Privacy Policy
This policy explains what information Kodori collects, why we collect it, how we keep it safe and what rights you have. It covers our website (www.kodori.co.uk) and the Kodori app. It is made under Articles 13 and 14 of the UK General Data Protection Regulation (UK GDPR).
The short version for children
Kodori helps you learn. We keep your answers so we can see what you find easy and what you find hard. We never sell your information. We never use it for adverts. If you write something that makes us think you might not be safe, a trained adult at Kodori will look at it. If you want to know what we keep about you, ask your parent, carer or teacher to contact us.
WHO WE ARE
Kodori is an AI tutor for children aged 7 to 16, Years 3 to 11 (KS2, KS3 and GCSE). We teach Maths, English and Science. Kodori is built with teachers and mapped to the National Curriculum in England.
For families who sign up directly, Kodori is the “data controller”. This means we decide how your information is used.
For schools, the school is usually the data controller and Kodori processes data on the school’s behalf, under a written agreement with the school.
CHILDREN
Pupils under 13 need a parent or school to set up their account. A child under 13 cannot create an account on their own.
We follow the ICO’s Age Appropriate Design Code (the Children’s Code). This means:
- Privacy settings are high by default.
- We collect only the information we need to teach.
- We do not show adverts and we do not use children’s data for marketing.
- We do not sell children’s data or share it for anyone else’s marketing.
- We do not use a child’s location.
WHAT INFORMATION WE COLLECT
About parents and school staff:
- Name, email address and password (stored securely, never in plain text).
- Billing details. Payments are handled by Stripe. We do not see or store your full card number.
- Messages you send us.
About pupils:
- First name or display name, year group and the subjects and courses they study.
- Answers, scores, progress, time spent and the topics they find hard.
- Messages the pupil types to the Kodori tutor.
Technical information:
- Log-in records, device and browser type, and error reports, so we can keep the service working and secure.
WHERE WE GET INFORMATION FROM
- Most information comes from you. Some comes from other people:
- A parent gives us their child’s name and year group when they add the child.
- A school, tutor or tuition centre gives us its pupils’ names and classes when it sets up their accounts.
Stripe tells us whether a payment worked.
HOW WE USE THE INFORMATION
- To run your account and give your child lessons, practice and feedback that fit their level.
- To show parents and teachers how a pupil is doing.
- To take payment and manage subscriptions.
- To send service emails, for example account, billing and progress emails.
- To keep the service safe and secure, and to fix problems.
- To improve our teaching, using learning data that does not identify any child.
- To keep children safe (see “Keeping children safe” below).
| What we do | Why | Legal basis |
|---|---|---|
| Run accounts and give lessons, practice and feedback | To provide the service you signed up for | Contract |
| Show parents and teachers a pupil’s progress | So the adults responsible can support the pupil | Contract |
| Take payments and manage subscriptions | To bill for the service | Contract |
| Keep financial records | Tax and accounting law | Legal obligation |
| Send service emails (account, billing, progress) | To run your account | Contract |
| Check pupil messages for signs of risk, and review flagged concerns | To keep children safe | Legitimate interests, and for sensitive information |
| Keep Kodori secure and fix errors | To protect users and the service | Legitimate interests |
| Improve our teaching using learning data that does not identify any child | To make Kodori better | Legitimate interests |
| Reply to enquiries | To answer your question | Legitimate interests |
| Send marketing emails to adults | To tell you about Kodori | Consent (you can unsubscribe at any time) |
A pupil may write something that reveals sensitive information, for example about their health, their family or harm to them. UK GDPR calls some of this “special category” data.We use this information only to keep the child safe. Our legal condition is UK GDPR Article 9(2)(g), substantial public interest, with Data Protection Act 2018, Schedule 1, paragraph 18, safeguarding of children.
HOW THE AI TUTOR WORKS
Kodori uses an AI model to help explain answers and give hints. When a pupil uses the tutor, their message and the learning context are sent to the AI provider to create a reply.
The AI does not make decisions about a child that have legal or similarly significant effects. It does not decide anything about a child’s school place, grades or exams.
KEEPING CHILDREN SAFE
Every message a pupil types is checked automatically for signs that the child may be at risk of harm. If a possible concern is found:
- The tutor does not reply to that message. The child sees a safe, supportive message instead.
- A trained member of the Kodori team is told that a concern exists and reviews it.
- Where needed, we follow UK safeguarding guidance, which may include contacting the parent, the school or the right authorities.
- We keep records of safeguarding concerns for longer than other data, because safeguarding law and guidance require it.
See our Safeguarding Policy.
WHO WE SHARE INFORMATION WITH
We do not sell, rent or trade your personal information.We may also share information if the law requires it, or to protect a child from harm.
SECURITY
We protect your information with encryption, secure log-in and strict access controls. Each family and school can only see their own data. Only staff who need access for their job can see personal data.
COOKIES
We use cookies that are needed for the site and app to work, for example to keep you logged in and to protect forms from spam. These cannot be switched off.
You can block cookies in your browser settings. Some parts of Kodori may not work if you do.
LINKS TO OTHER WEBSITES
Our website may link to other websites. We do not control them and this policy does not cover them. Please read their privacy policies.
YOUR RIGHTS
You have the right to:
- see the information we hold about you, and get a copy
- correct information that is wrong, or complete information that is incomplete
- ask us to delete your information
ask us to limit how we use it - object to how we use it
get your information in a common format, to keep or to give to another provider - withdraw your consent at any time, where we rely on consent
Parents can use these rights on behalf of their child. As children get older, we also take their own views into account.
This is free. We reply within one month. School users should ask their school first, because the school controls that data.
COMPLAINTS
If you are unhappy with how we use your information, please tell us first. We confirm we got your complaint within 30 days and tell you what we will do next.
CHANGES TO THIS POLICY
We may update this policy. If we make an important change, we will tell account holders by email before it takes effect.