Data protection
Privacy Policy
Last updated 20 July 2026
Who this policy is for
This policy explains how Nicolaou's Maths, operated by Yarn Development, handles personal data when teachers, students and invited school users use the platform.
For school-managed accounts, the school may also be a data controller and its own privacy policy will apply.
Data we process
We process account details, role and school information, class memberships, assessment questions, answers, marks, feedback, revision recommendations and basic service diagnostics.
Teachers should not upload special-category data or information that is not needed to deliver teaching and assessment.
Why we use it
We use this data to authenticate users, deliver assignments, save student work, help teachers mark work, generate requested learning materials, provide feedback, secure the service and diagnose failures.
AI-assisted features process the minimum question or assessment content needed for the requested task. AI output is quality-gated and remains subject to teacher review.
Service providers and international processing
We use specialist providers for authentication, database and file storage, hosting, email delivery and AI processing. Current providers include Clerk, Convex, Vercel, Resend and OpenRouter/model providers.
Some providers may process data outside the United Kingdom. We select providers with appropriate contractual and security safeguards.
Retention and security
We keep account and learning records only for as long as needed to provide the service, meet school instructions, resolve disputes and satisfy legal obligations. Access is role-scoped and authenticated at both the application and data boundaries.
Your rights and contact
You may have rights to access, correct, erase, restrict or export personal data, and to object or complain to the Information Commissioner's Office. School users should normally contact their school first.
For privacy questions, email admin@yarndev.co.uk.