Schools Privacy Policy
Effective Date: 19 September 2026
This policy applies specifically to schools, teachers, and students using Dyslexia Write under a school plan. It explains exactly what data we collect, what we do not collect, and how we protect student privacy.
Key commitments at a glance:
- We never store, read, or process student writing
- No data is used to train AI models
- No advertising, ever
- All school data is hosted in the EU
- GDPR compliant — DPA available on request
1. What Data We Collect From Schools
We collect only the minimum data needed to show teachers how their students are progressing as writers. We collect:
- Number of writing sessions (a count — not the writing itself)
- Number of words typed per session (a count — not the words themselves)
- How often the “Make Simpler” tool is used (a count)
- Average sentence length per session (a number — not the sentences)
- A display name chosen by the teacher — real student names are not required and are not stored by us
We never store, access, transmit, or process any student writing content. Everything a student writes stays on their own device.
2. What We Do Not Collect
- Student writing, essays, or any text content
- Real names (a teacher-chosen display name is all that is used)
- Date of birth or age data
- Photographs or biometric data
- Location data
- Behavioural or marketing data
- Any special category data under UK GDPR Article 9
3. How We Use School Data
Session metrics are used solely to:
- Display writing progress summaries to the class teacher
- Show positive progress badges (“Writing Confidence Improving”, “Clearer Sentences”)
- Operate and improve the Dyslexia Write service
We do not sell, rent, share, or monetise school data in any form. We do not use school data to train AI models.
4. Where Data Is Stored
All school session data is stored in the European Union using Supabase (EU region). Authentication data is managed by Clerk (SOC 2 certified). Payments are processed by Stripe (PCI DSS compliant). None of your school data is stored or processed in a country without adequate data protection under UK GDPR.
5. GDPR Compliance and Legal Basis
We process school data under the following legal bases:
- Article 6(1)(b) UK GDPR — processing necessary for the performance of a contract (providing the school service)
- Article 6(1)(f) UK GDPR — legitimate interests in operating and improving our service, where these are not overridden by the rights of data subjects
Schools act as data controllers for any student personal data they provide. Dyslexia Write acts as a data processor on behalf of the school. A Data Processing Agreement (DPA) is available on request — please contact us at the address below.
6. ICO Registration
Dyslexia Write is registered with the UK Information Commissioner's Office (ICO). Our registration number is available on request.
7. Data Retention
- Writing session metrics are retained for 12 months from creation
- School member records are deleted within 30 days of subscription cancellation or written request
- Teachers may request immediate deletion of all school data at any time by contacting us
8. Age-Appropriate Use
Dyslexia Write for Schools is designed for students aged 7 and above, under teacher supervision. The tool does not:
- Require students to create public profiles
- Allow students to share content with other users
- Show advertising to students
- Use nudge techniques or engagement-maximising features
School Mode automatically removes all references to “AI” and technical jargon, replaces red error markers with gentle suggestions, and uses calm, encouraging language throughout.
9. Your Rights
Under UK GDPR, you (and the students in your care) have the right to:
- Access personal data we hold
- Correct inaccurate data
- Request erasure (“right to be forgotten”)
- Restrict or object to processing
- Data portability
Because we store only aggregate metrics (not content), most requests can be fulfilled immediately. Contact us to exercise any of these rights.
10. Contact and Data Protection
For DPO queries, data deletion requests, or to obtain a copy of our Data Processing Agreement:
Email: support@dyslexiawrite.com
Subject line: Schools Data Request
We aim to respond to all data requests within 72 hours.
Also see our general Privacy Policy and Terms of Service.