Safety & Trust
Building AI literacy requires trust. We're committed to protecting students, empowering educators, and maintaining the highest standards of privacy and security in Canada, the United Kingdom, the European Union, and the United States.
Our Principles
Student Safety First
Every feature we build starts with student safety. Our platform is designed specifically for educational environments with age-appropriate content and interactions.
Data Privacy
We collect only what's necessary for learning. Student data is never sold, shared with advertisers, or used for any purpose beyond education, wherever your school is based.
Transparency
We're clear about how AI works, what data we collect, and how it's used. Students learn to understand AI, not just use it blindly.
Teacher Control
Educators maintain full visibility and control over student activities. Teachers can monitor progress, set boundaries, and guide learning.
Compliance by Region
Student privacy rules differ by country. We meet the requirements that apply where your school operates.
Canada
PIPEDA
Consent, purpose limitation, and right of access under the Personal Information Protection and Electronic Documents Act.
Provincial Privacy Acts
School boards are public bodies under laws such as FIPPA and MFIPPA in Ontario and FIPPA in British Columbia. We contract on terms that support those obligations.
Quebec Law 25
Support for Quebec's modernized privacy regime, including transparency, consent, and privacy impact assessment requirements.
United Kingdom
UK GDPR & Data Protection Act 2018
Clear lawful basis, data minimisation, and full data subject rights, with DPIA support for schools and trusts.
Keeping Children Safe in Education
Our safeguarding, filtering, and reporting design is built to help DSLs meet their KCSIE responsibilities for AI tools.
ICO Children's Code
Built around the best interests of the child: high-privacy defaults, no profiling for advertising, and plain-English transparency.
European Union
EU GDPR
Documented lawful basis, DPIA support, DPO liaison, and full data subject rights across the EEA.
EU AI Act
Education is a high-risk category. We provide the risk documentation, human oversight, and transparency information deployers need.
National DPA Guidance
Member states add their own education and data protection requirements. We work with schools and ministries to meet them.
United States
FERPA
We comply with the Family Educational Rights and Privacy Act, protecting student education records.
COPPA
We follow Children's Online Privacy Protection Act requirements for users under 13.
State Student Privacy Laws
Including California's SOPIPA and equivalent state-specific student privacy legislation.
Data Residency & International Transfers
Where your data lives is often the first question a board, trust, or DPO asks. Here is how we answer it.
Regional Hosting
Residency rules differ by country, province, and board. We confirm in writing where your institution's data will be stored and processed before onboarding begins.
Transfer Safeguards
Where data crosses a border we use the appropriate legal mechanism, including EU Standard Contractual Clauses and the UK International Data Transfer Addendum.
Documentation on Request
Data processing agreements, sub-processor lists, DPIA support material, and security documentation are available for your procurement, board, or DPO review.
Security Measures
Secure Infrastructure
All data is encrypted in transit (TLS 1.3) and at rest (AES-256). Our infrastructure is hosted on SOC 2 Type II certified cloud providers.
Access Controls
Role-based access ensures users only see what they need. Administrative access requires multi-factor authentication.
Regular Audits
We conduct regular security assessments and penetration testing to identify and address vulnerabilities.
Responsible AI Use
We believe AI in education requires special care. Our platform is designed to teach responsible AI use while maintaining strict safety guardrails.
Our Data Practices
What We Collect
- Account information (name, email, school)
- Learning progress and assessment results
- Platform usage for improving the experience
- AI interaction logs for educational purposes
What We Never Do
- Sell student data to third parties
- Use data for targeted advertising
- Share data with AI training datasets
- Retain data longer than necessary
Questions About Safety?
We're happy to discuss our security practices, provide documentation for your school, board, trust, or district review process, or answer any questions about student privacy and data protection.