Privacy notice
What Boost+ keeps about you, and why
Last updated 11 September 2026. Boost+ is operated by Boost+ Assessments. Questions: use the contact on your school's letter, or the address on our pricing page invoices.
Who this is for
Students (many under 18), their teachers, and school administrators. Where a school enrols a student, the school is the data controller for that student's education record and Boost+ processes it on the school's behalf. Where a student signs up on their own, Boost+ is the controller.
What we collect
- Account: your name, a username, and the mobile number you sign in with. Sign-in is by one-time code to that number; we never store a password. A student may add a parent or guardian email; it is optional and used only for progress reports the school chooses to send.
- Work: the answers you give to questions, when you gave them, how sure you said you were, and the marks awarded with the reasons. This is the whole point of the product and it is what your teacher sees.
- What the platform believes about you: estimates of how well you know each syllabus objective, which wrong ideas you may hold, how you seem to think, and which explanations land. These are shown to you, labelled as estimates with a confidence, and you can dispute them.
- Tutor conversations: what you and the tutor said, typed or spoken, and the tutor's notes about each turn.
- Technical: standard server logs (IP address, browser, time) for security and debugging, kept for a limited period by our hosting provider.
We do not collect your location, contacts, photos, or anything from your device beyond what you type or say into the app. We do not use advertising trackers.
Who processes it
- Google Cloud (Mumbai region) hosts the application and database, and sends the sign-in code by SMS through Firebase.
- An AI service provider marks written answers, generates practice questions, and runs the tutor. Typed conversations and answers are sent as text. In the tutor's live voice mode your speech is streamed to the provider and its reply is streamed back; this is opt-in per conversation and is the one place your voice leaves our systems. The provider does not use this data to train its models and retains it only briefly for abuse monitoring. Its name is available on request.
- Dictation of written answers runs on our own transcriber and the recording is deleted the moment the text exists.
How long
Your work and the estimates built from it are kept while your account is active, because their value is in the history. Sign-in codes are not stored. Dictation audio is never stored. A school can ask for a student's record to be deleted at any time; a student on their own can ask us directly. Deletion removes the account, its work, its conversations and its estimates; pooled question statistics that identify nobody are kept.
Your rights
You can see everything the platform believes about you inside the product. You can ask for a copy of your data, for corrections, or for deletion. If you are under 18 and signed up through a school, ask your school; they can act for you. We answer within 30 days.
Security
All traffic is encrypted. Each school's data is isolated at the database level. Access by our staff is limited to what operating the service requires. There are no passwords to leak: sign-in is a code sent to your phone.
Changes
If this notice changes in a way that matters, we will say so on the sign-in page before the change takes effect.