AI tool summary for DPOs and governors
Kahoot! (AI features)
Kahoot! ASA · Facts last checked 2026-10-23 · Printed 23 October 2026
AI Prefect
Staff: Green · Lower risk: fine to use with normal checks
- Processor, no training on inputs, UK/EU storage or stated transfer safeguards, school DPA available
Pupils: Amber · Use with caution
- Minimum age children = under 13 US / under 16 elsewhere; limited data collected: not for younger pupils; check consent
| Supplier | Kahoot! ASA |
|---|---|
| Category | quiz |
| Pupil-facing | yes |
| Processor or controller | processor for customer data (DPA) |
| Where data is stored | EU/EEA and UK; outside these under SCCs / UK IDTA or addendum where no adequacy (DPA s.9) |
| Trains AI models on inputs | no - platform data not used to train models; vendors not allowed |
| How long inputs are kept | not stated |
| Data processing agreement (DPA) | https://trust.kahoot.com/dpa/ |
| Signs individual DPAs with schools | yes - standard DPA applies where Kahoot! is a processor |
| UK GDPR representative / DPO | not stated |
| Minimum age | children = under 13 US / under 16 elsewhere; limited data collected |
| Key safety note | Kahoot! did NOT opt out of Azure abuse monitoring (prompts may be retained by Microsoft for review); users told not to enter personal data |
| Main use | Quizzes and classroom games |
Before using it: check the minimum age fits your pupils, confirm a data processing agreement is in place, switch off AI training where possible, and record the decision in your DPIA.
Sources: https://trust.kahoot.com/privacy-policy/ · https://trust.kahoot.com/ai-powered-features-in-kahoot/ · https://trust.kahoot.com/dpa/
Full entry: aiprefect.co.uk/tools/kahoot. Rating is a rules-based summary of the supplier’s published terms. “Not stated” means we could not find it in their documents. This is not legal advice and does not replace your DPIA.