How Atlas Study looks after your data

Last updated: 20 May 2026

Ask a privacy question Safety and safeguarding

Quick version for students

We collect the information needed to run your Atlas Study account, teach you, mark your work, keep you safe, and help your parent, guardian, or school support your learning.

We do not sell your personal data. We do not show your AI chat transcripts or wellbeing information to parents or guardians. Parents can see learning progress only where Atlas Study allows it and the visibility settings permit it.

You can ask what data we hold about you, ask us to correct it, or ask us to delete it. If you are unsure, ask a trusted adult or contact us at support@edseducation.com.

You can also read our Safety and Safeguarding page for urgent-help signposting, tutor rules, AI limits, and recording notices.

Who we are

Atlas Study is a service of EDS Education Ltd, a company registered in England and Wales with company number 11334874. EDS Education Ltd is the data controller for Atlas Study when you use our direct consumer services, parent services, billing, support, public website, and Atlas Review/Live services. That means we decide why and how personal data is used for those parts of Atlas Study.

Where a school provides or controls learner data, the school will usually be the data controller and EDS Education will usually act as the school's processor under written instructions or a data processing agreement. This controller/processor posture is reviewed before school launch claims expand.

Sahil Ahmad is the Atlas Study privacy lead and data-protection contact. Atlas Study does not currently claim a formal DPO appointment. You can contact us about privacy at support@edseducation.com.

What we collect

Account details, such as name, email address, role, and age band.
Learning data, such as subjects, progress, answers, marks, notes, flashcards, homework, and lesson evidence.
Parent and school links, such as family memberships, class memberships, and invite status.
Billing records for paid plans, handled through Stripe.
Safety and security records, such as sign-in activity, audit logs, and safeguarding review records.
Cookie and consent-audit records, including choices, consent-session identifiers, user agent, and hashed IP address.
Review/Live learning records, credit state, tutor-support records, and recording notices where those services are enabled.

Why we use it

To create and protect your account.
To provide tutoring, practice, marking, revision, and Premium family lesson tools.
To show progress to students and, where permitted, to parents, guardians, teachers, or school staff.
To process subscriptions, invoices, refunds, and plan access.
To meet legal, safeguarding, security, accounting, and consumer-rights obligations.
To improve Atlas Study where you have allowed optional analytics cookies.

Legal basis

We use different legal bases depending on the data and purpose: contract for providing the service you sign up for, legal obligation for accounting and safeguarding records, legitimate interests for security and service improvement, and consent for optional cookies and some communications.

Who can see it

Students can see their own account and learning data. Parents, guardians, teachers, school coordinators, and Atlas Study administrators can see only the parts of the service their role needs. AI chat transcripts and wellbeing data are not shared with parents or guardians through Atlas Study parent visibility controls.

Safeguarding records, school statutory records, raw report files, AI provider internals, and sensitive support records need a manual privacy review before they are shared or exported.

Suppliers we use

We use trusted suppliers to run Atlas Study, including Supabase for database, authentication, and storage; Stripe for payments; Anthropic and OpenAI for AI features; Resend for email; Vercel for hosting and analytics tooling; and GitHub for private code hosting. Some suppliers may process data outside the UK. Where that happens, we rely on appropriate transfer safeguards.

We review subprocessors and providers before new live uses, especially where children's data, AI/OCR processing, email, payments, storage, or school records are involved.

How long we keep it

We keep account and learning records while the account is active. We keep billing, audit, and safeguarding records for as long as we need them for legal, safety, dispute, and accounting reasons. We delete or anonymise data when it is no longer needed.

Review/Live recordings, if enabled, have a 28-day default retention target unless a safeguarding, dispute, legal, billing, or regulatory hold applies.

Your rights

You can ask for a copy of your personal data, ask us to correct inaccurate data, ask us to delete data, object to some uses, limit some uses, or ask for data portability. Children have data protection rights too, and we will handle requests in an age-appropriate way.

A request for a copy of personal data is called a Subject Access Request. Self-service exports are limited to safe account and learning data. Chat transcripts, wellbeing information, safeguarding information, school statutory records, Stripe internals, provider internals, and third-party records may need a manual review, redaction, and recipient-authentication check.

You can also complain to the UK Information Commissioner's Office if you are unhappy with how we use personal data.

Cookies

Strictly necessary cookies keep Atlas Study secure and signed in. Optional analytics and marketing cookies stay off until a user chooses to allow them. Cookie choices are saved with a timestamp, policy version, consent-session identifier, user agent, and hashed IP address. We do not store the raw IP address in the consent audit row.