Machine Learning for Kids is created and operated by a single individual (Dale Lane) in the United Kingdom.

The service is intended for use in schools, coding clubs, and similar educational settings, under the supervision of a teacher or responsible adult.

The information in this section is provided for informational and transparency purposes only. It is not a legal document, contract, or data processing agreement, and does not constitute legal advice. Schools and organisations remain responsible for ensuring their own compliance with applicable laws and regulations.

These roles are described for clarity and transparency based on typical GDPR definitions, and do not constitute a formal legal agreement or legal determination of data controller / processor status, which may vary by jurisdiction.

For the purposes of data protection:

• Schools and coding clubs act as the data controller for any student data entered into the system.
• Machine Learning for Kids acts as a data processor, providing the technical platform that enables teaching and learning activities.

Teachers and coding club leaders are responsible for deciding how the service is used and what data students enter into it.

Machine Learning for Kids can be used in two different ways:

Logged-in Use (Teacher-Managed Accounts)

• Teachers create and manage an account for their school or class.
• Teachers create and manage student accounts.
• Student accounts do not require email addresses or real names.

“Try it now” (Temporary, Anonymous Use)

• No login is required.
• No personal information is collected.
• All projects and data are stored temporarily and automatically deleted after four hours.
• Cookies are not required.

This option allows schools to use the site without creating accounts or storing any data on the service long-term.

Teacher Accounts

For teacher accounts, Machine Learning for Kids stores:

• Username
• Email address

This information is used only for account management to enable password reset.

Student Accounts

For student accounts, Machine Learning for Kids stores:

• Username only

No email addresses, real names, or contact details are collected for students.

Teachers are strongly encouraged to use generic, non-identifying usernames (for example: student1, groupA, etc.) so that students cannot be identified outside of their school or class.

Students cannot create their own accounts. Students cannot delete their own accounts. Students cannot reset their own passwords because no contact information for them is stored.

Machine Learning for Kids relies on the following third-party services for essential technical functionality:

Auth0 (User Authentication)

Auth0 manages login and account authentication.

For logged-in users only, Auth0 stores information such as:

• IP address used during the most recent login
• Browser type

This information is necessary for providing the service and is not used for tracking, profiling, or monitoring individual users. It is not routinely accessed by Machine Learning for Kids and is only available if required for troubleshooting.

More details about Auth0 data privacy and compliance can be found at auth0.com

No information is sent to Auth0 about "Try it now" users.

Sentry (Error Monitoring)

If a technical error occurs in the web browser, Sentry may capture:

• Username
• IP address
• Browser type
• Technical details describing the error

This information is used solely to diagnose and resolve technical issues.

More details about Sentry data privacy and compliance can be found at sentry.io

Cabin (Usage Analytics)

Cabin is used to monitor overall site usage (for example, what types of browsers and devices are used) in order to improve the service.

Cabin Analytics is a privacy-focused analytics platform, that does not use cookies, does not track users across websites, and does not share data with advertising networks or other third parties.

Only minimal, anonymised usage data is collected, and this is compliant with GDPR, CCPA, and other privacy regulations.

Cabin Analytics is only used for high-level, anonymous usage monitoring and not for profiling, tracking individual users, or advertising.

More information about Cabin can be found at withcabin.com

When creating a project, students choose where their project data is stored:

In the cloud

• Training data and projects are stored in a PostgreSQL database hosted on IBM Cloud in Dallas, United States.
• The site administrator has access to this data solely for the purpose of enabling students to access and work on their own projects.
• Training data is not published, sold, or shared with other users or third parties, except as described elsewhere in this document.

On your computer

• Project data is stored locally in the user's web browser using IndexedDB.
• No project data is stored on the Machine Learning for Kids servers.
• This option allows schools to retain full control over student data.

Schools may choose which storage option best aligns with their internal data protection policies. Schools with particularly strict or sensitive data requirements may choose to restrict their use to the local storage option.

For text-based machine learning projects only, models are created using IBM Watson Assistant.

• When students train a model, a copy of their training examples is submitted to IBM Watson.
• Teachers can choose the geographic region of the IBM Watson service if they create their own API keys.
• Machine Learning for Kids explicitly requests an opt-out so that IBM does not use student training data to improve its services.

IBM provides GDPR guidance for Watson Assistant, which applies to the use of the service within Machine Learning for Kids. In line with this guidance, students should be advised not to include personally identifiable information in training examples.

Other machine learning project types (e.g. images, sounds, numbers, etc.) do not require any data to be submitted to IBM Watson.

Cookies are used only where required for login functionality provided by Auth0.

Cookies are required only for logged-in teacher and student accounts.

"Try it now" users do not require cookies.

No tracking or advertising cookies are used.

Machine Learning for Kids is designed for educational use and is expected to be used by children.

• Students cannot create their own accounts.
• Teachers and schools are responsible for creating and managing student accounts.
• Teachers and schools are responsible for obtaining parental consent where required by law.

Because no identifying information is collected for students, the amount of personal data processed is minimised.

Logged-in Accounts

• No automatic deletion takes place.
• Students can delete their own projects.
• Teachers can delete individual student accounts (which deletes all associated projects).
• Teachers can delete the class account entirely (which deletes all students and projects).

As such, schools remain in control of how long data is retained.

"Try it now" Sessions

All data is automatically deleted after four hours.

• HTTPS is used throughout the site to encrypt data in transit.
• Access to stored data is restricted to authorised systems and personnel.
• Third-party services used by Machine Learning for Kids (Auth0, Sentry, IBM Cloud, IBM Watson) follow industry-standard security practices.

Machine Learning for Kids is designed to support schools in meeting data obligations by:

• Minimising the collection of personal data
• Avoiding the collection of student contact details
• Giving teachers control over account creation, access, and deletion
• Ensuring student data is not used for secondary purposes
• Offering a local-storage-only option for schools that require it

For questions about privacy, data protection, or compliance, schools may contact Dale Lane at groups.google.com/g/mlforkids

I aim to respond to questions within 48 hours.