Privacy Policy

Last updated: 8 March 2026

1. What We Collect

When you use SchemeForge, we may collect:

School selection — the school you choose from the search (name and URN from public GIAS data)
Generated plans — the AI-generated curriculum content, stored so you can return to it via a shareable link
Waitlist details — if you join the waitlist: your email address, role, and any optional feedback you provide
Usage analytics — anonymous, cookie-free analytics via Plausible (page views, button clicks, referral source). No personal data is collected by Plausible
IP address — temporarily processed for rate limiting and abuse prevention. Not stored long-term

2. What We Do Not Collect

We do not collect pupil data of any kind
We do not require you to create an account
We do not use tracking cookies or advertising pixels
We do not sell or share your data with third parties for marketing

3. How We Use Your Data

To generate and store curriculum plans you request
To contact you if you join the waitlist
To understand how the service is used and improve it (via anonymous analytics)
To prevent abuse and enforce rate limits

4. Third-Party Services

We use the following third-party services:

Supabase — database hosting (EU region)
Anthropic (Claude) — AI generation. School names and public information are sent to generate plans. No personal data is sent
Cloudflare Turnstile — bot protection. Processes minimal data to verify you are human
Plausible Analytics — privacy-focused, cookie-free web analytics. No personal data is collected
SendGrid — email delivery for waitlist communications
Sentry — error monitoring. May capture technical error details but no personal data

5. Cookies

SchemeForge does not set any first-party cookies. Cloudflare Turnstile may set a strictly necessary cookie to verify you are human. We do not use any advertising or tracking cookies.

6. Data Retention

Generated plans are retained while the service is active
Waitlist data is retained until the product launches or you request removal
IP addresses used for rate limiting are not stored long-term

7. Your Rights

Under UK GDPR, you have the right to access, correct, or delete your personal data. To exercise these rights, contact us at hello@schemeforge.co.uk.

8. Children’s Privacy

This service is designed for use by education professionals, not children. We do not knowingly collect data from anyone under 13.

9. Changes to This Policy

We may update this policy from time to time. Changes will be reflected on this page with an updated date.

10. Contact

For any privacy-related questions, contact us at hello@schemeforge.co.uk.