Suite, Paragon Business Park, Chorley New Road, Horwich, Bolton, BL6 6HG. We decide what happens to the information on this page. In UK data protection law, that makes us its data controller.
For anything on this page, email lloyd@codegood.co.
What we keep, and why
| What | Why | Legal basis |
|---|---|---|
| Your email address and sign-in details, held by our sign-in provider | So you can sign in and manage your family | Contract with you |
| Each child's first name, as you type it | So your child and you can tell profiles apart | Contract with you |
| Each child's practice record: which facts they've met, when each one is next due, right and wrong answers, how long the first key press took, when they asked for help, and which days they practised | To decide what to ask next, and to show you how they're getting on | Contract with you |
| Your subscription: plan, status, renewal date, and the reference numbers our payment provider gives us | To know whether your family has paid | Contract with you |
| Payment card details, billing name and address | Held by Stripe, never by us, to take payment | Contract with you |
| Invoices and payment records | Tax law requires us to keep them | Legal obligation |
| A random label for each browser the app runs in, and the device's own settings such as sound on or off | To keep two devices from overwriting each other's progress | Contract with you |
| IP addresses and basic request details, handled by our hosting provider | To deliver pages and protect the service from attack | Legitimate interests |
| Error reports: which page failed, when, and the error message, with no names, email addresses or account and child identifiers | To find and fix faults | Legitimate interests |
We don't ask for a child's date of birth, school, email address, photo or location. Children don't have accounts of their own: a parent or guardian sets them up.
If you use Touch ID or Face ID to open the app, your fingerprint or face never leaves your device. We store only a public key that lets us check the device said yes.
What we don't do
- No advertising, and no advertising or analytics trackers.
- No selling or renting of anyone's information.
- No profiling of children beyond choosing which fact to ask next.
- Children never see their miss counts. Those are on the parent page only.
Who else handles it
Three companies process information for us. Each only uses it to provide their service to us.
- Cloudflare hosts the app and stores practice records and household details.
- Clerk handles parent sign-in, including the emails with sign-in codes.
- Stripe takes payments and manages subscriptions. Stripe is also responsible in its own right for the card details it holds, under its own privacy policy.
Some of these companies store or access data in the United States. When that happens, it's covered by the safeguards UK law requires, such as the UK-US data bridge or approved contract clauses.
We'd share information with anyone else only if the law required us to.
Cookies and storage on your device
We only use the cookies and storage the app needs to work. They keep you or your child signed in. They remember which child is practising on a shared device. And they keep a copy of each child's progress, so the app works offline. We don't use cookies for analytics or adverts, so there's nothing to opt into.
How long we keep it
- Accounts, children's profiles and practice records: for as long as your account exists. Cancelling your subscription doesn't delete them, so your child can pick up where they left off if you come back.
- When you ask us to delete your account or a child's records, we delete them within 30 days. Copies in our backups are overwritten within a further 30 days.
- Error reports: 30 days.
- Invoices and payment records: six years, because tax law requires it.
Progress saved in a browser stays there until it's cleared. The parent page has a tool to clear it from that browser.
Your rights
You can ask us for a copy of what we hold about you or your children. You can ask us to correct it or delete it, or to send it to you in a form another service can read. You can also object to how we use it, or ask us to limit it. Email lloyd@codegood.co and we'll reply within a month.
If you're unhappy with how we've handled your information, you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113. We'd like the chance to put it right first.
Changes
If we change this page in a way that matters, we'll email account holders before the change takes effect. The date at the top shows when it last changed.