Loading...
Your privacy is important to us. This page explains how ReMarkAble AI collects, uses, and protects your information.
We collect personal information you provide when using our services, including your name, email address, school or organisation details, and any other information you choose to share with us when creating an account or contacting our support team.
When you use our AI-powered assessment service, we collect and process the handwriting samples and written work you upload for analysis. These documents are used solely to provide you with feedback and are handled with strict confidentiality.
We automatically collect information about how you interact with our website, including IP address, browser type, pages visited, time spent on pages, and other diagnostic data. This helps us understand user behaviour and improve our services.
Provide Handwriting Feedback: To analyse uploaded work and deliver accurate, curriculum-aligned assessment feedback powered by our AI technology.
Improve and Personalise Services: To enhance our AI models, improve accuracy, and tailor the user experience based on usage patterns and feedback.
Communicate with Users: To send you service updates, respond to enquiries, provide customer support, and share important information about your account.
Ensure Compliance: To enforce our Terms of Service, prevent fraudulent activity, and maintain the security and integrity of our platform.
Under Article 6 of the UK General Data Protection Regulation (UK GDPR), we process your personal data on the following legal bases:
Contract Performance (Article 6(1)(b)): Processing necessary to provide the assessment and feedback services you have signed up for, including account creation, document analysis, and delivery of results.
Consent (Article 6(1)(a)): Where you have given clear consent for us to process your personal data for specific purposes, such as marketing communications, analytics cookies, and optional data sharing. You may withdraw consent at any time.
Legitimate Interests (Article 6(1)(f)): Processing necessary for our legitimate interests, including improving our AI models, preventing fraud, ensuring platform security, and understanding usage patterns — provided these interests are not overridden by your rights.
Legal Obligation (Article 6(1)(c)): Processing necessary to comply with legal obligations, such as safeguarding duties, tax requirements, and responding to lawful requests from authorities.
Children's Data: Where users are under 13, we rely on parental or guardian consent for processing. For users aged 13–17, we rely on contract performance and legitimate interests, with additional safeguards in place. See our Safeguarding Policy for details.
We share personal data with the following third-party processors who help us deliver our services. Each processor is bound by data processing agreements and processes data only on our instructions:
| Processor | Purpose | Data Shared |
|---|---|---|
| Supabase (US) | Authentication, database hosting, file storage | Account details, uploaded documents, assessment data |
| OpenAI (US) | AI-powered assessment and feedback generation | Uploaded document content (text/images) for analysis |
| Stripe (US) | Payment processing | Name, email, payment card details |
| Google Analytics (US) | Website analytics (with consent) | Anonymised usage data, IP address |
| Meta Platforms (US) | Advertising measurement (with consent) | Page view events, conversion events |
Some of our third-party processors operate outside the UK. In particular, data may be transferred to the United States (Supabase, Stripe, OpenAI, Google, Meta) and to the EEA. Where data is transferred outside the UK, we ensure that appropriate safeguards are in place, including:
You may request details of the specific safeguards in place by contacting us at the address below.
We retain your personal data only for as long as necessary to fulfil the purposes described in this policy:
Account Data: Retained for the duration of your account. Deleted within 30 days of account closure, unless required for legal or compliance purposes.
Uploaded Documents: Retained for up to 12 months to allow you to review past assessments. You may request earlier deletion at any time.
Assessment Results: Retained for up to 12 months or until account deletion, whichever is sooner.
Payment Records: Retained for 7 years to comply with HMRC tax and accounting requirements.
Analytics Data: Anonymised analytics data may be retained indefinitely. Identifiable analytics data is retained for up to 26 months.
We take appropriate security measures to protect your information from unauthorized access, alteration, disclosure, or destruction. Our platform employs industry-standard encryption, secure data storage practices, and regular security audits to safeguard your personal information and uploaded documents. While we strive to use commercially acceptable means to protect your data, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.
Under data protection law, you have the following rights regarding your personal information:
Right to Access: You can request access to the personal information we hold about you.
Right to Correction: You can request that we correct any inaccurate or incomplete personal information.
Right to Deletion: You can request that we delete your personal information, subject to certain legal obligations we may have to retain it.
Right to Object: You can object to the processing of your personal information in certain circumstances.
Right to Data Portability: You can request that we provide your personal information in a structured, commonly used format.
Right to Withdraw Consent: Where we rely on consent as the legal basis for processing, you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.
Right to Lodge a Complaint: You have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's supervisory authority for data protection. You can contact the ICO at ico.org.uk/make-a-complaint or by calling 0303 123 1113.
If you have any questions about this Privacy Policy, wish to exercise your data rights, or have concerns about how we handle your information, please don't hesitate to reach out. You can also review our Governance policies and Cookie Policy for more information.
Contact UsWe may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.
Last Updated: February 2026
Data Controller: Social Media for Schools Ltd (Company No. 12499067), trading as ReMarkAble AI. For data protection queries, contact us at [email protected].
© 2025 ReMarkAble AI is a trading name of Social Media for Schools Ltd. All rights reserved.