Privacy Policy

T-Skill is run from England by its founder, [TO CONFIRM: founder's full legal name], working as a sole trader under the name T-SkiLL. That person is the data controller for Studio, the student app and tskill.co.uk. A company, T-SkiLL LTD, is being set up and will take over as controller; we will update this page before it does.

Postal address: [TO CONFIRM: trading or correspondence address]. ICO registration number: [TO CONFIRM: ICO data protection fee registration number]. We have not appointed a Data Protection Officer [TO CONFIRM: confirm]; the founder handles data protection directly. Contact: hello@tskill.co.uk.

• Account and profile: your name, email address and profile photo, which Google gives us when you sign in (Studio only offers Google sign-in), your display name, the avatar you choose, your roles, the T Level courses you are assigned to, your school or organisation, the access code you joined with, and which version of the contributor agreement you signed and when.
• Your work: lessons, slides, questions, flashcards, glossary terms and other material you create, edit, review or approve, with version history, review comments and who did what.
• Activity and security: when you were last active, an audit log of the actions you take (with the time, your account ID and email, the network (IP) address and browser details of the request), lesson locks, and logs used to diagnose problems.
• Training and recognition: your results in Studio training exercises, evidence of work you submit for review, points you earn, and any team pool payout amounts recorded for you. [TO CONFIRM: how payouts are actually paid, and where bank details are held, if anywhere]
• Outreach records: if you help tell students about T-Skill, the notes you record about the people you contact (see section 6).

Studio does not show you individual students' accounts, answers or results. Where you see how a lesson is performing, it is counted across all students.

• To run Studio and our agreement with you (performing a contract): signing you in, authoring, peer review, the approval pipeline, and recording what you are owed.
• To keep course content accurate and accountable (legitimate interests): the version history and audit log show who changed what students are taught, which matters for young learners.
• To keep Studio secure(legitimate interests): rate limiting, abuse prevention and investigating problems.
• When the law requires it(legal obligation): for example, records of payments.

You can object to anything we do on the basis of legitimate interests (section 10). We make no decisions about you by computer alone that have a legal or similarly serious effect on you.

Other contributors on your courses, reviewers, subject heads and T-Skill staff can see your display name, avatar, role and the work you do in Studio, including where contributors are ranked by activity. Only T-Skill staff can see your email address and the audit log.

Students do not see your email address or your Studio account. Lessons are published as T-Skill's course material.

Studio uses AI (Anthropic's Claude) to help draft lessons, write definitions and check content against the specification. When you use those features, the lesson material involved is sent to Anthropic to be processed. No student data is ever sent. Please do not put anyone's personal details into lesson content.

If you help tell students about T-Skill, Studio records the people you find and contact: their name, LinkedIn profile link, school, year group, T Level subject, phone number if they give it, and notes on the conversation. These are young people, so only record what the outreach screens ask for, only from what they have made public or told you, and never contact anyone who has asked us not to. The app privacy policy tells the people contacted what we hold and how to have it removed.

These companies process data for us. Each may only use it to do the job we ask, under a contract that requires them to protect it.

• Supabase: database, sign-in and file storage.
• Vercel: hosts Studio.
• Resend: sends Studio emails, such as review requests and status updates.
• Anthropic: the AI tools in section 5.
• Google: signing in to Studio.

We do not sell your personal data, and there is no advertising in Studio.

Our database is hosted by Supabase in [TO CONFIRM: the Supabase project's region]. Vercel, Resend, Anthropic and Google are based in the United States, so some data is processed there. Those transfers are protected by a safeguard UK law accepts, such as the UK Extension to the EU US Data Privacy Framework or the ICO's International Data Transfer Agreement. [TO CONFIRM: which safeguard applies to each provider]

• Your account and profile: while you are a contributor, and deleted within one month of you asking us to close your account.
• Lessons you wrote that have been published stay, because students rely on them. They are T-Skill's course material under the contributor agreement.
• The audit log and version history keep your account ID and the email address you used at the time, so changes to what students are taught stay accountable, for [TO CONFIRM: audit log retention period, for example 6 years].
• Payment records: as long as the law requires, usually 6 years for tax records.
• Confirmation links for email requests last 24 hours and work once.

Under UK data protection law you can:

• get a copy of the personal data we hold about you;
• have it corrected if it is wrong;
• have it deleted, apart from what section 9 says we keep;
• have it sent to you in a form another service can use;
• object to us using it because of our legitimate interests;
• ask us to pause using it while a disagreement is sorted out;
• withdraw any consent you have given, at any time.

Email hello@tskill.co.uk. There is no charge. We answer within one month; if a request is very complicated we may need up to two more months, and we will tell you within the first month if so.

Because anyone can send an email claiming to be you, we never act on the sender's address alone:

• We only act on the email address registered on your Studio account, and will not close or export an account for a different address.
• We send a one-time confirmation link to that registered address. It works once and expires after 24 hours. Nothing happens until it is used.
• If you did not ask, ignore the email and your account stays as it is.

A person then closes the account by hand, because contributor accounts are tied to the audit trail described above.

Studio uses cookies only to keep you signed in; it cannot work without them. It also stores your light or dark theme choice, and unsaved lesson drafts, in your own browser. There are no advertising or analytics cookies.

When we change this policy we update the date at the top. If a change affects how we use data you have already given us, we will tell you in Studio or by email before it takes effect.

Questions, or any request about your data: hello@tskill.co.uk.

If you think we have handled your data badly, please tell us first so we can put it right. You can also complain to the Information Commissioner's Office, the UK's data protection regulator, at ico.org.uk/make-a-complaint or on 0303 123 1113.