AI tool summary for DPOs and governors
Leonardo.Ai
Canva (Leonardo.Ai) · Facts last checked 2026-10-23 · Printed 23 October 2026
AI Prefect
Staff: Red · Not recommended for school data
- Trains on what you type by default, with no school-level opt-out stated
Pupils: Red · Not recommended for school data
- Trains on what you type by default, with no school-level opt-out stated
| Supplier | Canva (Leonardo.Ai) |
|---|---|
| Category | image generation |
| Pupil-facing | yes - 13+ with parental consent |
| Processor or controller | not stated |
| Where data is stored | not stated |
| Trains AI models on inputs | YES - free-tier images public and used for training; paid Private Mode excluded |
| How long inputs are kept | not stated |
| Data processing agreement (DPA) | not stated |
| Signs individual DPAs with schools | not stated |
| UK GDPR representative / DPO | not stated |
| Minimum age | 13 (parental consent under 18) |
| Key safety note | not stated |
| Main use | Image generation |
Better-rated alternatives for the same use: Adobe Firefly (education) (Amber)
Before using it: check the minimum age fits your pupils, confirm a data processing agreement is in place, switch off AI training where possible, and record the decision in your DPIA.
Sources: https://leonardo.ai/terms-of-service · https://leonardo.ai/privacy-policy
Full entry: aiprefect.co.uk/tools/leonardo-ai. Rating is a rules-based summary of the supplier’s published terms. “Not stated” means we could not find it in their documents. This is not legal advice and does not replace your DPIA.