Privacy policy

1. Who controls the data

Schools using CurriculaIQ remain responsible for the learner and staff information they hold. CurriculaIQ processes that information on their instruction and under the applicable service agreement.

Where CurriculaIQ collects information directly , for example when you contact us about a demo , we act as the controller for that information.

2. Information we process

The platform processes the information a school enters or generates in the course of running its operations:

• Account and identity details such as names, email addresses, roles and authentication information.
• School records including enrolment, attendance, assessment, finance and communication data entered by the school.
• Technical information such as device, browser, IP address, logs and security events.

3. How information is used

Information is used to operate the platform, authenticate people, apply permissions, provide support, maintain security and meet legal obligations. It is not sold, and it is not used to build advertising profiles.

4. Access and permissions

Access inside the platform follows tenant scope and role based permissions. A person sees the records their granted responsibilities allow, and important administrative and data activity remains reviewable.

5. AI assistance

AI Sprout operates inside the same permission model as the person asking. It does not widen the scope of information a person can already reach, and schools control which AI capabilities are enabled.

6. Retention and deletion

Information is retained for as long as the school requires it to operate, and thereafter according to the retention commitments in the applicable service agreement. On termination, school data is handled according to that agreement.

7. Your rights

Learners, guardians and staff should direct requests about their information to their school in the first instance, since the school controls those records. Where CurriculaIQ is the controller, contact us directly.