AI safety and data protection
Last updated: 19 June 2026
ClassMind drafts teaching resources. Teachers review, edit and approve every output before it is used with pupils.
Our position
ClassMind is designed for UK primary teachers who need planning support without handing professional judgement to an AI system. The product creates draft lesson plans, worksheets, slides, reports and support resources. It does not make safeguarding, assessment, behaviour, medical or placement decisions.
Teacher in control
Every generated output is a draft. Teachers remain responsible for checking accuracy, suitability, tone and pupil context.
Data minimisation
We ask teachers to keep prompts focused on teaching tasks and to avoid entering unnecessary pupil data.
No model training
ClassMind does not use teacher or pupil data to train its own AI models.
UK school context
Prompts are written for UK primary teaching, National Curriculum terminology and British English.
What is sent to AI providers
When a teacher generates a resource, the prompt content needed for that resource is sent to the AI provider for processing. The current application code calls Anthropic's Claude API for generation. If additional providers are added later, this page and the privacy policy should be updated before schools rely on them.
Pupil data rules
- Teachers should not enter safeguarding, medical, family, attendance, behaviour or other sensitive pupil details into free-text prompts.
- Report writing is designed to use pupil initials or neutral references rather than full names in AI prompts.
- Where a report needs a pupil reference, the app can use a neutral token such as [NAME] during AI processing and reinsert the teacher-provided reference in the browser.
- Teachers should remove unnecessary identifying information before uploading or pasting documents.
Logging and retention
ClassMind records usage metadata such as feature type, token counts, approximate API cost and timestamps so the service can operate and improve. Generation logging is configured not to retain prompt and output text in usage logs. Generated export files are delivered through authenticated handlers and are intended to be short-lived.
Saved outputs remain available to the teacher until they delete them or close their account. Teachers should only save content they are comfortable retaining in the service.
Security controls surfaced in the product
- Account sessions use inactivity and absolute timeouts.
- Public access to source, schema, generated and private asset folders is blocked through web-server rules.
- Admin and account actions are being expanded with audit logging.
- Google integration tokens are treated as sensitive credentials.
Sub-processors and due diligence
Schools may need a DPA, DPIA, retention details and sub-processor information before adopting an AI service. ClassMind should maintain these documents alongside this page. For school due-diligence questions, contact privacy@classmind.co.uk.
Teacher review checklist
- Check the output for factual and curriculum accuracy.
- Adapt examples, scaffolds and challenge for the actual class.
- Remove any pupil data that is not needed.
- Check tone before sending anything to parents or colleagues.