Your data, plainly
- What we collect is what teaching needs: a child's first name, class and curriculum, what they study and how they answer. Children do not need a phone number or email.
- Who sees it: the student; their parent; their teachers and school leaders, for school children, from the day the parent links. Never another family or another school.
- AI services receive the question and the chapter, never a name, email or phone number.
- Deletion: a parent can delete a child or the whole account at any time in the app; a request on the web is handled within 30 days.
For school IT and safeguarding leads
We answer your vendor checklist in writing, with a named contact. The trust and safety pack covers:
- Where student data is hosted, and encryption in transit and at rest
- Who can access what, with audit logs
- Retention, and deletion or return when a licence ends
- How and when we tell you about an incident
- The data processing agreement, including the AI services used and where they process data
- How safeguarding alerts reach your safeguarding lead (they never replace your own procedure)
- Sign-in: roster-based school logins; your own identity system isn't supported yet
The rules we design against
We design AI Buddy to the UAE's personal data protection law, the app stores' rules for apps used by families and children, and UAE guidance on generative AI and children. A compliance summary comes with the trust and safety pack. This page describes how AI Buddy works; it is not legal advice.
This website itself uses no cookies, no ads and no third-party analytics. See the website privacy notice.

