Privacy at Materact

At Materact, we always have your privacy and data concerns in mind. We make every effort to ensure that your data is handled with the utmost care, and strive to remain fully transparent regarding how your data is used. Our goal is to make sure that ultimate control of your data remains firmly with you.

We recognise this as particularly important in the context in which Materact is used. Firstly, there are valid privacy concerns surrounding the use of AI, where data entered into open-source LLMs can be collected to improve performance. Secondly, Materact is a platform designed to be used in schools and by students under the age of 18, meaning that any data stored should be considered as particularly sensitive.

Acknowledging this, we set out to ensure that privacy and data protection is central to everything we do at Materact. In other words, this means that privacy has been a consideration from the beginning, and that we never use your personal data without your consent.

Further to this, we are fully compliant with the strict privacy laws of the countries in which we operate. This includes UK GDPR, EU GDPR (General Data Protection Regulation) and UAE PDPL (Personal Data Protection Law). We make sure that we stay up-to-date with changes and new privacy recommendations made by regulatory authorities.

Read on to find out more about our approach to privacy at Materact.

Our Commitment to You

We commit to acting with fairness and transparency regarding the use of your personal data, and in full accordance with relevant data protection law. This means we will always be clear, open and honest with you about how we use data.

Principles

We work with data according to the principles set out by data protection regulators in the UK and EU. Along with our commitment to to fairness, transparency and lawfulness, there are four further principles relevant to our work.

1. Principle of Purpose Limitation‍

This means we will never use your data in any other way than what we say we will.

2. Principle of Data Minimisation

This means we will never ask for more data than we need to.

3. Principle of Storage Limitation

This means we will never keep personal data any longer than it is needed.

4. Principle of Security

This means that all data will be encrypted and stored securely.

FAQs

What data do we process?

We only process data that we need for the platform to function as intended, in accordance with the Principle of Data Minimisation. This includes personal data used for identification (such as your name and email), communication data (messages that you send us), and data related to the services on the platform (including, but not limited to, academic data, progress data, corrections and interactions with the AI).

Who will my data be shared with?

We never share your personal data with third parties without your express consent. Anonymised data is shared to third-party processors including OpenAI to produce responses for our AI Tutor. If you are a student signed up with a school, your data will be accessible by the school and will remain in their hands as they are legally considered ‘data controllers’ in our partnership.

How is my data secured?

All personal data is fully encrypted in transit and at rest, and there are strict access controls to safeguard privacy.

Where is my data stored?

Your data is stored in secure servers in the UK operated by Amazon Web Services.

Do you store my payment details?

No. We do not store any payment details as all payment transactions are handled by our payment service provider. This is the same as for any other online payment that you make with a trusted brand.

How do I request more information regarding the use of my data at Materact?

You have the right to request how your data is being used, as well as the right to request for it to be deleted. Contact info@materact.com for further information.