data protection
When your school registers students and teachers on Materact, your school is the data controller and we act as your data processor — we process that data on your instructions, to deliver the platform.
Data on Materact exists to support teaching and learning. It is processed under GDPR, governed by our agreement with your school, and used to provide and improve your students' learning experience — never for advertising, and never sold.
General-purpose AI tools weren't designed with student data in mind: what goes into them can be used in ways schools can't see or control.
An educational platform needs the opposite — data flows that are defined, contractual, and visible to the school. That's how Materact is built.
Identification details (name, email, date of birth), class and module enrolment, and learning activity: written working, AI tutor interactions, corrections, progress and results.
Materact runs on Amazon Web Services servers hosted in the United Kingdom. Transfers from the EU to the UK are covered by the European Commission's adequacy decision. Any transfer beyond that is protected by Standard Contractual Clauses.
Students under 18 use Materact through their school or with parental involvement. Schools remain in charge of consents and authorisations, and parents of under-18s can access information about their child's progress.
Or when a user leaves. We anonymise the data and delete all personal data from the platform. If your school prefers that we delete all of the data outright, we act as the school wishes.
Data Processing AgreementsBefore a single student can access the school platform. Every school must sign our Terms and Conditions — which include a Data Processing Agreement. In it, we commit to:
We process personal data solely to deliver the Services and follow your school's instructions. It isn't disclosed to anyone beyond what running the platform requires — and never for any other purpose.
We implement appropriate security measures to protect the confidentiality and integrity of your students' and teachers' data.
If we suspect a personal data breach, we notify your school as soon as there are reasonable grounds to believe one has occurred — where possible within 72 hours — with a detailed description of what happened.
Where third parties help us deliver the platform, they operate under appropriate data processing agreements — and we remain fully liable to your school for their actions. Our current list is available on request.
These commitments — along with our full obligations on audits, international transfers, data subject rights, and support for your DPIAs — are set out in our Terms & Conditions for Schools.
The AI Act's transparency rules are in force today, and Materact meets them: every AI interaction on the platform is clearly labelled, so students and teachers always know when a response comes from AI. Materact is not a content-generation or publishing tool — the platform can't be used to create or publish AI-generated material. Its AI exists for one purpose: labelled, in-context pedagogical guidance. The Act's separate marking requirements for AI-generated content therefore do not apply to Materact's intended use.
The Act will introduce stricter requirements for certain uses of AI in education. Materact is designed as pedagogical support: helping students deepen their understanding and giving teachers better information, while keeping decisions about grades, progression and access firmly with educators.
That places Materact on the lower-risk side of the line the Act is drawing: supporting learning and teacher judgement, rather than making consequential decisions about students.We audit the AI components of the platform regularly, and we're building our documentation and risk management against the fuller framework that applies from December 2027 — so that when the standard arrives, Materact already meets it.
The EU AI Act is the world's most comprehensive AI regulation, and education is one of the areas it watches most closely — rightly so.
AI Controls
Materact's tutor is not a chatbot with a maths skin. It is a purpose-built tutor with deliberately bounded behaviour: it works on the mathematics in front of the student — the exercise, the misconception, the next step — and nowhere else.
General-purpose AI is designed to satisfy the user — which means giving students the answer the moment they ask. Great for productivity. Terrible for learning.
The tutor challenges students to think. It asks the next question, offers structured hints, and guides students toward understanding. That's the pedagogy — and it's also the safety model.
The tutor works within the learning objective in front of the student — it can't be drawn into open-ended conversation.
Mathematics has an advantage over every other subject: correctness can be verified. Materact is built on that fact. Every question lives on the platform with its methods and verified answers — the AI can't make the maths up.
Our AI tutor already knows the territory: the valid methods and the answer. Feedback follows the student's own path, and symbolic solvers check the working — a step is right because the maths says so, not because a language model thinks so.
AI models are trained on millions of documents and sound knowledgeable about everything. Dig deeper and they hallucinate — confidently. In education, a confident wrong answer is worse than no answer.
We design for that fact instead of denying it.
Teacher Oversight
Materact lets teachers see exactly how their students are using AI. Every interaction with the tutor is recorded and viewable — alongside submitted work, corrections, progress, and results.
Most concerns about students misusing AI come down to one thing: no adult can see it happening. Any teenager with an email address can use a consumer chatbot, unsupervised.
On Materact, AI use happens inside the school’s line of sight.
