eò las

The short version

We only collect the data we need to run eòlas. We don't sell it, we don't use it for advertising, and we never share it with anyone who isn't directly involved in delivering the service to you.

This page explains things in plain language. If you want the full legal detail, read our Privacy Policy. If you have a question, contact us.

What we collect

The data eòlas holds about you

person

Account data

Your name, email address, mobile number, and the type of account you have (educator, student, or parent/guardian).

Why we need it: So you can log in, receive notifications, and we know what features to show you. Your mobile number is used only for multi-factor authentication (the text message we send to verify your device).

apartment

School and role data

The name of your school (for educators and parents), your subjects (for educators), and your age range (for students — broad category only, e.g. 13–15).

Why we need it: To show relevant content and to allow schools to connect with the right students and educators. We never use this data for profiling or advertising.

description

Student submissions

The written work (essays, practice paper answers) that students upload for marking. Also the AI-generated marks and feedback, and any adjustments made by the educator.

Why we need it: This is the core purpose of eòlas — we can't mark work without it. Submissions are only ever seen by the student, their teacher, and any linked parent. We do not use identifiable student work to train AI models.

credit_card

Payment data

When educators buy credits, we record the transaction amount and date. Card details are handled entirely by Stripe — we never see or store your card number.

Why we need it: To maintain credit balances and comply with accounting requirements (we keep payment records for 7 years as required by HMRC).

computer

Technical / usage data

Your IP address, browser type, and which pages you visit. This is standard for web services and collected automatically.

Why we need it: For security (detecting suspicious activity) and to understand how people use eòlas so we can improve it. IP addresses are not shared and are deleted after 90 days.

Who can see what

Data visibility within eòlas

Data type Educator Student Parent eòlas team
Your own account data Yes Yes Yes Support only
Student name (in their project) Yes Own only Own child Support only
Student submission content Yes Own only If enabled Support only
AI marks and feedback Yes After release If enabled Support only
Other students' data Own class No No No
Payment records Own only No No Finance only

"If enabled" means parent visibility must be switched on by the educator for the specific project. "Support only" means eòlas staff may access data only to resolve a specific support issue, with appropriate safeguards.

Third parties

Who we share data with — and why

We never sell your data. We share it with third-party service providers only where necessary to run eòlas, and only under formal Data Processing Agreements:

psychology
Google Cloud (Vertex AI)

Processes student submissions to generate AI marks and feedback. Submissions are not used to train Google's models. Data is transmitted securely via API.

payments
Stripe

Handles all payment processing. Your card details go directly to Stripe — eòlas never sees or stores them. We receive a payment confirmation and your billing email only.

sms
ClickSend

Sends the SMS text message used for multi-factor authentication device verification. Only your mobile number and the verification link are shared.

security
Cloudflare

Powers the CAPTCHA on login and registration forms to prevent automated spam accounts. Only form interaction data (no personal data) is processed.

groups
Microsoft (optional)

Used for SSO sign-in and Teams assignment integration, if you choose to connect. Your school's Microsoft account details are used only for authentication and to import your own class's submissions.

dns
Failte.dev (hosting)

Our web hosting provider. All data is stored on their EU-based servers. They provide infrastructure only and do not have access to read your data.

schedule

How long we keep it

  • Account data: while your account is active + 2 years
  • Student submissions: while account is active
  • Payment records: 7 years (HMRC requirement)
  • Security logs (IP addresses): 90 days
verified_user

Your rights

  • Request a copy of your data
  • Ask us to correct anything inaccurate
  • Ask us to delete your account and data
  • Object to how we process your data
  • Complain to the ICO if you're unhappy

Questions about your data?

If you want to access, correct, or delete your data — or if you just have a question about how we handle it — get in touch. We'll respond within 30 days.

Or email: hello@failte.dev with "Data Request" in the subject line.