AI tool summary for DPOs and governors
Khanmigo
Khan Academy · Facts last checked 2026-10-23 · Printed 23 October 2026
AI Prefect
Staff: Amber · Use with caution
- Doesn’t say if it is a processor or controller
- Doesn’t say where data is stored
- No school DPA found
Pupils: Amber · Use with caution
- Doesn’t say if it is a processor or controller
- Doesn’t say where data is stored
- No school DPA found
| Supplier | Khan Academy |
|---|---|
| Category | tutor (student) + teacher |
| Pupil-facing | yes |
| Processor or controller | not stated |
| Where data is stored | not stated |
| Trains AI models on inputs | no - LLMs not allowed to train on student data; names/PII not shared with LLM providers |
| How long inputs are kept | not stated |
| Data processing agreement (DPA) | not stated |
| Signs individual DPAs with schools | not stated |
| UK GDPR representative / DPO | not stated |
| Minimum age | 18+ to self-register; under-18 only via district, parent link or teacher assignment |
| Key safety note | moderation flags email an adult; parents see transcripts; Khanmigo Lite (GPT) is different - OpenAI may train unless opted out; US-focused (FERPA) |
| Main use | Pupil-facing AI chatbot |
Better-rated alternatives for the same use: Flint (Amber)
Before using it: check the minimum age fits your pupils, confirm a data processing agreement is in place, switch off AI training where possible, and record the decision in your DPIA.
Sources: https://support.khanacademy.org/hc/en-us/articles/36808726375693 · https://support.khanacademy.org/hc/en-us/articles/13965308352781 · https://support.khanacademy.org/hc/en-us/articles/22396485532173
Full entry: aiprefect.co.uk/tools/khanmigo. Rating is a rules-based summary of the supplier’s published terms. “Not stated” means we could not find it in their documents. This is not legal advice and does not replace your DPIA.