Student privacy

Your students’ words stay theirs.

Students join with a link and their name. No accounts, no app, no email addresses. What they write feeds one thing, your report, and it never trains anyone’s AI.

Our promises

  • No student accounts

    Students open a link and type their name. No sign-up, no email address, no app, no password to forget.

  • Never used to train AI

    Conversations run on Claude, through Anthropic’s business service, which does not train its models on what students write.

  • For your report, and nothing else

    What a student writes feeds their teacher’s class report. No ads, no selling, no profiles across schools.

  • Deleted when you ask

    Ask us to delete a class, a student or your whole account, and we do, from the database and the backups. TBC: how long backups keep it.

Where the data goes

Every service that touches your class, and what for. Nothing else does.

  • The lesson conversations (AI)Who: Anthropic (Claude)Where: TBCNot used for training.
  • Database and uploaded filesWho: SupabaseWhere: TBC
  • Website and serversWho: VercelWhere: TBC
  • Teacher sign-inWho: ClerkWhere: TBCTeachers only. Students never sign in.
  • Emails to teachersWho: ResendWhere: TBC
  • Booking a call with FranWho: Cal.comWhere: TBC
  • Website and dashboard statisticsWho: PostHogWhere: EUNo names, no messages, no screen recordings, no cookies. Never on students’ lesson pages.

For your data protection officer

The questions they ask before a pilot, answered before they ask.

  • A data processing agreement

    Your school stays in charge of its students’ data and we process it for you, under a DPA (Art. 28 GDPR). Ours, or yours.

  • Help with your impact assessment

    If your institution runs a DPIA, we fill in our part: what we collect, where it goes, how long it stays.

  • Export and deletion

    Every class’s data can be exported or deleted on request, within 30 days.

  • Security basics

    Encrypted in transit (HTTPS, HSTS), access rules in the database itself, and teacher data separated per account.

For institutions

Your data, on your terms.

With a school or programme licence, privacy fits your rules, not ours.

Talk to us about your requirements

  • Your server location

    Data stored and processed in the region you choose, for example only within the EU or your own country.

  • Your agreement, your terms

    We sign your institution’s DPA and standard contractual clauses where data leaves the EU.

  • Your retention period

    Class data deleted automatically after the period you set, such as the end of the term.

  • Sign-in through your institution

    Teachers sign in with their university account (single sign-on). TBC: offered today?

DRAFT To be checked by Fran (and ideally a lawyer) before this page goes live.

Privacy policy

Who we are

The Faculty is run by TBC: legal name, address and registration number. Write to hello@thefaculty.ai about anything on this page.

Two roles

For students’ data, the school or teacher who runs the class is in charge (the controller) and we process it on their behalf. For teachers’ own details and for visitors to this website, we are in charge.

What we collect

From students: the name they type, what they write and answer in the lesson, when, and a random id their browser keeps so a returning student is recognised without a login. No email address, no account.

From teachers: name, work email, the course details and files you send us, your classes and their reports, and the bookings you make with us. We also count how the dashboard is used (PostHog, EU), linked to your account id, never to your name or email.

From visitors: anonymous website statistics (PostHog, EU). No names, no messages, no screen recordings.

What we use it for

To run the lessons, write the teacher’s report, build and improve lessons with the teacher, and answer your emails. Never for advertising, never sold, and never to train AI models.

How long we keep it

Class data stays while the teacher’s account is active, unless they ask us to delete it sooner. TBC: the default period, and how long backups keep it.

Your rights

You can ask to see, correct, export or delete your data, or object to how we use it. Students ask their teacher or write to us directly. You can also complain to your data protection authority.