This programme was designed backwards from one principle: the least pupil data that can possibly deliver the teaching. Pupils have no accounts, no logins, no passwords, no email addresses and no profiles. This document gives your DPO what a data protection impact assessment needs.
None. The schools platform processes no pupil data at all. A school signs in with a class code, which identifies the school and nothing else: no pupil names, no dates of birth, no photographs, no contact details, no free text about pupils, no special category data, and no record of which pupil saw which lesson. Where a name appears in the teaching, it is handwritten on a printed worksheet or learning record that never leaves your school. Children in the family product interact through a parent held link token, never an account.
The licence is with Guided Digital Childhood Ltd, company number 17299814, registered office Apple Acre, Star, Winscombe, BS25 1QF. Because no pupil data is processed, there is no controller and processor relationship to paper over pupils. The only personal data we hold is what the school gives us to run the licence: a contact name and email for invoicing. The data processing agreement covering that contact data is at schools.guidedchildhood.com/dpa, ready to print and sign, and the privacy notice for schools sets out the rest. We never use any data for advertising, profiling, product analytics or model training, and we never sell or share it.
The service spans ages 4 to 18, and the design differentiates by phase as the ICO’s Age Appropriate Design Code expects. EYFS to KS2: pupils never operate the platform, the teacher projects, and pupil participation is on paper. KS3 to KS5: pupils still hold no accounts, and any classroom interaction is through the teacher’s session. The family product’s child screen is reached only through a link the parent creates, holds and can revoke, shows only that child’s own first name, quests and stars, and carries no navigation to any other data.
Data is stored with Supabase (database, hosted in Ireland) behind row level security, the application is served by Vercel, confirmation emails go through Resend and invoices are raised in Stripe. Transport is encrypted throughout. There are no pupil rows to retain or delete. On licence termination the school’s account and contact details are deleted on request or after the retention period set out in the privacy notice and the data processing agreement. Access within Guided Childhood is limited to what operating the service requires.
No pupil accounts. No behavioural tracking or advertising. No third party trackers in the lesson player. No pupil generated free text stored from lessons. No disclosure recording: safeguarding concerns belong in the school’s own systems, and every safeguarding flagged module says so to the teacher in writing.
The ICO expects the views of children and parents to inform a DPIA for services used by children. The parent consultation your school runs before adopting this programme (using the parent pack in this Hub) doubles as that evidence: record the consultation date, what was shared, and any concerns raised, and file it with the DPIA.
This pack supports your DPIA but does not replace it: the school remains responsible for its own assessment. Questions to hello@guidedchildhood.com. Our privacy lead is named in the privacy notice, and the data processing agreement is ready to print and sign.