Privacy & Safeguarding
How Vuplo handles student data, keeps schools isolated, and supports GDPR and Data Protection Act readiness.
Isolated by school
Each school is a separate tenant. No data crosses between schools.
Minimal data
Students don't need email accounts. We store only what's needed to learn.
Safeguarding first
Role-based access, audit logs and private media keep students safe.
School-level data isolation
Every school on Vuplo is a separate, fully isolated tenant. Students, teachers and administrators only ever see records belonging to their own school. Vuplo never mixes, shares or cross-references data between schools. A teacher at one school cannot access, search or discover data from another school's students, classes or analytics.
Student data handling
Vuplo stores the minimum personal data needed to operate: student first names, year groups and class memberships. Students do not need email addresses to sign in. By default, students identify themselves with their name and a school-issued student number matched against the school's authorised roster. Schools can configure additional sign-in methods if they choose.
Role-based access
Access within a school is strictly governed by role. Students see only their own work and class activity. Teachers see their own classes and students. School administrators manage their school's members, classes and settings. No student can see another student's private data, grades or behaviour records.
Data storage and retention
All data is stored on encrypted, access-controlled infrastructure. Schools can request export or deletion of their data at any time. When a school leaves Vuplo, their data is removed on a defined schedule. Uploaded media (photos, videos, voice recordings) is stored privately and is only accessible to authorised members of the same school.
AI and student data
When a student interacts with Vuplo's AI tutor, the conversation context is used to provide a helpful, age-appropriate response. Vuplo does not use student data to train external AI models. Schools can disable AI features entirely per their own policy.
Audit logging
Important administrative actions, such as member changes, class creation and role assignments, are recorded in an audit log accessible to school administrators. This supports safeguarding reviews and internal accountability.
GDPR & DPA readiness
Vuplo is built to support schools' obligations under the GDPR and the UK Data Protection Act.