Safety and privacy

1. What does GoYou know about your students?

As little as possible: only what is needed to teach, and to make the material fit the student’s interests.

Logging in

For you: email address and an encrypted password. For your student: first name, surname and a password of their own choosing, plus an email address or a username that we create. A student does not need to have an email address.

Your profile as a teacher

First name, school type, your subjects and levels, the classes you create and how you teach.

Your student’s profile

First name, an avatar the student sets up themselves, and whatever the student fills in about preferences and interests. We only use that to connect the lesson and the tutor to that student’s own world.

Work and progress

Answers to tasks, how far along the student is, and the conversations with the tutor.

Usage data

Login times, timestamps and technical logs, needed for security, troubleshooting and preventing misuse.

That is all. No grade lists from your school’s records, no home situation, no addresses, no dates of birth.

2. How do you keep an AI tutor in check?

The tutor does not make up the lesson. It works from what you have prepared: the steps, the material and the examples are already in there before the first student starts. You review that beforehand and change it if you disagree. What is not in there, it cannot do.

If a student gets stuck, the question is not made easier. The question is made smaller: first feedback, then a hint, then the question in pieces, and finishing with what did go well. The bar for each step is the same for every student. The way to get there is not.

If the tutor does not know an answer, it tells the student so and passes the question on to you, the teacher. It only talks about what you have approved.

3. And if a student shares something heavy?

In citizenship lessons or mentoring, that sometimes happens. We never ask about it and we do not build a profile with it. It stays inside the protected environment of that student and you.

If a message points to a concern, you see that in your class overview, with the piece of text alongside so you can see what is going on. GoYou does not draw any conclusions and does nothing further. You, the teacher, know that student, and you decide what is needed.

4. Who can access your class’s work?

You, the teacher, and your students, each only their own work. No one else.

That is enforced in the database itself, so it is more than an agreement: on every request, the system first checks who you are. A colleague does not see your lessons unless you share them.

5. Where is that data stored?

In Frankfurt: the database, the login service, the file storage and the servers that run GoYou. Email goes through a French provider. All traffic is encrypted and stored data is encrypted.

All student data is processed by a European supplier.

The teaching material itself is created by an American supplier. That supplier receives your lesson request and the lesson content, and no student data.

Who our suppliers are, what we use them for and where they process data is set out in the data processing agreement. We send it to any school that asks for it, even if you are not a customer yet.

If that list changes, we tell the schools we have an agreement with in advance, so that they can object.

6. Does anything go to an AI model?

Yes, otherwise there is no lesson and no tutor. What goes there is what the task needs: for a lesson, your request and the lesson content; for a tutor conversation, the conversation itself plus what that student likes and how far along they are.

What does not go there: email addresses, passwords, class lists and your school’s administrative records. Nor a student’s name. Where that name belongs in a text, a placeholder is sent instead, and the real name is only filled in on that student’s own screen. So the tutor simply addresses your student by name, without the model ever receiving that name.

If we switch model or supplier, you hear about it beforehand. Which suppliers they are is set out in the data processing agreement.

7. Is it used for training?

No.

The data that comes in through GoYou is not used for training. We do not do that and our suppliers do not do that. The data is only used to create the lesson or give an answer.

With the European supplier that processes all student data, we have also agreed zero data retention, recorded in writing. This means that a tutor conversation disappears from that supplier once the answer is given, so it does not stay behind in a log file either, where something could still be done with it later.

To improve GoYou, we look at anonymised data, such as how often a teaching activity is chosen and where teachers change their lessons, so that we can learn from it. It contains nothing that can be traced back to a person.

8. How long do you keep the data?

Two years after the last activity, and then it is gone. One period for everything: accounts, profiles, teaching material, completed work, tutor conversations and log files, of students and of teachers.

If you want your data erased sooner, we arrange that. If the partnership ends, the school gets the data back or we destroy it, whichever the school wants.

9. What if something does go wrong?

• Daily backups, and every week an encrypted copy outside the platform. That way we do not depend on a single supplier to get data back.
• The restore procedure is tested regularly, every quarter. We actually restore a backup and count whether everything is back, down to and including the access controls. A backup you have never restored is an assumption.
• We log what happens, so that what was done can be traced afterwards.

In the event of a data breach

We report data breaches to the school without undue delay: what happened, which data is involved, what the consequences may be and what we are doing about it. The school then makes any notification to the Autoriteit Persoonsgegevens, the Dutch Data Protection Authority. If you suspect a breach or a weak spot yourself, report it to security@goyou.io.

10. Who is responsible for what is in a lesson?

GoYou makes the material, you as the teacher approve it and you teach the lesson. That puts the responsibility for the content with you and with your school, just as with any other material you use in class.

11. For your pupil support coordinator, school board or purchaser

The data processing agreement

We enter into the Model Verwerkersovereenkomst (the model data processing agreement) that belongs to the Convenant Digitale Onderwijsmiddelen en Privacy, the Dutch covenant on digital educational resources and privacy, with the standard annexes: a privacy notice (what is processed, for what purpose and for how long) and a security annex (which technical and organisational measures we take). You can request it via privacy@goyou.io, even if you are not a customer. If a school board signs for several schools, we include those schools in the annex.

Before anything is signed

Then the data processing agreement that is part of our terms and conditions applies: a teacher who invites students accepts it on behalf of the school. That way the school’s control is established from the first student, in a pilot too.

Roles and the covenant

The school is the controller, GoYou is the processor and acts on the school’s instructions. We work according to the agreements in the covenant and use the accompanying model agreement with annexes. Among other things, this means that the school keeps control over the data, that we only process on instruction, and that security and data breaches are dealt with as the covenant prescribes.

Rights of students, parents and teachers

You request access, correction or deletion from the school: the school is the controller. We help the school meet those requests within the statutory time limits. In GoYou itself, a student sees which profile the tutor uses, and can change it themselves.

Accessibility

Accessibility is a starting point in how we build: sufficient colour contrast, usable with the keyboard, working on a small screen and with text that scales.