Privacy Policy

ClassThread is an AI-assisted curriculum planning and lesson resource tool for UK teachers. We are the data controller for the personal data we collect from you.

Contact us at: hello@classthread.co.uk

We are registered with the Information Commissioner's Office (ICO), registration reference ZC202247.

We collect only what is necessary to provide the service:

• Your name and email address — collected at account creation
• Your role (teacher, head of department, or SLT), and the nation you teach in — collected at account creation, to personalise your experience to the correct curriculum
• Your school name — optional, provided during setup
• Your subject and year group preferences — to personalise your experience
• Class profiles — year group and accessibility condition flags (boolean only — no pupil names or identifiable pupil data)
• Uploaded resource content — text extracted from files you upload for adaptation or generation
• Generated outputs — adapted and generated lesson resources we create for you
• If you use our free trial without creating an account, we set a temporary session identifier (see Cookies, below) and record your IP address, solely to prevent misuse of the free trial (for example, one person creating many trial sessions to bypass the usage limit)

We do not collect, store, or process any personally identifiable pupil data. Class profiles contain only anonymous, aggregated accessibility flags (for example, "this class includes pupils with dyslexia"). You must not upload files containing named pupil data. If you do upload content containing pupil names or other identifying information, you do so as the data controller for that data and are solely responsible for compliance with your school's data protection policies.

We use your data to:

• Provide and operate the ClassThread service, including the free trial
• Generate adapted and differentiated lesson resources using AI
• Save your preferences and generated content so you can access them again
• Communicate with you about your account or the service
• Prevent misuse of the free trial and protect the security of the service

We do not use your data for advertising. We do not sell your data to third parties.

We process your data on the basis of:

• Contract — to provide the service you have signed up for
• Legitimate interests — to operate, improve, and secure the service, including preventing misuse of the free trial
• Legal obligation — to comply with applicable law including financial record-keeping

We use the following third-party services ("sub-processors") to operate ClassThread. Each is bound by appropriate data processing agreements:

Some of our sub-processors are located outside the UK and EEA, or process data via infrastructure located outside the UK and EEA, including Anthropic, Stripe, and Vercel (United States). Resend, also United States-based, is additionally certified under the EU-US Data Privacy Framework. Where we transfer personal data outside the UK, we ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) approved by the UK Information Commissioner's Office, and/or DPF certification where applicable.

Your primary data (account information, class profiles, generated content) is stored in the EU (Ireland) via Supabase and does not leave the EEA.

We retain your data only for as long as necessary for the purposes described in this policy:

Your data is stored securely in the European Union (Ireland) via Supabase. We use industry-standard encryption in transit and at rest. Access to personal data is restricted to authorised personnel only.

If we make material changes to where your data is hosted — such as moving to a different country or changing our primary AI provider — we will notify you by email at least 30 days in advance.

Under UK GDPR, you have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Request deletion of your data
• Object to processing
• Data portability
• Withdraw consent where processing is based on consent

To exercise any of these rights, contact us at hello@classthread.co.uk. We will respond within 30 days.

ClassThread uses only essential cookies required for the service to function: one to keep you signed in, and, if you use our free trial without an account, a temporary one to identify your trial session and prevent misuse of the free trial. We do not use advertising or tracking cookies, and do not use Google Analytics, Facebook Pixel, or any advertising tracking tools. Vercel Analytics is used for site performance monitoring — this is cookieless and collects no personal data.

If ClassThread is involved in a merger, acquisition, or sale of assets, your personal data may be transferred as part of that transaction. We will notify you by email before your data is transferred and becomes subject to a different privacy policy.

We may update this policy from time to time. We will notify registered users of material changes by email at least 30 days before they take effect. Continued use of ClassThread after changes constitutes acceptance of the updated policy.

For any privacy-related questions, contact us at hello@classthread.co.uk.

If you are unhappy with how we handle your data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.