Privacy Policy

1. Who we are

PrimaryAI provides lesson planning, scheduling, survey and related education workflow tools for users working in and around primary education.

2. What information we collect

Depending on how you use the service, we may collect:

• account information such as your name, email address and profile image
• teacher and class settings you choose to save
• term dates, timetable items, tasks and custom events you enter
• lesson pack inputs, generated content and saved library items
• survey responses and contact form submissions
• calendar connection data where you choose to connect Google or Outlook
• technical information needed to operate and secure the service, such as session and log data

3. How we use your information

We use personal data to:

• create and manage your account
• generate lesson materials and personalise outputs to your settings
• provide timetable, task and calendar-sync features
• respond to enquiries and support requests
• review survey responses and improve the product
• monitor reliability, security and misuse of the service

4. AI engine and third-party AI providers

PrimaryAI uses a multi-provider AI engine to generate lesson content. When you request a lesson pack, your inputs — including year group, subject, topic, and anonymised class profile settings — are sent to one or more of the following AI providers:

• Groq (groq.com) — Llama 3.3 70B
• Google Gemini (ai.google.dev) — Gemini 2.0 Flash
• Cerebras (cerebras.ai) — Llama 3.3 70B
• Mistral AI (mistral.ai) — Mistral Small
• OpenRouter (openrouter.ai) — Llama 3.3 70B (free tier routing)
• Cohere (cohere.com) — Command R Plus

No AI provider trains on your data. Every request sent to every provider includes a mandatory system-level instruction that explicitly prohibits the use of your content for model training, fine-tuning, reinforcement learning, or any form of model improvement. Providers are contractually selected on the basis that their API terms prohibit training on user inputs without explicit opt-in consent.

No pupil personal data is sent to AI providers. Class context passed to the AI engine is limited to anonymised, statistical settings you configure (such as ability level percentages, SEND focus, and EAL proportions). No pupil names, dates of birth, assessment records, or any other data capable of identifying individual children are included in AI requests.

Requests are not retained by providers. Each AI provider receives the minimum information needed to generate the immediate response. Providers are instructed to discard all context after responding. We do not share your account details, contact information, or any other personal data with AI providers.

These measures are applied in line with UK GDPR (UK Data Protection Act 2018) and the Children Act 2004. If you have concerns about AI data handling, please contact us using the details on the Contact page.

5. Calendar integrations

If you connect Google Calendar or Microsoft Outlook, PrimaryAI may access calendar information you authorise in order to import events, show availability, and write back scheduler events where you enable that functionality. We only use that access to provide the calendar features you request.

6. Legal basis

Where UK GDPR applies, we generally process personal data because it is necessary to provide the service you request, to pursue legitimate interests in improving and securing the platform, or because you have chosen to submit information such as survey responses or calendar connections.

7. Sharing

We do not sell your personal data. We may share data with service providers who help us operate the platform, such as hosting, authentication, database, analytics, payment, email, AI and calendar integration providers, where needed to deliver the service. AI providers receive only the minimum anonymised content necessary to generate lesson outputs, as described in section 4.

8. Retention

We retain personal data for as long as your account is active. If your account has been inactive (no login) for more than 24 months, we will notify you by email and, unless you reactivate your account within 30 days, delete your account data in accordance with this policy.

You may delete your account at any time via Settings → Account. On deletion, all personal data associated with your account is permanently removed from our systems within 30 days, except where we are required by law to retain certain records. Anonymised, aggregated usage statistics that cannot identify you may be retained indefinitely.

9. Your rights

Under UK GDPR you have the right to:

• Access — request a copy of the personal data we hold about you
• Rectification — ask us to correct inaccurate or incomplete data
• Erasure — request deletion of your personal data ("right to be forgotten")
• Restriction — ask us to limit how we process your data
• Portability — receive your data in a structured, machine-readable format
• Objection — object to processing based on legitimate interests

You can export a copy of all your personal data directly from the Service at any time via Settings → Account → Download my data. To exercise any other right, contact us using the details on the Contact page. We will respond within one calendar month.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk if you believe we have not handled your data appropriately.

10. Security

We take reasonable technical and organisational steps to protect personal data, including encrypted transmission of all AI requests, access controls on stored data, and provider selection based on data-handling standards. No internet-based service can guarantee absolute security.

11. Children

PrimaryAI is intended for adult users such as teachers, school staff and education professionals. The AI engine is designed to operate without receiving any personal data relating to individual pupils. Users should not upload unnecessary pupil personal data into the platform. Any anonymised class context entered into lesson planning settings should not include information that could identify individual children.

12. Changes

We may update this policy from time to time. Material changes will be reflected on this page with an updated revision date.

13. Contact

For privacy questions or requests, please use the contact details provided on the Contact page.