Flint
AI tool summary for DPOs and governors. Flint · Facts last checked 2026-10-23 · Printed 24 October 2026
AI Prefect
Staff: Amber · Use with caution
- Doesn’t say whether it trains on what you type
- Data may leave the UK/EU; safeguards stated but no school DPA found
- No school DPA found
Pupils: Amber · Use with caution
- Doesn’t say whether it trains on what you type
- Data may leave the UK/EU; safeguards stated but no school DPA found
- No school DPA found
| Supplier | Flint |
|---|---|
| Category | tutor + teacher |
| Pupil-facing | yes |
| Processor or controller | processor for pupil data via schools; controller for teacher and staff data and self sign-ups; joint controller with DfE for the Pioneers Programme |
| Where data is stored | UK for UK schools (AWS London; AI requests in AWS European regions); US for everyone else; other transfers under SCCs/UK addendum |
| Trains AI models on inputs | not stated |
| How long inputs are kept | school data deleted/returned within 40 days of request; AI processors zero-retention |
| Data processing agreement (DPA) | not stated |
| Signs individual DPAs with schools | not stated |
| UK GDPR representative / DPO | DPO: Engage Data Consulting (dpo@engagecompliance...) |
| Minimum age | age check for self-sign-up (country minimum, not stated) |
| Key safety note | in DfE AI Tutoring Tools Pioneers Programme (joint controller for programme data); publishes DfE AI safety standards page |
| Main use | Pupil-facing AI chatbot |
Before using it: check the minimum age fits your pupils, confirm a data processing agreement is in place, switch off AI training where possible, and record the decision in your DPIA.
Sources: https://flintk12.com/privacy-policy · https://www.flintk12.com/privacy-policy · https://www.flintk12.com/subprocessors
Full entry: aiprefect.co.uk/tools/flint. Rating is a rules-based summary of the supplier’s published terms. “Not stated” means we could not find it in their documents. This is not legal advice and does not replace your DPIA.