Flint outlines student data safeguards and UK oversight

Flint uses student personal data and student-created content for authorized educational purposes, including tracking learning progress. Schools own that information, and Flint says it does not sell it or use it to target students with advertising. Vendors supporting the educational service must follow the same privacy commitments.

The platform collects account details, AI chat histories, student work, and technical information about devices and usage. Schools determine retention periods for their data. When requested, Flint deletes or returns school data and deletes existing copies within 40 days, unless legally required to retain it. Backup copies remain isolated until deleted under its backup retention cycle.

Information for users accessing Flint through its UK service is stored in the United Kingdom, with hosting and AI processing operating in the UK or European Economic Area. Other users’ information is stored in the United States. Transfers to countries without recognized adequate protections use contractual safeguards. Sparky, Flint’s AI tutor, can suggest grades and feedback, but teachers can review and change grades; Flint does not make legally significant decisions solely through automation.

For ordinary school use in the UK and Europe, schools control pupil data and Flint acts on their instructions. Under the Department for Education’s AI Tutoring Tools Pioneers Programme, Flint and the department jointly control data used for research, development, and evaluation. Engage Compliance serves as Flint’s data protection officer, while DataRep represents it in the UK and EU.