C1 Ai for schools: data protection and child safety
A summary for school leaders and safeguarding leads. November 2026.
- Pupils use pseudonyms. We ask for no full names, emails or birth dates, and pupils need no password or parent account.
- Voice is processed live and never recorded by us.
- Servers are in the EU. No advertising, no profiling, no selling of data, and no use of pupils' data to train AI models.
- If a child says they are being harmed or are in danger, the tutor tells them to speak to a trusted adult, and the teacher and your safeguarding lead are alerted.
Roles
In a school class, the school is the data controller and C1 Ai acts on its instructions as processor. The school decides the legal basis and informs parents. We agree this with each school in a data processing agreement before a pilot begins.
What we process
- Pupils: the pseudonym the school chooses, age if the school adds it, what is said in lessons, answers, scores and time studied.
- Voice: streamed to the AI provider in real time to hold the conversation, then turned into text. We keep no audio.
- Teachers: name, email and the classes they run.
- Names in lessons: the pupil's name is replaced with a placeholder before lesson text goes to Anthropic.
Who processes data
| Provider | Purpose | Location |
|---|---|---|
| Hetzner | Servers and database | Helsinki, Finland |
| Hetzner Storage Box | Encrypted nightly backups, kept at most 8 weeks | Germany |
| Google Cloud Vertex AI | Live voice tutor, backup for text tasks | EU region, Finland |
| Anthropic | Text tasks: following the lesson, marking, quizzes | May be outside the EU, under standard contractual clauses |
| Brevo | Email to adults | France |
| Cloudflare | Domain name services | Global |
Google's and Anthropic's commercial terms do not allow them to train their models on this data by default.
How long we keep it
- Audio: not kept.
- A lesson's conversation: deleted after 12 months without that lesson being opened. Scores stay until the account is deleted.
- Safety alerts and reports: 12 months.
- Backups: at most 8 weeks.
- At the end of a pilot or on the school's written request, we delete the class's data within 30 days.
Who can see what
- Teacher of the class: each pupil's lesson, step, time studied and results. While a pupil is in a lesson, the teacher can see the last five turns of the conversation. Those turns are held in memory only and are not shown afterwards. Pupils are told this on the lesson screen.
- Safeguarding lead: an email alert when a safety concern is raised. The email never contains the child's words.
- Other teachers and classes: no access.
- C1 Ai: administrator access only, protected by two-step verification, to run the service and review safety alerts.
Child safety in lessons
- Always an AI: the screen says so in the child's language, and so does the tutor if asked.
- Staying on the lesson: the tutor is instructed not to ask for personal details, and to steer away from topics unsuitable for children.
- If a child discloses harm: the tutor tells them to talk to a trusted adult and, if they are in danger, to call the local emergency number. The teacher and safeguarding lead are alerted, and the teacher reads the turns that led to it in their signed-in panel.
- Reporting: every lesson has a Report button. The report reaches us with the last turns of the conversation.
- No judgement of the child: marks and stars are practice feedback only. No decisions are made about a child, and we do no emotion recognition from voice, face or words.
Security
- All traffic is encrypted in transit, and backups are encrypted at rest.
- The database is not reachable from the internet, and the server accepts SSH keys only.
- Teachers can see only their own classes, and each lesson is limited to the class's agreed minutes.
- If a personal data breach affects the school, we will tell you without undue delay so that you can meet your own duties.
What you should know
- Safety detection isn't perfect. In our latest test of 50 sample sentences in five languages, it caught 24 of 25 danger lines with no false alarms. It supports adult supervision and doesn't replace it.
- The class link is the key to the class. Anyone who has it can open the class and choose a pupil's name, so please share it only with that class.
- The tutor can make mistakes. It is designed to guide rather than give answers, but it can sometimes give an answer away or get something wrong.
- The database disk is not yet encrypted at rest. Disk encryption is planned; backups are already encrypted.
- Certifications: we do not currently hold ISO 27001 or SOC 2.