Safeguarding and data
The strongest claim we can make is the plainest one: we do not collect it.
Most school software answers the data question with the protections wrapped around what it holds. A class account holds almost nothing to begin with. A student who joins with a card gives us a code and a name they choose, and no email address, surname, date of birth or location.
This page describes the pilot, which opens in January 2027. The compliance section says plainly what is finished and what is not.
How a class account works
A code, not an email
The code on the card signs a student into an account made for that class. Codes are never stored in plain text, and a lost card is replaced from the teacher’s phone.
A name they choose
It does not have to be their real name. Their class and their teacher see it, and only the teacher knows who is who.
No AI chat for students
Our literary companion is switched off for everyone in a class. The one exception is looking up a word in the class texts. No AI ever reads a student’s work.
Nothing to buy
Students never see a purchase screen or an upsell. A class opens its own texts and nothing else.
Private by default
No leaderboards, public profiles or sharing, and no marketing messages. Notifications only when the teacher turns them on and the student allows them.
Time as a band, for the teacher alone
The register can show roughly how long a student spent on a day, as a band such as 5 to 10 minutes. Never exact times, never shown to the class.
Your data, your class
- You can erase a class whenever you choose. It erases itself twelve months after it ends, with a warning a month before.
- As designed, a student who deletes their account deletes their work with it. Our reviewer is checking whether the school should keep a copy.
- We keep no student location. To stop anyone guessing codes, we keep a scrambled form of the network address for 30 days, and use it for nothing else.
- Student work is read by the teacher. We never sell it, advertise against it or give it to an AI.
When something worries a student
The teacher reads the work, so your school’s own safeguarding process applies to it, exactly as it does to anything handed in on paper.
Every student has a Report a problem button. It reaches a person, not a bot, and it shows a crisis line straight away.
Compliance, honestly flagged
The pilot is in California, so this is the US list. None of it is finished yet, and each item carries its real status. No student joins until the review is done.
Teacher terms that treat us as a school official, under the school’s direct control.
California’s student privacy law: no targeted ads, no profiling, no sale. The pilot is designed to it, and a reviewer checks it before any student joins.
Class accounts are for students aged 13 and over. The teacher confirms it for the class, and we delete any account reported as younger.
The California Student Data Privacy Agreement. We plan to have it ready for a district to sign before the pilot.
A notice written for students to read, not for lawyers.
We will update this page the moment any of them changes, and tell every pilot school directly.
UK schools
A UK edition follows the pilot. It comes with a data protection impact assessment, a data processing agreement with the school as controller, and a statement against the ICO’s Children’s Code. Each will be published here once it exists.
One honest note
These are the classics, and some of them contain adult themes, as literature does. You choose what you set, exactly as you would with the books in your classroom.
We say so here, so that nobody meets it for the first time in week three.