Privacy & data
What happens to your document
Plain English, no euphemisms. This page describes exactly what the engine does with a curriculum you give it: what is processed, what is stored, what is never kept, and how to remove it.
What you give us
When you run an audit you provide one curriculum document: a PDF or Word file, or text you paste. That is the only thing the engine asks for. It does not ask for an account, a name, or an email address, and there is no sign-up.
How it is processed
The text of your document is extracted on our server and then sent to Google's Gemini API (the Generative Language API) to perform the analysis. This means the curriculum text does leave your device and is processed by Google as part of running the audit, subject to Google's own terms and data policies. The audit result is then returned to your browser.
Because the document is sent to a third-party AI processor to function, please do not upload personal data, confidential student records, or anything you are not permitted to share. A programme specification is exactly what the engine is for; a spreadsheet of named individuals is not.
What we store, and where
The engine has no server-side database. We do not keep a copy of your uploaded file or its text after the audit returns. The request is processed and then it is gone from our side.
The one thing that persists is your audit history, and it lives entirely in your own browser's local storage on this device, never on our servers. It holds only the scores and file name of past audits (so you can see a curriculum improve over time), is capped at the most recent 30, and is private to this browser. Clear your browser data, or use the “clear history” control in the app, and it is gone.
Access and security
Access to the engine is gated by a rotating link that expires on a short cycle, so the workspace is not openly reachable. The Gemini API key is held server-side only and never reaches the browser. All traffic is served over HTTPS.
What we never do
- We do not sell or rent your data; there is no data to sell; we keep none.
- We do not build an advertising or tracking profile of you.
- We do not require, or collect, any account or contact details to run an audit.
- We do not retain your document or its text on our servers after the audit completes.
Removing your data
Because the only stored data is your in-browser audit history, you are in full control of it: use the clear control in the app, or clear this site's data in your browser, and nothing remains. There is no account to delete and no server record to request the removal of.
This page describes a beta, advisory tool and reflects how the engine works today. Material changes to how documents are processed will be reflected here.