Draft for professional review. This is not legal advice and does not claim certification or compliance.

Privacy notice

Think Before AI is being prepared for UK schools. This notice describes the first release. A school’s own privacy notice, and a data protection officer, still need to review it before a live pilot.

Who it is for

School staff and pupils in Years 7 to 9. The public site also stores pilot enquiries from adults.

Pupil data we store

First name, last name, a school username, a password hash, class membership, mission answers, teacher feedback, badges and an internal certificate ID. We do not require a personal email address for pupils.

What we do not collect for the course

No medical information, safeguarding notes, behaviour records, attendance, or demographic fields from a MIS. No advertising profiles. No public pupil pages.

Enquiries

Contact-form messages are stored so they are not lost. A hashed IP address is kept for abuse control, not the raw address.

Retention

Each school has a retention setting, shown to the school admin. Automatic deletion is not switched on in this release. See the docs shipped with the software for the proposed schedule and the decisions that need a DPO.