Privacy and safeguarding, in plain English.

MindArc is built for learners under 16 in UK schools. That means UK GDPR and the ICO Children's Code are not legal small print for us; they are design requirements. This page explains what we collect and why, in plain English first, with the formal detail available to schools on request.

What we collect

The minimum the platform needs to teach and report. Learner progress, answers and engagement. We do not collect anything we do not use.

Why we collect it

To adapt lessons to each learner, to show progress to the learner, and (only where a parent has opted in) to send progress reports home.

What we never do

Sell data, use learner data for advertising, or share it with anyone beyond what schools agree to in writing.

For DPOs

Full data processing documentation, including our lawful basis, retention periods, sub-processors and security measures, is available before any student uses the platform. Email hello@mindarc.co.uk and we will send it the same week.

For parents

Where MindArc is used through a school, the school remains in control of student data and parent reporting is always opt-in, never default.