Privacy notice

Bravito is run by Aspiring Education Ltd, a company registered in England and Wales. In this notice, “we” and “us” mean Aspiring Education Ltd.

For anything about your data, email support@bravito.app.

• Pupils don’t have accounts. They join with a code from their teacher and never give us an email address or password.
• A teacher chooses how much of a pupil’s name we keep: a first name and surname initial (the default), a pupil number only, or a full name. With pupil numbers, real names stay on the teacher’s own computer and we never receive them.
• Nothing about a pupil is ever sent to an AI model. AI is only used when a teacher asks for help drafting questions from their own notes.
• We don’t sell data, show adverts, or use tracking cookies.
• Our database is in Europe. Teachers can download all their data, or delete their account, from Settings.

Teacher accounts. We decide how teacher account data is used, so we are the controller for it.

Pupil information. When a school has an agreement with us, the school is the controller for its pupils’ information and we are its processor: we only use it on the school’s instructions, to run Bravito for them. When a teacher uses Bravito without a school agreement, we are the controller for the pupil information that teacher adds, and we only use it to provide Bravito to that teacher.

We don’t ask for, and teachers shouldn’t add, special category information about pupils (such as health or SEND details) or anything else not needed for the lesson.

Each teacher picks one of three options in Settings → Pupil names, for all their classes:

• First name and surname initial (default). Pupils type, for example, “Sam T”. If they type a full surname, we keep only its first letter.
• Pupil numbers only. Pupils join with a number their teacher gives them. Real names are kept in an encrypted file on the teacher’s own computer, unlocked with a key only the teacher holds. We store the numbers and never receive the names.
• Full names. For schools that are happy for full names to be stored.

A teacher can ask Bravito to draft questions or activities from their own notes, slide text or topic. That text is sent to Google’s Gemini models through Vercel’s AI Gateway to write the draft, and the teacher checks it before it is used.

No pupil information is ever sent to an AI model: not names, answers, drawings or scores. Pupils never use AI in Bravito. Please don’t paste pupils’ personal information into an AI request. Under the terms of the services we use, the text sent is not used to train AI models.

Help: signed-in teachers can ask Bravito’s Help bot how to use Bravito. Their question is sent to the same AI service to write an answer from our help pages. We keep these conversations for 12 months so our support team can follow up when the bot can’t help and improve our help pages. When you write to us, an AI may draft our reply from our help pages; a person reads and edits every reply before it is sent. The Help bot doesn’t send messages about safeguarding, a pupil, payments or personal data requests to the AI, and we never use AI to draft replies about safeguarding or a pupil.

• Contract: to provide a teacher’s account and the plan they chose.
• Legitimate interests: to keep Bravito secure, prevent misuse, fix problems, understand how the website is used in a privacy-friendly way, and answer enquiries. Where we are the controller for pupil information, our legitimate interest (and the teacher’s) is to support teaching, using the least information needed.
• Legal obligation: to keep financial records.
• Where a school is the controller, the school decides its lawful basis, usually its public task of educating pupils.

We use a small number of suppliers to run Bravito. Each has a contract with us that limits what it can do with the data.

We don’t sell data or share it for advertising. We would only share it otherwise if the law required us to, or to protect someone’s safety.

When data is handled outside the UK, it is protected by the UK’s data bridge with the US or the UK’s approved contract clauses, as set out in each supplier’s data processing terms.

• Teacher accounts and everything in them: while the account is open. When you ask us to delete your account, we delete it 14 days later (you can cancel before then). Copies in backups are gone within a further 35 days.
• Live lesson records (who joined, answers, drawings): deleted automatically 30 days after the lesson, unless the teacher saves results to a class.
• Results saved to a class, and class lists: until the teacher deletes them, archives the class and deletes it, or closes their account.
• Payment records: six years, as UK tax law requires.
• School enquiries: up to two years after our last contact, unless they become a customer.

You can ask to see, correct, delete or move your information, or object to or restrict how we use it.

• Teachers can download everything, or ask for their account to be deleted, from Settings → Your data.
• Pupils and parents: please ask the pupil’s teacher or school first, as they control the class records. You can also email us and we will help, working with the school.

We reply within one month. If you’re unhappy with how we have handled your data, please tell us first. You can also complain to the Information Commissioner’s Office at ico.org.uk/make-a-complaint or on 0303 123 1113.

Bravito is used by pupils under 18, always with a teacher. We design it to collect as little about them as possible: no accounts, no contact details, no adverts, no AI, no profiling, and no chat between pupils. Teachers see what pupils send; other pupils only see what the teacher puts on the board, without names unless the teacher chooses to show them.

How lessons are supervised is on the safeguarding page.

We use only what Bravito needs to work: sign-in storage that keeps you logged in, and storage on a pupil’s device so it can rejoin its class and keep a drawing if the page reloads. Our website analytics don’t use cookies. Because of that, we don’t show a cookie banner.

Data is encrypted in transit and at rest. Access is limited by security rules so a teacher can only see their own classes, and pupils only their own work. If something went wrong that put your data at risk, we would tell the ICO and anyone affected as the law requires. To report a security concern, email support@bravito.app.

If we change how we use data in a way that matters, we’ll update this page and tell teachers by email or in Bravito before the change takes effect.