Privacy Policy

Teachmend Ltd ("Teachmend", "we", "us", "our") is the data controller for personal data processed through this platform. We are registered in England and Wales. We are registered with the Information Commissioner's Office (ICO) under registration number ZB123456.

Contact: abukarscience@gmail.com

We collect and process the following categories of data:

• Account data: your name, email address, and role (e.g. teacher, head of science).
• Assessment data: class names, question lists, student names, and marks entered by you.
• Uploaded files: PDFs and images you upload for mark-sheet scanning or book marking. These are stored temporarily for processing and then deleted.
• Generated outputs: AI-generated feedback, reports, and PowerPoint files produced at your request.
• Usage data: standard server logs (IP address, browser type, pages visited) for security and performance monitoring.

We do not collect or store special-category personal data (e.g. ethnicity, health, religion). We do not knowingly collect data from pupils directly — all student data is entered by the teacher.

Under UK GDPR, we process your data on the following lawful bases:

• Contract (Article 6(1)(b)): to provide the Teachmend service you have signed up for.
• Legitimate interests (Article 6(1)(f)): for security monitoring, fraud prevention, and improving the platform.
• Consent (Article 6(1)(a)): for any optional communications such as product update emails.
• Legal obligation (Article 6(1)(c)): where required by law.

We use your data to:

• Authenticate your account and provide access to the platform.
• Process assessment marks and generate QLA heatmaps and student reports.
• Power AI-assisted features (feedback generation, mark scanning). AI prompts contain only the content you supply — no personal identifiers are added by us.
• Respond to your support requests.
• Send service-related communications (e.g. account changes, important updates).

We do not sell your data. We do not use student data to train AI models.

Teachmend uses third-party AI providers (including Anthropic/Claude and OpenAI) to generate feedback and process text. When you use AI-powered features:

• Content is sent to the AI provider only to generate the requested output.
• We use API access, which means your data is not used by providers to train their public models.
• Do not include full names, dates of birth, or other directly identifying information in AI prompts unless necessary for the task.

All data is stored on UK servers within a fully managed database protected by strong, industry-leading security. Under UK GDPR, your data is held securely and you retain full control over it at all times. Security measures include:

• Encryption in transit (TLS 1.2+) and at rest (AES-256).
• Role-based access control — your data is only accessible to you and authorised Teachmend personnel.
• Regular security reviews and vulnerability assessments.

You can delete your data automatically at any time from your Account Settings page. It is removed instantly, with no need to contact us. Alternatively, you can request deletion by emailing abukarscience@gmail.com.

We retain your data for as long as your account is active. On account deletion:

• Assessment and student data is deleted immediately.
• Account data (name, email) is deleted within 30 days.
• Server logs are retained for up to 90 days for security purposes, then automatically purged.

You have the following rights regarding your personal data:

• Right of access: request a copy of the data we hold about you.
• Right to rectification: correct inaccurate or incomplete data.
• Right to erasure ("right to be forgotten"): request deletion of your data — exercisable directly in the platform (see Account Settings) or by emailing us.
• Right to restriction: ask us to pause processing of your data in certain circumstances.
• Right to data portability: receive your data in a machine-readable format.
• Right to object: object to processing based on legitimate interests.
• Right to withdraw consent: where processing is based on consent, withdraw at any time.

To exercise any of these rights, email us at abukarscience@gmail.com. We will respond within 30 days. You also have the right to lodge a complaint with the ICO.

We use only strictly necessary cookies for authentication and session management. We do not use advertising or tracking cookies. No cookie consent banner is displayed because we do not use non-essential cookies.

We work with the following categories of sub-processors, all subject to data processing agreements:

• Cloud hosting: infrastructure providers in the UK/EEA.
• AI providers: Anthropic and OpenAI (API only — data not used for model training).
• Authentication: Base44 platform identity services.

If you are using Teachmend on behalf of a school, the school is the data controller for student data and Teachmend acts as a data processor. A Data Processing Agreement (DPA) is available on request for Whole School tier customers. Email abukarscience@gmail.com to request one.

We may update this policy from time to time. We will notify registered users of any material changes by email at least 14 days before they take effect. The date at the top of this page reflects the most recent revision.