Privacy notice
Last updated: 6 November 2026
This notice explains how MAZSY handles personal data on this website and in Coffee, our pupil progress app for schools.
Who we are
MAZSY is based in the United Kingdom. You can contact us about anything in this notice at support@mazsy.co.uk.
This website
This website does not use cookies, analytics or tracking, and it loads nothing from other companies' servers.
Like any website, our hosting provider (Vercel) briefly records technical details such as IP addresses to keep the site running and secure.
If you email us, we use your name, email address and message to reply to you, and we keep that correspondence only as long as we need it.
Coffee
Your school is in charge of its data. For pupil and staff data in Coffee, the school (or trust) is the data controller. MAZSY is the data processor and only uses that data to provide Coffee to the school, following the school's instructions and our data processing agreement.
What Coffee holds
- Pupils: first name and last initial, class, and the levels, test scores, homework and notes that teachers record.
- Staff: name, school email address, role and class, so they can sign in.
- Activity: a record of changes made in Coffee, so schools can see who changed what.
How it is protected
- Each school's data is kept separate, so staff can only see their own school.
- Access is limited by role. Only a pupil's class teacher records their levels and test scores.
- Data is encrypted in transit.
- Pupil names are never sent to AI features.
Companies that help us run Coffee
| Company | What they do |
|---|---|
| Supabase | Database and secure sign-in |
| Vercel | Hosting for this website and the Coffee app |
| Anthropic | AI features, such as building homework, if the school turns them on. No pupil names are sent. |
For schools and DPOs
Our data protection pack includes the data processing agreement, the full list of sub-processors with where data is stored, retention and deletion arrangements, and a DPIA template. Email us to request it.
Your rights
Under UK data protection law you can ask to see, correct or delete your personal data, or object to how it is used.
If you are a parent, pupil or member of staff at a school that uses Coffee, please contact your school first, as they control that data. We will help them respond.
If you are unhappy with how your data has been handled, you can complain to the Information Commissioner's Office at ico.org.uk.
Changes
We will update this page if anything changes, and show the new date at the top.