UK GDPR & School Data Protection Notice

Privacy Policy & Data Architecture

Meowzer (meowzer.app) is engineered from the ground up with a Pseudonymised Zero-PII Database Architecture so schools, teachers, and pupils can run peer comparative judgment safely inside their own Google Workspace.

Last updated: October 2026

1. Pseudonymised Zero-PII Database

Zero student names or student email addresses are ever stored in our database

Meowzer never stores student names or student email addresses in its Firestore database:

  • While an Arena is Active: Firestore stores only pseudonymous Google Classroom identifiers (opaque numeric IDs), Elo comparative ratings, and anonymised peer/AI assessment feedback (What Went Well & Even Better If).
  • In-Memory Roster Stitching: When a signed-in teacher views an arena dashboard, student names are fetched directly from the Google Classroom API into the browser's memory for that session only and are hidden by default (Pupil 1, Pupil 2) for classroom projector safety.
  • Teacher-Initiated Archiving & Purge: When the teacher clicks Archive to Drive (or Delete), the active room, submissions, and comparison records are purged from Firestore and saved as a permanent Google Sheet and .compair.json snapshot inside the teacher's own Google Drive.

2. Teacher-Controlled Google Drive & Zero Stored Drive Keys

No background access and no server-side storage of Google Drive OAuth tokens

Meowzer never stores teacher Google Drive tokens on its servers and never accesses or modifies a teacher's Google Drive in the background when they are signed out.

Files and folders in the teacher's Google Drive—specifically Meowzer_Arena_Temp_[ROOMCODE] (used for anonymised submission clones, Desk Scanner exercise book photos, and OCR transcripts) and Meowzer Arenas (used for archived Google Sheets and .compair.json revival snapshots)—are created, updated, or removed only when the teacher explicitly initiates an action while signed in.

3. Google Workspace API Scopes & Limited Use Compliance

Strict adherence to the Google API Services User Data Policy

Meowzer's use and transfer to any other app of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements:

  • Classroom & Drive Scopes: Used strictly to list teacher courses/assignments, verify student roster membership for 1-click arena entry, create anonymised Drive copies for double-blind peer judging, pass back teacher-approved marks and feedback slips to Google Classroom, and save archive spreadsheets to the teacher's Google Drive.
  • No External AI Model Training: Student work and peer feedback processed during optional Sparkle-powered AI features (handwriting transcription, AI co-judging, and WWW/EBI synthesis via Google Gemini) are never used to train external AI models, never used for advertising, and never shared with third parties.

4. Curriculum Subject Classification & Relevant Teacher Updates (UK GDPR Art. 6(1)(f))

Pedagogical subject tagging for dashboard organisation and relevant teacher communications

  • Pedagogical Subject & Key Stage Tagging: When a teacher creates an arena, Meowzer automatically identifies the broad academic subject, Key Stage, and curriculum topic (e.g. “KS4 English Literature • Shakespeare” or “KS3 Science • Cells”) from the course name, assignment title, and rubric prompt in order to organise the teacher's dashboard and tailor assessment terminology.
  • Product Analytics & Subject-Specific Teacher Communications (Legitimate Interests): Under UK GDPR Article 6(1)(f) (Legitimate Interests) and PECR Regulation 22 (Corporate Subscribers), Meowzer associates coarse curriculum tags (subjectsTaught, keyStagesTaught, recentTopics—never student work or student PII) with the adult teacher's profile to understand subject adoption across schools and to send relevant, subject-specific teaching ideas, product updates, and department licensing options. Teachers can opt out of marketing communications at any time via their account settings or the unsubscribe link in any email.

5. School DPO Enquiries & Contact

Questions, Data Protection Impact Assessments (DPIAs), or deletion requests

Teachers can delete any active arena and its associated Firestore data immediately from the Teacher Hub at any time. For Data Protection Officer (DPO) enquiries, school onboarding documentation, or account removal requests, please contact us at: meowzer@meowzer.app.