Privacy Policy page
Good Future Foundation AI Privacy Notice
What this policy applies to
This privacy policy relates to your use of the AI tool sandboxing application only (“Services”) provided by The Good Future Foundation CIO a Charitable Incorporated Organisation registered under laws of the United Kingdom with Charity number: 1208527 with its registered address at 1 Bartholomew Lane, London, United Kingdom, EC2N 2AX (‘we’, ‘our’ or ‘us’).
We take your privacy very seriously. Please read this privacy policy carefully as it contains important information on who we are and how and why we process any information relating to you (your information).
It also explains your rights in relation to your information and how to contact us or the relevant regulator in the event you have a complaint. Our collection, storage, use and sharing of your information is regulated by law, including under the UK General Data Protection Regulation (UK GDPR).
The app links to websites or services owned and operated by certain trusted third parties to make the information and services available to you. These other apps, websites or services may also gather information about you in accordance with their own separate privacy policies. For privacy information relating to these other apps, websites or services, please consult their privacy policies as appropriate.
What information we collect and where we get personal information from
We collect or use the following information to provide you with the Services:
| Category of data | In more detail |
|---|---|
| Data you choose to share when you use the Services | Any information/selections that you choose to upload or share through the Services |
| Data automatically collected about you when you use the Services. | Service use history (Time of access, mouse movement, number of visitors); and IP Addresses. |
Data is collected automatically when you use the Services unless we tell you that you have a choice. If you do not wish to share the above data you should not use the Services.
We collect and use your information for the purposes described in the section ‘How and why we use your information’ below.
How and why, we use your information
Under UK data protection law, we must have a “lawful basis” for collecting and using your personal information. There is a list of possible lawful bases in the UK GDPR. You can find out more about lawful bases on the ICO’s website. Our lawful basis for collecting your information is:
- You have given consent; and
- For our legitimate interests.
A legitimate interest is when we have a business or commercial reason to use your information, so long as this is not overridden by your own rights and interests. We will carry out an assessment when relying on legitimate interests, to balance our interests against your own. You can obtain details of this assessment by contacting us (see ‘How to contact us’ below).
The table below explains what we use your information for and why.
| What we use your information for | Our reasons |
|---|---|
| Providing access to the Services | Consent when you agree to this policy and to use the Services. Our Legitimate Interests, so we can deliver the content of the Services to your device. |
Lawful bases and data protection rights
Which lawful basis we rely on may affect your data protection rights which are in brief set out below. You can find out more about your data protection rights and the exemptions which may apply on the ICO’s website:
- Your right of access - You have the right to ask us for copies of your personal information. You can request other information such as details about where we get personal information from and who we share personal information with. There are some exemptions which means you may not receive all the information you ask for.
- Your right to rectification - You have the right to ask us to correct or delete personal information you think is inaccurate or incomplete.
- Your right to erasure - You have the right to ask us to delete your personal information.
- Your right to restriction of processing - You have the right to ask us to limit how we can use your personal information.
- Your right to object to processing - You have the right to object to the processing of your personal data.
- Your right to data portability - You have the right to ask that we transfer the personal information you gave us to another organisation, or to you.
- Your right to withdraw consent – When we use consent as our lawful basis you have the right to withdraw your consent at any time. If you make a request, we must respond to you without undue delay and in any event within one month. To make a data protection rights request, please contact us using the contact details at the bottom of this privacy notice.
How long we keep information
We do not store the prompts you send or the AI responses you receive — these are processed only for the time it takes to fulfil a single request, and are never used to train AI models. The small amount of information we do keep is set out below:
| What | How long we keep it | Notes |
|---|---|---|
| Your prompts and AI responses | Not stored | Held in memory only for the duration of a single request, then discarded. Never used for training. |
| Files you upload (e.g. PDFs) | Held by Anthropic for the duration of a single request, then deleted by us automatically | Only used to generate the response you asked for. |
| Anonymous usage counts (which access code and which tool was used, with a timestamp — no prompt content, no teacher identity) | Kept for service analytics so we can understand which tools are useful | Cannot be linked back to an individual teacher or school. |
| IP addresses in our hosting platform's edge security logs | Approximately 24 hours, then deleted by Vercel | Used solely for abuse and security monitoring. |
| Anonymous, cookieless page-view analytics (URL, country, device class) | Up to 12 months, in aggregated form | No cookies, no personal identifiers. |
| In addition, our sub-processors hold prompts for very short abuse-detection windows under their own published policies — Anthropic deletes API content within 7 days, Google holds paid-tier API content briefly for abuse detection only, and the Vercel AI Gateway operates a zero-data-retention policy by default. None of these providers are permitted to use your prompts or uploads to train or improve their AI models. | ||
| Who we share information with |
The Services run on infrastructure hosted in the United Kingdom — specifically, the application server and our database are located in a UK Vercel region. Beyond our own infrastructure, we use a small number of third-party service providers ("sub-processors") to deliver the Services. We have listed them below, including the country where each one typically processes data. Some of these providers are based outside the UK; in those cases we rely on the safeguards set out under "Sharing information outside the UK" below.
| Recipient | What they do for us | Categories of your information transferred | Where data is processed | Transfer safeguards |
|---|---|---|---|---|
| Anthropic | Provides the Claude API, used for most text generation across the platform (chat-style tools, lesson resources, summarisation), and processes any documents you choose to upload (e.g. PDFs) for the duration of a single request. Does not retain content beyond a 7-day abuse-detection window and does not use it for training. | Prompts and uploaded files. | Inference may run in the United States, Europe, Asia or Australia; data is stored at rest in the United States. | Standard Contractual Clauses (EU Module 2/3) and the UK Addendum (ICO template B.1.0), per Anthropic's published Data Processing Addendum. |
| Google (Gemini) | Provides Gemini models used for image generation and editing, text-to-speech, the AI Safety Checker, Fact or Fiction, and certain agentic tools. Accessed both directly via Google's paid Gemini API and via the Vercel AI Gateway. We use the paid tier only; content is not used to train Google models. | Prompts, uploaded images, text for narration. | Globally, in any region where Google operates infrastructure. | Standard Contractual Clauses and the EU–US Data Privacy Framework (with UK Extension), via Google's processor terms. |
| Vercel | Hosts the application and our database in the United Kingdom (London region); routes AI requests via the Vercel AI Gateway, which operates a zero-data-retention policy by default on our plan; collects cookieless, aggregated page-view analytics; and temporarily stores IP addresses in edge security logs. | Prompts in transit (not stored by the gateway); IP addresses (in security logs); anonymous page-view telemetry (URL, country, device class). | Application and database: United Kingdom. AI Gateway, Analytics, and edge security logs: Vercel's primarily United States-based infrastructure. | Standard Contractual Clauses, the UK International Data Transfer Addendum, and the EU–US Data Privacy Framework (UK Extension), per Vercel's Data Processing Addendum. |
| Exa | Provides generic web search and page-content fetching used by a small number of tools that need up-to-date public information from the web (AI Chat, AI Safety Checker, Fact or Fiction, Resource Finder, Website Summary). We only send Exa generic search queries or public URLs — we never include personal information about teachers or pupils in search queries. | Generic search queries or public URLs. No personal information. | United States. | Contractual obligations under our agreement with Exa; we do not transfer personal information to Exa, so the volume of personal data subject to international transfer through this provider is minimal. |
We only allow the companies referred to above to handle your information if we are satisfied they take appropriate measures to protect your information. We also impose contractual obligations on service providers to ensure they can only use your information to provide services to us and to you. None of these providers are permitted to use your prompts or uploaded content to train or improve their AI models.
If you would like more information about who we share your information with and why, please contact us (see ‘How to contact us’ below).
Sharing information outside the UK other than with external service providers who we are satisfied have adequate protection that is equivalent to UK GDPR
It is sometimes necessary for us to transfer your information to countries outside the UK. In those cases, we will comply with applicable UK laws designed to ensure the privacy of your information and making sure appropriate safeguards are in place.
Keeping your information secure
We have appropriate security measures to prevent your information from being accidentally lost or used or accessed unlawfully. We limit access to your information to those who have a genuine business need to access it.
We also have procedures in place to deal with any suspected data security breach. We will notify you and any applicable regulator of a suspected data security breach where we are legally required to do so.
How to contact us
You can contact us via email at legal@goodfuture.foundation if you have any questions about this privacy policy or the information we hold about you, to exercise a right under data protection law or to make a complaint.
How to complain
If you have any concerns about our use of your personal data, you can make a complaint to us using the contact details at the top of this privacy notice.
If you remain unhappy with how we’ve used your data after raising a complaint with us, you can also complain to the ICO.
The ICO’s address:
Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire, SK9 5AF
Helpline number: 0303 123 1113
Website: https://www.ico.org.uk/make-a-complaint
Last updated 15th June 2025