Privacy Policy

MindSprout collects only the data necessary to support school wellbeing tracking. Lawful basis: We process student data on the lawful basis of the school's public task. Schools remain the data controller; MindSprout is the data processor. What we store: school details, staff accounts (name, email, role), student first/last name, year group, an internal student code, a hashed PIN, check-in responses and computed wellbeing scores. We do not sell data. We do not train AI models on student responses. Retention is configurable per school. Subject access requests should be directed to your school's data protection officer.