AI safety and data protection
Last updated: 19 June 2026
ClassMind drafts teaching resources. Teachers review, edit and approve every output before using it with pupils.
Our position
We designed ClassMind for UK primary teachers who need planning support while retaining professional judgement. ClassMind creates draft lesson plans, classroom resources and reports. It does not make safeguarding, assessment, behaviour, medical or placement decisions.
Teacher in control
Every generated output is a draft. Teachers remain responsible for checking accuracy, suitability, tone and pupil context.
Data minimisation
We ask teachers to keep prompts focused on teaching tasks and to avoid entering unnecessary pupil data.
No model training
ClassMind does not use teacher or pupil data to train its own AI models.
UK school context
We write prompts for UK primary teaching, National Curriculum terminology and British English.
Data sent to AI providers
ClassMind sends the required prompt content to Anthropic's Claude API when you generate a resource. We will update this page and the privacy policy before schools rely on another provider.
Pupil data rules
- Teachers should not enter safeguarding, medical, family, attendance, behaviour or other sensitive pupil details into free-text prompts.
- The report tool uses anonymous pupil codes or neutral references instead of full names in AI prompts.
- The app can use a neutral token such as [NAME] during AI processing when a report needs a pupil reference. It then reinserts the teacher-provided reference in the browser.
- Teachers should remove unnecessary identifying information before uploading or pasting documents.
Logging and retention
ClassMind records feature type, token counts, API cost and timestamps so we can operate the service. We exclude prompt and output text from usage logs. Authenticated handlers deliver export files, which expire after a short period.
You can access saved outputs until you delete them or close your account. Save content that you accept retaining in the service.
Security controls surfaced in the product
- Account sessions use inactivity and absolute timeouts.
- Web-server rules block public access to source, schema and private asset folders.
- We are adding audit logs for admin and account actions.
- We protect Google integration tokens as sensitive credentials.
Sub-processors and due diligence
Schools may need a DPA, DPIA and sub-processor information before adopting an AI service. We keep these documents with this page. For school due-diligence questions, contact privacy@classmind.co.uk.
Teacher review checklist
- Check the output for factual and curriculum accuracy.
- Adapt examples, scaffolds and challenge for the actual class.
- Remove any pupil data that is not needed.
- Check tone before sending anything to parents or colleagues.