Your classroom, your data, your call
Plain-English answers on how we look after your account, how the AI is kept in check, and what your school's data protection lead may ask for.
🔒 Keeping accounts secure
- Encrypted connections: the site is only served over HTTPS, so everything between your browser and us is encrypted.
- Passwords are never stored: we keep only a salted scrypt hash, so even we can't see your password.
- Secure sign-in: login cookies are HTTP-only, sign-in sessions last at most 30 days, and we store only a hash of each session. Resetting your password signs you out everywhere else.
- Payments by Stripe: card details go straight to Stripe, a PCI DSS Level 1 certified payment provider. We never see or store card numbers.
- Protection against abuse: rate limits on sign-in and generation, protection against cross-site request forgery, and cleaning of AI-drawn diagrams so they can't run code in your browser.
- Your resources are private: only you can see the resources in your account.
🛡️ Your data rights
We follow UK GDPR. is the data controller for teachers' account data.
- We collect very little: your email address, your hashed password, the briefs you write and the resources you create. That's it.
- No pupil data: the service is for teachers. Please don't enter pupils' full names or anything else that identifies a child. Report comments are written from first names or initials only.
- No ads, no tracking: we use one essential cookie to keep you signed in. No advertising or analytics cookies, and we never sell data.
- You're in control: delete any resource at any time, or ask us to delete your account and everything in it.
- Who helps us run the service: Anthropic (the AI that writes resources), Stripe (payments), our hosting provider and our email provider. Some are based in the United States, with safeguards such as the UK International Data Transfer Addendum.
Full details are in our privacy policy.
🤖 Responsible AI & safeguarding
- Built for teachers, not pupils: pupils don't use the site. Teachers check every resource before it reaches a classroom.
- Age-appropriate by default: every request tells the AI the year group, curriculum and class, and asks for accurate, inclusive, age-appropriate content. Requests that aren't about teaching are turned away.
- A checklist on every resource: each one ends with "Before you use this", reminding you to check facts, curriculum fit and timing.
- Sources you can check: with web research turned on, resources list the pages they used.
- Safety filters: our AI provider, Anthropic, runs its own safety systems on every request.
- Your content isn't used to train AI: resources are generated through Anthropic's commercial service, which doesn't use customer content to train its models.
📄 Agreements for schools (DPA)
Schools and trusts that buy a licence for their staff often need a Data Processing Agreement (DPA) for their Data Protection Officer. We're happy to provide one, along with answers to your DPO's questions.
Request a DPA or email
❓ Common questions
Is it free to try?
Yes. The free plan gives you 5 resources a month with no card needed.
Can I cancel at any time?
Yes, from Manage billing in the app. You keep your paid features until the end of the period you've paid for.
Do you use my resources to train AI?
No. We don't train AI models, and our AI provider doesn't use our customers' content for training.
Who owns the resources I make?
You do. Use them in your teaching, share them, adapt them, or sell resources you've reviewed and edited. See our terms.
Can pupils use it?
No. It's designed for teachers, who review everything before using it with pupils.
Can my school or trust pay for everyone?
Yes. Get in touch about a school licence with one invoice.