Privacy policy

Who is responsible

Contactable at hello@braindump.study. When a school uses Brain Dump with its pupils, the school decides why and how pupil data is used, and Brain Dump processes it on the school's behalf. Teachers should make sure their school is happy for the tool to be used with their classes.

What we collect from students

Students do not create an account, and we do not ask for their name, email address or any login.

• A generated display name, such as "Teal Fox 12", assigned when they join a session. It is not linked to their real name.
• What they type: the answers they write during a session.
• Session activity: which session they joined, and when they pressed "I'm done".
• A random identifier stored in the student's browser (a cookie and local storage) so a refresh or a dropped connection keeps them in the same session.

Students are told not to enter their name or personal details. If one does, it is treated like any other answer and deleted on the same schedule.

What we collect from teachers

• Your email address, used to send a sign-in link and to link sessions to you.
• The sessions you create: topic, year group, class name if you add one, timings, and the results generated.
• A sign-in cookie that keeps you logged in.

Why we use it

To run the session, group the class's answers into a map of what they know, show each student their own results if the teacher chooses to share them, and keep the service secure. We do not sell data, show adverts or build profiles of individual pupils.

The legal basis is the school's task of educating its pupils (public task) for pupil data, and our legitimate interest in running the service for teacher accounts.

Who processes the data

We use a small number of providers to run Brain Dump:

Some of these providers handle data outside the UK. Where they do, it is under their data processing terms with appropriate safeguards. The AI results are a teaching aid and may contain mistakes, so teachers should use their own judgement.

How long we keep it

• Student answers and display names: deleted 90 days after the session.
• Results and session records: deleted 12 months after the session.
• Teacher email: kept while the account is active, and removed on request.

A teacher can also ask for a session to be deleted sooner.

Cookies and local storage

We use only what is needed to make the service work: a student session cookie (24 hours) and identifier, a teacher sign-in cookie, and a saved light or dark theme choice. We do not use advertising or analytics cookies.

Your rights

You can ask to see, correct or delete data about you or your child, and to object to how it is used. Because students have no account, a request is easiest through their school or teacher, who can tell us the session code. You can also contact us directly at the address above. You may complain to the Information Commissioner's Office at ico.org.uk.

Security

Data is encrypted in transit, access to the database is restricted to the service itself, and a teacher can only see results for sessions they created.

Changes

If this policy changes in a way that matters, we will update the date at the top of this page.