AI Buddy's Commitment to GDPR, Privacy and Safeguarding

For a school, trusting a platform with pupils’ data is a serious decision — because the school remains accountable for that data, and because protecting children’s information is part of safeguarding. AI Buddy is designed to earn that trust. This article sets out AI Buddy’s commitment to GDPR, privacy and safeguarding, and the concrete measures behind it.

Quick summary

• AI Buddy is built on privacy by design, aligned to UK GDPR and the Data Protection Act 2018.
• Concrete measures include data minimisation, pseudonymisation, encrypted AWS hosting, DPIAs, defined data subject rights, staff training and regular reviews.
• Learning sessions are recorded, monitored and evaluated by a quality assurance team.
• This supports the data-protection dimension of safeguarding — though safeguarding itself remains the school’s responsibility. AI Buddy is not endorsed or certified by Ofsted.

Why this commitment matters

Schools are accountable for pupil data even when a third party processes it, and secure data handling is part of keeping children safe. So a learning platform’s approach to data is not a technical footnote — it is central to whether a school can adopt it responsibly. See Protecting Student Data Under GDPR and Data Governance During Ofsted.

The measures behind the commitment

Privacy by design

AI Buddy treats data protection as a core design principle, building privacy into how data is collected, shared and stored — the “data protection by design and default” approach UK GDPR expects.

Data minimisation and pseudonymisation

AI Buddy collects and shares only what is necessary. Student identity is pseudonymised (for example, a first name shown with only the initial of the last name), and only relevant information is shared with a tutor — reducing risk by design.

Encrypted, secure hosting

Pupil data is stored securely on AWS, with encryption applied to data in transit and additional protection layers — guarding against unauthorised access, loss or disclosure.

Responsible retention and anonymisation

Data is kept only as long as necessary, and when an account is disabled or inactive, personal data is anonymised — irreversibly removing identifying information while retaining analytical value.

Transparency

A data protection and privacy policy and a privacy notice for parents are available on the platform, and stakeholders are informed about how their data is used — with confirmation sought for data storage.

Data subject rights

AI Buddy’s governance supports the rights to access, rectify, erase, restrict and object to processing, with processes to address requests and the right to complain to the relevant authority.

DPIAs and documented governance

AI Buddy maintains a Data Protection Impact Assessment, GDPR policies, staff data-protection training, and regular reviews and audits — documentation that also supports a school’s own vetting and DPIA. See Understanding DPIAs in Education.

Quality assurance and oversight

Learning sessions are recorded, monitored and evaluated by a quality assurance team, supporting a safe, accountable online learning environment. See Safeguarding in Online Learning Environments.

Where AI Buddy fits in a school’s safeguarding

It is important to be precise. Safeguarding — child protection, the DSL, the single central record, the school’s culture — is the school’s responsibility, and AI Buddy does not perform it. What AI Buddy does is ensure that a school’s technology supports, rather than undermines, its safeguarding — through secure, privacy-by-design data handling and a monitored learning environment. This is the data-protection and secure-platform dimension of safeguarding. See What Does Ofsted Look for in Safeguarding?.

And to be clear: AI Buddy is not endorsed, approved or certified by Ofsted.

Frequently asked questions

Does AI Buddy comply with UK GDPR?

AI Buddy is designed to align with UK GDPR and the Data Protection Act 2018, with documented policies, a DPIA, defined data subject rights and staff training.

Does AI Buddy perform safeguarding for the school?

No. Safeguarding remains the school’s responsibility. AI Buddy supports the data-protection and secure-platform dimension of safeguarding.

What happens to data when an account is closed?

Personal data is anonymised — irreversibly removing identifying information — while retaining value for analysis.

Does AI Buddy support data subject rights?

Yes. Its governance supports access, rectification, erasure, restriction and objection, with processes to address requests.

Is AI Buddy endorsed by Ofsted?

No. AI Buddy is not endorsed, approved or certified by Ofsted.

Conclusion

AI Buddy’s commitment to GDPR, privacy and safeguarding is expressed not in claims but in concrete measures: privacy by design, data minimisation and pseudonymisation, encrypted hosting, responsible retention, transparency, data subject rights, DPIAs, staff training and monitored sessions. It supports the data-protection dimension of safeguarding while leaving child protection itself where it belongs — with the school. For schools that take pupil data seriously, that commitment is the foundation of trust.

Discover how AI Buddy helps schools strengthen teaching, learning and evidence-informed school improvement. Or start a short consultation with our schools team using the form below — we will get back to you directly.

Sources

• Information Commissioner’s Office, Data protection by design and default (ICO)
• Information Commissioner’s Office, UK GDPR guidance and resources (ICO)
• Data Protection Act 2018 (legislation.gov.uk)
• Department for Education, Keeping Children Safe in Education (GOV.UK)